Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92C8C99AB3EE11F18E207ACFCE1D38B0.roa
File:                     92C8C99AB3EE11F18E207ACFCE1D38B0.roa (raw, json)
Hash identifier:          3THXhji6UO27jT08Bzv36BM+1zx7i5Ucrt+siaMNhYM=
Subject key identifier:   60:46:C5:F2:15:C9:01:45:94:3A:66:2E:C2:0E:78:49:EF:52:9F:B4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E8C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92C8C99AB3EE11F18E207ACFCE1D38B0.roa
Signing time:             Sat 19 Sep 2026 05:54:27 +0000
ROA not before:           Sat 19 Sep 2026 05:54:23 +0000
ROA not after:            Tue 06 Oct 2026 05:54:23 +0000
asID:                     274913
IP address blocks:        154.88.180.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125124 (0x1e8c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 19 05:54:23 2026 GMT
            Not After : Oct  6 05:54:23 2026 GMT
        Subject: CN=6aae2393-10ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0e:0e:37:ab:0f:1e:f5:af:4c:3b:1f:5b:fd:
                    17:91:1b:ab:fd:c9:78:fe:1d:b4:59:74:1a:6a:56:
                    3f:d1:b8:8b:df:20:95:cf:59:f8:f6:c3:74:91:22:
                    87:a3:a1:90:d0:3c:7c:81:7b:00:2d:c1:3d:e8:fc:
                    dd:39:a8:8c:20:da:bd:cf:a5:96:b8:87:b4:e2:1b:
                    1f:68:17:30:28:32:79:c2:25:61:b6:dd:88:f0:8a:
                    a6:a8:97:67:84:d8:e6:4f:39:b5:a6:3c:f0:a3:1b:
                    b6:55:50:9f:28:40:58:df:e5:d6:eb:a2:d1:11:38:
                    02:32:2a:31:ce:e9:de:7f:45:5a:ab:e6:e0:d1:c0:
                    22:14:cc:37:00:94:45:69:ca:f5:10:49:a5:e1:55:
                    76:9e:ea:bb:8e:b7:6a:9e:a1:11:cc:4f:49:c5:81:
                    47:58:a2:14:24:f8:ac:5c:8a:c3:11:a6:01:f6:70:
                    fe:f3:f7:fb:8c:48:89:1c:c6:59:47:3c:fa:95:bc:
                    4f:83:b6:89:cb:09:e4:22:c3:7d:c2:0c:90:07:ac:
                    6c:a2:73:61:fe:17:67:01:92:de:37:54:76:ab:99:
                    5d:33:e5:75:38:eb:a7:c0:2d:af:b0:de:79:45:43:
                    96:87:26:47:ea:02:8b:85:b1:3d:a1:aa:67:e2:7c:
                    a8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:46:C5:F2:15:C9:01:45:94:3A:66:2E:C2:0E:78:49:EF:52:9F:B4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92C8C99AB3EE11F18E207ACFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:c1:1e:03:bd:96:2e:8e:60:ff:d8:44:8f:fd:05:c0:bd:40:
         df:ce:0b:88:e8:d0:c2:bd:f2:c5:b6:e8:19:7a:08:02:47:ba:
         65:f1:30:f4:1e:1a:d4:6e:c5:f0:10:39:20:0c:c1:5f:17:f1:
         4c:a4:a3:bb:b2:e4:f7:cd:39:d6:96:ab:88:e7:92:55:d9:d6:
         fd:6e:51:d0:d4:97:ca:0b:b2:7a:37:13:c8:79:40:32:8c:a2:
         27:a3:fc:16:bd:5e:bd:03:d5:6f:f8:8d:9e:8b:ee:7f:79:aa:
         dc:75:da:a8:ed:4f:53:e2:1b:5f:c8:fb:23:32:23:00:74:4e:
         05:03:a2:74:22:99:a6:17:ff:46:2e:bf:37:f5:a0:25:06:5c:
         e2:46:6a:11:48:b0:7b:22:b6:4b:af:b3:3a:d0:61:ab:91:99:
         92:10:d6:c1:4c:fe:05:a8:6a:e9:19:c4:13:91:b4:b4:0c:b1:
         3e:40:f0:83:17:6e:9e:98:24:ed:7d:80:cd:aa:9f:8e:28:cc:
         c8:00:5e:7e:6a:bc:84:2d:94:05:35:5a:54:c4:e2:f5:c3:9d:
         d3:25:63:d9:c9:9a:04:4d:81:c1:2c:05:14:ab:a0:83:e9:37:
         e0:95:54:9a:46:51:0d:cd:a7:f0:76:50:2c:10:48:a5:1d:60:
         4b:e1:49:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----