Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDA18C80AC2011F1BCBD69B7CE1D38B0.roa
File:                     CDA18C80AC2011F1BCBD69B7CE1D38B0.roa (raw, json)
Hash identifier:          PeyKreDMJxYePKmSZgbiUj91b28kRPNtxYEsGg18ywU=
Subject key identifier:   00:DA:47:2D:CF:E1:CF:A2:D7:47:90:23:4B:64:C1:1E:1E:F8:17:C4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E6A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDA18C80AC2011F1BCBD69B7CE1D38B0.roa
Signing time:             Wed 09 Sep 2026 07:33:52 +0000
ROA not before:           Wed 09 Sep 2026 07:33:48 +0000
ROA not after:            Wed 16 Dec 2026 07:33:48 +0000
asID:                     142002
IP address blocks:        154.83.26.0/24 maxlen: 24
                          154.83.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124576 (0x1e6a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  9 07:33:48 2026 GMT
            Not After : Dec 16 07:33:48 2026 GMT
        Subject: CN=6aa10be0-be0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1e:15:40:9c:52:94:48:a8:f1:69:64:56:1a:
                    51:72:38:1b:73:0c:4d:37:0a:75:2b:6b:61:51:5a:
                    e6:6f:18:b1:16:81:f9:d4:b2:02:6b:14:f4:74:09:
                    a9:32:69:08:c8:42:92:5a:bd:0c:34:7e:21:ff:d0:
                    fc:5c:b9:6d:07:44:2c:60:63:bf:59:3a:ba:3b:40:
                    66:35:b5:dd:14:39:bf:da:12:0a:48:fd:35:ef:2c:
                    83:48:25:43:0a:a9:82:f5:9a:d1:bd:42:b4:3e:fc:
                    18:eb:94:d8:51:41:d1:30:4c:7e:f2:9c:7d:ff:79:
                    a3:38:7c:3e:03:22:4e:ca:77:cf:d1:89:55:3a:29:
                    59:f1:c0:22:6f:a5:44:a7:e7:be:ab:d6:6e:80:81:
                    38:39:1b:08:c4:95:80:34:80:d5:8c:e1:e7:da:a5:
                    0c:aa:f6:5a:b0:47:f5:3c:da:90:3a:09:8f:ec:0c:
                    4c:ea:dd:de:cb:7c:2e:c3:a5:e9:97:9b:95:29:c2:
                    ea:da:5f:89:06:8c:ff:6f:e4:19:dd:6d:88:b3:27:
                    a8:02:9c:e4:06:de:5b:f8:95:3f:b8:2a:38:a8:0b:
                    ac:8e:63:7d:43:f0:e1:5b:d5:ea:84:45:97:83:c0:
                    7a:7c:1c:70:c0:69:3d:a3:3a:a7:5c:0f:f4:8d:e2:
                    70:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DA:47:2D:CF:E1:CF:A2:D7:47:90:23:4B:64:C1:1E:1E:F8:17:C4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDA18C80AC2011F1BCBD69B7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:6d:20:e9:ab:2d:3e:ab:27:a1:e0:5b:bf:ff:83:be:aa:75:
         8b:19:9d:09:4c:c4:b8:12:65:53:5c:6d:4e:13:70:18:59:7b:
         be:ee:5c:ab:97:3b:1a:78:a2:99:34:e5:c8:4a:6f:0d:f2:fe:
         15:2c:41:8a:13:bd:6f:c5:90:45:d4:55:1f:f6:c5:2d:a8:7c:
         fa:4c:93:aa:e7:7d:54:84:06:57:b7:71:af:ea:1a:8c:87:a9:
         aa:b6:e0:7c:3a:c8:76:3a:b0:b1:ad:36:d2:c2:04:1b:85:d6:
         7d:e2:ce:f1:1f:ae:1d:de:a5:3b:d4:5a:8c:d9:77:da:ff:ed:
         69:d6:f0:b9:b3:87:b8:af:da:76:2b:1f:f2:44:d1:11:44:54:
         ca:68:16:2e:7b:2b:80:70:aa:fe:cb:68:19:13:03:66:9c:db:
         f6:a7:51:1e:15:8b:60:65:38:6b:79:64:c1:ac:17:65:bc:8f:
         7a:30:4e:99:2a:59:05:fa:56:a6:a1:a9:0e:da:81:ef:de:23:
         55:09:3c:d2:ae:94:55:dd:ec:fa:93:34:6b:29:ca:78:d1:76:
         a5:73:96:b3:59:5b:4d:91:2e:7c:89:a4:cc:04:02:fe:da:d0:
         26:53:33:d9:06:f9:ae:31:3d:05:5a:a7:f2:35:36:69:bd:af:
         2b:c3:ba:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----