Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBB8182AB4DE11F1A7036C03CF1D38B0.roa
File:                     FBB8182AB4DE11F1A7036C03CF1D38B0.roa (raw, json)
Hash identifier:          qFgp/yjgn/upkdVYhKyAO/q8jgajco5RfyKTXDeepEs=
Subject key identifier:   2C:1E:AF:DA:20:21:AA:68:84:56:CD:C1:CF:C2:11:6C:EB:9C:1E:70
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E919
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBB8182AB4DE11F1A7036C03CF1D38B0.roa
Signing time:             Sun 20 Sep 2026 10:35:23 +0000
ROA not before:           Sun 20 Sep 2026 10:35:19 +0000
ROA not after:            Tue 27 Oct 2026 10:35:19 +0000
asID:                     55320
IP address blocks:        154.93.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125209 (0x1e919)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 20 10:35:19 2026 GMT
            Not After : Oct 27 10:35:19 2026 GMT
        Subject: CN=6aafb6eb-4f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a6:d7:a0:d6:80:81:bf:a4:92:e8:7c:26:f0:
                    6d:65:d7:52:f1:3d:91:13:86:32:cc:bf:76:b1:b5:
                    7a:a6:4b:46:bc:f1:4d:3b:06:76:14:49:fe:6f:d9:
                    96:99:47:71:db:46:77:8f:0e:89:ff:4f:df:7a:91:
                    24:68:ab:c8:bc:50:57:93:64:88:1d:cb:11:2e:74:
                    07:27:c9:56:cf:e3:f2:da:42:70:a5:bc:84:d2:87:
                    e1:45:84:e1:0a:65:04:4a:7b:96:61:f8:52:4e:7f:
                    bc:a5:e7:13:90:aa:29:2c:9d:90:a4:59:4e:bc:d8:
                    65:e1:d5:5a:9e:74:7f:69:10:f1:41:26:5e:41:d8:
                    0b:8c:0e:a0:8f:ec:95:42:b3:d0:db:60:bf:b5:07:
                    0d:d6:ee:7c:49:2f:5b:d7:5c:94:1e:1f:51:b7:d8:
                    ef:96:1a:4d:91:0c:86:d5:cd:b1:4f:77:32:99:fa:
                    48:7d:1a:97:69:6c:f4:6f:cd:42:49:df:bb:36:fa:
                    07:c7:8e:d4:af:17:cc:79:7a:56:25:40:71:29:38:
                    44:3e:64:1b:7e:f2:25:85:ad:d5:15:0b:bc:4f:77:
                    ed:8e:d5:53:bc:d8:fb:9c:47:ce:8b:bd:7d:72:c9:
                    87:e7:52:5c:81:5a:71:7a:e9:9f:10:a7:69:f3:82:
                    21:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1E:AF:DA:20:21:AA:68:84:56:CD:C1:CF:C2:11:6C:EB:9C:1E:70
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBB8182AB4DE11F1A7036C03CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.93.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:36:c5:30:bc:34:02:12:58:25:6d:ea:f2:81:20:50:1d:ba:
         72:fe:d5:9a:f0:b2:f1:ba:72:92:00:44:7c:ad:71:54:99:1d:
         09:53:f1:62:45:be:a9:32:4d:f3:b1:99:f7:ae:48:7f:9d:52:
         ec:55:50:17:65:64:05:9c:23:92:78:5f:d4:ff:e6:d1:bc:83:
         3c:4b:a8:01:a1:35:cb:97:3c:5c:9e:f3:7b:fa:04:a7:ed:f9:
         24:00:00:04:af:62:74:1e:29:57:81:c5:6e:b1:85:cf:a2:16:
         37:b6:79:fb:6a:8b:83:1b:9e:ec:d7:3e:37:57:71:b8:e3:24:
         7e:55:8b:85:29:d7:f4:a5:1d:1f:8d:93:70:0e:2f:83:fd:45:
         16:a8:23:13:05:7c:e1:c6:81:83:6b:ee:88:0e:7e:28:7d:b2:
         ff:c6:7e:56:f1:df:80:40:13:f2:13:04:00:43:88:7b:a2:4e:
         26:e3:39:a6:ff:eb:47:35:63:7d:fe:a5:ee:a0:c7:f3:03:b7:
         85:d4:c6:71:c6:66:1c:43:94:db:a6:5f:ea:6a:13:74:45:cc:
         e7:8b:9e:e0:14:3a:f9:31:46:22:ea:25:5f:16:03:b7:96:cb:
         77:c0:3e:65:99:ea:79:17:75:ef:30:9c:16:e3:f4:c1:0a:ce:
         f3:c6:4c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----