Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/106504C2C6E611F1889422BECE1D38B0.roa
File:                     106504C2C6E611F1889422BECE1D38B0.roa (raw, json)
Hash identifier:          PYgp4osnNvCJYjkN88qr5BmR4E6IklCOYJOM5X16dOI=
Subject key identifier:   09:2B:B5:5D:78:5A:F1:E1:10:BE:EE:CF:A4:71:C2:E1:E8:0B:61:97
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EDCE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/106504C2C6E611F1889422BECE1D38B0.roa
Signing time:             Tue 13 Oct 2026 09:11:25 +0000
ROA not before:           Tue 13 Oct 2026 09:11:20 +0000
ROA not after:            Fri 20 Nov 2026 09:11:20 +0000
asID:                     200213
IP address blocks:        154.222.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126414 (0x1edce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 13 09:11:20 2026 GMT
            Not After : Nov 20 09:11:20 2026 GMT
        Subject: CN=6acdf5bd-7b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:46:1b:a2:c6:3f:5c:0c:f9:70:0f:49:de:61:
                    de:50:dd:9a:22:07:6a:34:dc:6c:2f:39:99:f2:aa:
                    a6:47:00:b3:c6:3d:6d:21:1b:b0:e8:bd:7a:da:59:
                    d9:fa:12:df:62:c3:11:50:51:21:ae:f7:7c:67:74:
                    47:ac:1c:93:54:62:90:55:2f:4b:a5:47:37:da:b0:
                    e8:25:b3:99:f1:e2:0f:78:c9:b5:42:14:ac:73:bd:
                    ba:08:3d:38:fe:99:12:41:a3:71:6a:db:bf:5e:e2:
                    5b:cd:6d:5a:43:09:b4:92:33:f1:ee:d0:01:3f:47:
                    74:47:0b:4b:55:2a:f9:59:ac:19:ff:f5:54:18:2a:
                    77:5d:a7:78:30:61:62:4b:2b:9d:cd:8e:01:b3:99:
                    c2:a0:0d:9c:a6:cf:89:a5:dd:89:d2:9b:bd:ee:cd:
                    1f:c7:4b:b8:97:2c:25:75:6a:e8:97:c1:dc:1d:51:
                    bd:89:38:89:97:c6:92:1f:55:01:ae:c1:5d:64:06:
                    c2:0f:23:00:e3:a6:bd:92:30:23:8b:23:ea:4e:78:
                    15:e3:d4:b5:09:0d:25:2a:3c:60:aa:79:35:5f:45:
                    49:71:7d:45:ce:a5:16:94:de:30:4c:42:f0:f0:2f:
                    09:df:cd:df:24:a0:da:1a:80:55:c0:f3:14:45:10:
                    2a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2B:B5:5D:78:5A:F1:E1:10:BE:EE:CF:A4:71:C2:E1:E8:0B:61:97
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/106504C2C6E611F1889422BECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:52:26:3e:1e:72:93:ea:6c:f6:86:1c:30:19:e1:73:5c:f7:
         24:8f:02:4f:0c:32:10:88:b4:82:39:e4:e1:78:99:30:a9:92:
         48:86:82:32:33:5c:ca:5f:c4:8b:27:e3:fe:8f:13:12:26:0a:
         20:b4:ac:e7:85:49:50:cc:04:f7:cf:a2:99:7a:33:81:d8:11:
         10:4e:9d:9e:64:4c:35:cf:10:29:eb:dd:13:c1:bc:6f:69:ee:
         7b:1c:d5:25:d4:f9:e3:40:97:38:60:72:a3:84:27:2b:03:31:
         6d:ee:a3:f2:03:33:7d:d9:b9:4c:a8:32:2e:ea:ff:ab:e7:7e:
         29:1b:40:a4:0b:35:00:37:42:2b:bd:aa:50:59:78:14:dc:d0:
         42:9a:9f:8f:6e:66:41:73:de:9c:23:60:77:db:56:04:38:4d:
         7c:e3:4f:ae:58:23:bf:be:bf:6e:16:3a:db:1b:2e:78:d7:ca:
         20:e7:72:8b:25:8e:82:50:9f:b5:fe:55:f2:de:54:17:00:77:
         0b:c7:5f:f9:3a:a2:61:db:43:02:57:df:e6:f7:bf:75:2b:a6:
         7c:e0:1f:71:1c:e9:6a:62:72:47:3c:8f:47:5c:1b:30:3b:15:
         14:74:5c:79:88:0b:8f:6f:96:67:49:1d:b1:91:d3:54:d0:2d:
         ba:35:29:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----