Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44B4C84CCF7F11F1A9E64B16CF1D38B0.roa
File:                     44B4C84CCF7F11F1A9E64B16CF1D38B0.roa (raw, json)
Hash identifier:          zREo9qY5FSBITIei4vmTN68QVoUAp32eTkKIzJgTXAE=
Subject key identifier:   D8:C4:A6:81:48:32:D7:2B:9B:99:94:77:67:B4:A4:6B:42:AA:03:9C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EFC6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44B4C84CCF7F11F1A9E64B16CF1D38B0.roa
Signing time:             Sat 24 Oct 2026 07:48:15 +0000
ROA not before:           Sat 24 Oct 2026 07:48:10 +0000
ROA not after:            Tue 08 Dec 2026 07:48:10 +0000
asID:                     63099
IP address blocks:        154.196.160.0/24 maxlen: 24
                          154.199.4.0/24 maxlen: 24
                          154.200.54.0/24 maxlen: 24
                          154.200.80.0/24 maxlen: 24
                          154.200.129.0/24 maxlen: 24
                          154.200.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Nov 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126918 (0x1efc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 24 07:48:10 2026 GMT
            Not After : Dec  8 07:48:10 2026 GMT
        Subject: CN=6adc62bf-4d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:89:bd:34:12:9d:a8:2b:da:f2:ca:fc:1e:91:
                    38:d6:5b:bd:15:83:62:ce:b9:aa:c8:44:ae:8c:99:
                    4d:9e:ce:32:ab:66:78:bd:c5:19:7b:38:53:25:b3:
                    2d:ab:94:2e:46:73:b2:9d:11:d5:0e:5f:5d:32:89:
                    a2:a6:04:78:e4:84:d1:ff:ab:6a:97:45:96:6d:88:
                    c3:d3:f4:5e:ad:59:8f:4e:81:e4:82:d9:3d:96:29:
                    cb:ca:84:83:4f:10:28:d3:8d:77:11:ff:12:48:86:
                    4c:fb:8c:48:db:fe:ad:82:fa:54:7d:37:0f:b7:c8:
                    07:fd:a4:94:2a:9d:1c:c9:a2:15:b8:f0:a8:01:97:
                    86:4d:20:69:6a:ef:58:d2:65:68:38:b6:9a:a0:a7:
                    52:5b:bf:39:b8:fe:d6:aa:fd:23:e6:6a:9f:9a:4f:
                    66:b2:c7:80:45:29:32:af:96:12:3a:c7:22:04:d0:
                    76:27:de:e1:f2:88:c2:31:92:23:e6:b3:7d:44:c7:
                    1b:18:60:4d:6e:5a:7f:40:14:85:b1:94:d6:e0:82:
                    ea:cc:64:ed:82:f1:c1:af:f5:57:9b:38:ad:57:0a:
                    26:42:8d:4a:f6:c3:18:5a:4a:0f:e4:be:2a:2a:bb:
                    71:b8:d4:32:da:0b:2e:8b:7f:df:32:1b:2c:84:12:
                    2e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C4:A6:81:48:32:D7:2B:9B:99:94:77:67:B4:A4:6B:42:AA:03:9C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44B4C84CCF7F11F1A9E64B16CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.160.0/24
                  154.199.4.0/24
                  154.200.54.0/24
                  154.200.80.0/24
                  154.200.129.0-154.200.130.255

    Signature Algorithm: sha256WithRSAEncryption
         91:fd:1c:21:8e:9d:1d:88:af:c9:5b:c4:4d:8c:cb:6d:15:8d:
         fd:1a:b9:0e:bb:50:bb:97:22:13:50:f0:41:9f:a7:ec:52:e6:
         38:48:9e:e9:90:d9:75:90:5e:a9:e6:47:70:e7:87:ff:15:bd:
         aa:8e:ce:5c:98:17:6e:2f:16:20:b9:fe:c1:e1:d5:0d:bb:17:
         a2:b6:06:92:93:b6:d9:a5:ef:b8:22:93:e2:e9:47:75:b8:a5:
         b4:a5:a9:28:e3:0f:85:e0:75:27:46:d2:73:4d:ec:1a:3a:8a:
         cc:c7:54:f3:8e:2d:6d:3d:09:2a:4e:0a:40:4a:23:1c:98:47:
         42:49:49:e4:4e:53:0c:aa:8c:65:fc:a0:71:45:15:e7:0c:d9:
         26:cb:1b:3c:3b:f6:6c:40:34:37:e1:5f:ca:9c:ae:81:78:d0:
         60:a3:63:5c:b3:f5:c8:9c:41:c7:07:cc:09:37:05:ed:f9:fc:
         cf:a1:cb:ef:0e:66:67:98:63:d4:88:9e:60:7a:5a:2a:67:64:
         6b:77:a0:09:d4:e7:e3:91:1b:ca:b6:a6:fa:af:c6:20:c4:83:
         c7:a4:78:79:13:82:d8:21:33:fb:96:6c:fc:aa:ea:4e:73:c4:
         3e:ff:14:1b:4d:37:94:52:ba:aa:e1:07:cc:fa:cb:37:df:bf:
         85:52:2b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----