Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C81E0E2BF2011F19F2E99EDCE1D38B0.roa
File:                     4C81E0E2BF2011F19F2E99EDCE1D38B0.roa (raw, json)
Hash identifier:          BEd5TMF9/hEk9iskNemRA1RLZCykTDFFwsKdfkAr8C0=
Subject key identifier:   F8:8A:6E:59:55:15:EB:E6:3F:2A:EF:A8:66:5A:E7:5C:E0:C9:52:A6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC0E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C81E0E2BF2011F19F2E99EDCE1D38B0.roa
Signing time:             Sat 03 Oct 2026 11:48:07 +0000
ROA not before:           Sat 03 Oct 2026 11:48:03 +0000
ROA not after:            Tue 10 Nov 2026 11:48:03 +0000
asID:                     54801
IP address blocks:        154.86.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 05:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125966 (0x1ec0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  3 11:48:03 2026 GMT
            Not After : Nov 10 11:48:03 2026 GMT
        Subject: CN=6ac0eb77-7df9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ee:90:ad:ea:a6:8f:14:25:09:0e:bb:b0:63:
                    e2:a8:12:1e:e6:1f:13:83:d8:a1:ed:1b:06:b9:a0:
                    f6:bc:5c:6c:19:cb:0c:48:b2:e9:4b:2f:1d:4e:03:
                    e6:99:91:99:57:07:7d:af:45:53:ca:d8:e5:24:72:
                    ab:2e:0f:23:fe:ba:9b:08:4a:69:eb:b7:e1:c7:6d:
                    22:22:76:66:dd:28:76:f9:1a:64:dc:e7:cf:14:6b:
                    72:5a:67:e6:a8:72:4a:5c:f2:df:7c:b8:39:2c:41:
                    ee:0e:d2:5d:d0:b5:2f:1e:6a:aa:0b:7a:aa:e6:b6:
                    7c:b7:b9:13:ef:ba:00:a6:f1:48:37:73:01:fa:86:
                    04:1d:51:8e:ea:f4:56:a5:72:13:82:6d:a1:6e:f6:
                    a9:74:b6:4a:ab:ec:a2:58:ea:40:de:d3:e9:e8:42:
                    be:7a:29:d3:18:42:37:91:43:5d:57:53:a6:fb:3e:
                    bc:ab:d5:aa:da:ed:84:f5:28:af:6a:ed:3c:61:59:
                    98:1a:e7:95:ca:ac:70:18:97:b8:08:bc:de:a3:1d:
                    86:84:40:5b:45:36:3c:5a:88:2c:4b:21:a4:2f:5b:
                    c0:b6:04:c7:ce:d9:52:e7:15:32:9c:5a:13:76:d1:
                    3a:c0:a2:dd:b2:bd:2e:1a:e1:ae:50:b5:d5:de:54:
                    35:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:8A:6E:59:55:15:EB:E6:3F:2A:EF:A8:66:5A:E7:5C:E0:C9:52:A6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C81E0E2BF2011F19F2E99EDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:0d:85:a1:9c:8e:5b:3c:e2:20:ec:a5:65:e6:86:f9:7e:f8:
         75:45:23:9e:85:31:fc:0a:99:3f:e8:dd:69:ba:67:e6:17:57:
         88:47:83:a6:44:a3:2c:58:45:44:69:ce:9d:a0:a5:55:17:72:
         40:8a:f5:79:a2:76:2f:a2:3c:ec:cc:35:f2:1d:60:b6:2c:35:
         a1:40:b3:76:88:52:e7:80:b0:7b:c9:6f:2c:a1:68:4d:6b:e8:
         26:1a:95:59:86:f4:a0:f3:60:1a:06:18:ee:0e:58:c7:7b:cf:
         d1:cf:36:ec:d4:63:67:d1:3e:57:77:d0:19:45:9e:af:e7:66:
         3a:fd:28:f7:08:90:8d:92:7b:17:5b:5f:12:27:94:74:3f:ca:
         63:5a:84:63:4b:6f:b1:be:de:fd:78:2b:34:e2:5c:97:fa:aa:
         25:f0:a5:1a:05:36:23:c3:23:25:8a:e3:4d:2e:05:b1:fc:2b:
         78:69:24:55:dc:b6:15:2a:f6:5d:19:fc:8c:26:c4:c3:e2:61:
         b4:42:27:25:1f:9c:15:42:29:af:86:2c:a4:2d:c3:84:3b:0a:
         88:51:2b:03:1f:72:ac:b6:b1:ba:b9:82:9c:f0:51:66:da:b8:
         17:b1:0b:04:99:f6:38:e4:f7:6e:26:84:28:0a:1b:18:04:16:
         60:7a:8c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----