Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/668FC7DEBF2911F19CF8CDA7CE1D38B0.roa
File:                     668FC7DEBF2911F19CF8CDA7CE1D38B0.roa (raw, json)
Hash identifier:          Rf2jnChvrCa0Ra6DuUN9dF8A/9DTu42XZ4k0z0BB5pc=
Subject key identifier:   8C:7F:34:84:DF:76:F1:90:B5:8C:45:62:E8:C3:37:1B:80:CE:C6:98
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC12
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/668FC7DEBF2911F19CF8CDA7CE1D38B0.roa
Signing time:             Sat 03 Oct 2026 12:53:16 +0000
ROA not before:           Sat 03 Oct 2026 12:53:12 +0000
ROA not after:            Mon 16 Nov 2026 12:53:12 +0000
asID:                     142032
IP address blocks:        154.222.16.0/20 maxlen: 24
                          154.222.16.0/21 maxlen: 24
                          154.222.16.0/22 maxlen: 24
                          154.222.20.0/22 maxlen: 24
                          154.222.24.0/21 maxlen: 24
                          154.222.24.0/22 maxlen: 24
                          154.222.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125970 (0x1ec12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  3 12:53:12 2026 GMT
            Not After : Nov 16 12:53:12 2026 GMT
        Subject: CN=6ac0fabc-6625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f5:97:a4:87:ca:50:4f:fe:ba:37:bb:46:99:
                    93:8f:91:97:96:25:45:76:bc:04:22:86:9b:82:cc:
                    06:e9:e8:7e:66:33:98:37:39:eb:01:af:43:05:0d:
                    22:4e:2a:78:d7:8c:20:17:35:4b:28:f4:a3:d7:cb:
                    11:ea:99:03:6b:8a:b5:ee:b4:1c:65:7f:24:0c:13:
                    2d:7f:20:c3:1e:f6:bb:27:ac:25:5f:04:48:3d:d8:
                    d3:88:0e:15:02:81:53:66:eb:83:cb:38:4f:7a:49:
                    b6:eb:71:7b:ef:1a:b0:b7:27:81:20:ed:1b:31:5a:
                    05:13:2f:8e:12:21:77:af:ec:5f:eb:d8:4c:5e:7b:
                    2c:30:5f:36:cc:95:d5:e2:ae:e2:c8:4c:9f:76:4e:
                    1c:5e:65:cf:4a:b2:19:13:be:0e:6f:0e:c0:3e:1d:
                    56:5a:56:c8:8a:4d:d6:a0:b6:f5:a0:9a:6d:71:47:
                    0d:f2:8b:c2:0e:c4:cb:80:1b:29:20:be:5d:65:68:
                    e8:24:8a:e1:c7:9a:83:2c:c5:34:b5:97:e5:a8:a1:
                    b2:46:66:5b:11:41:9a:80:67:37:b2:e9:55:89:53:
                    f9:0d:a4:ff:56:89:c6:7e:bc:56:68:1e:bf:7d:58:
                    f1:5d:27:54:56:ec:15:9b:04:39:a0:78:7f:21:2d:
                    44:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7F:34:84:DF:76:F1:90:B5:8C:45:62:E8:C3:37:1B:80:CE:C6:98
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/668FC7DEBF2911F19CF8CDA7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         14:b7:b2:74:f9:02:63:90:78:5b:75:9e:92:4c:80:99:ce:78:
         1b:d3:f2:0f:44:d5:42:37:ce:57:b2:ef:67:25:82:b4:75:3b:
         cd:b2:08:7b:42:5a:bb:70:60:54:3b:27:d4:3e:bf:24:2b:af:
         15:3e:32:f5:c5:0b:4a:b2:0c:da:f7:a2:dd:fe:87:c4:a3:fc:
         52:25:bc:eb:be:3f:f3:43:50:62:9c:d8:51:e8:cc:cc:bb:25:
         b8:54:15:b7:77:74:80:51:38:f2:07:cd:c9:25:2f:6d:3b:07:
         1d:56:fa:ce:b0:74:dc:5f:46:5d:31:50:ad:1b:7b:78:af:d7:
         6c:ce:b8:01:a0:b9:bd:d6:ed:77:cc:df:31:90:8f:92:32:70:
         35:c7:de:47:fd:fb:b7:2d:b1:ed:64:3f:6e:65:39:68:af:32:
         19:85:2c:e9:80:eb:9d:9e:22:9f:e5:27:fc:ff:d6:10:1c:a7:
         74:ab:99:71:e2:a0:28:48:99:73:33:01:0d:6f:e4:0c:c2:4a:
         fe:66:bc:18:84:69:93:82:9b:d7:fb:b0:13:54:6b:b2:23:fc:
         dc:b2:61:ce:37:45:4e:87:fb:93:82:15:ab:00:eb:04:5b:4c:
         b5:e2:ed:eb:50:4d:4f:41:3c:f2:df:72:68:b8:fc:97:fd:c2:
         7a:9d:88:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----