Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69A9E962C7B311F1937617FACE1D38B0.roa
File:                     69A9E962C7B311F1937617FACE1D38B0.roa (raw, json)
Hash identifier:          TcvV4RqP+Wca94I5ymdQUor6nCT/A/DDZIXQIYjBYuY=
Subject key identifier:   B7:C8:F1:F7:E2:9B:35:B8:EB:BD:02:D6:0F:6A:1D:38:E2:4E:29:F9
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE05
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69A9E962C7B311F1937617FACE1D38B0.roa
Signing time:             Wed 14 Oct 2026 09:41:21 +0000
ROA not before:           Wed 14 Oct 2026 09:41:15 +0000
ROA not after:            Fri 20 Nov 2026 09:41:15 +0000
asID:                     59245
IP address blocks:        154.193.154.0/24 maxlen: 24
                          154.193.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126469 (0x1ee05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 14 09:41:15 2026 GMT
            Not After : Nov 20 09:41:15 2026 GMT
        Subject: CN=6acf4e41-170a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:39:c4:dc:6d:8a:c7:27:fc:be:0f:b9:5c:52:
                    63:6e:09:74:e5:fb:80:32:30:22:cb:e0:bc:b4:6b:
                    ca:78:ed:3f:da:08:04:7e:c0:80:d9:c2:82:9f:50:
                    38:4b:7f:a7:01:98:22:ab:d2:e6:ba:a9:f8:72:43:
                    8c:86:b3:c4:b5:f8:cb:a1:ee:67:d8:71:99:eb:cd:
                    df:3e:b5:f6:6b:ce:95:1d:07:f2:a5:ea:90:83:e5:
                    02:dd:d0:38:26:a5:15:3c:5a:54:18:9e:24:50:0d:
                    2b:ee:7e:1a:2d:27:ef:e0:59:d9:4f:47:9c:e5:a5:
                    0f:d5:3b:eb:8f:51:da:f7:19:6a:cf:d0:50:60:64:
                    62:ed:09:ba:78:1e:a6:89:35:dd:c8:ba:f5:4a:57:
                    64:2d:06:ca:d2:ba:f4:72:fd:f6:c8:f8:5f:3a:74:
                    45:1d:95:8c:4e:aa:81:35:a9:80:5f:2b:b0:6b:cb:
                    f8:f8:1e:e2:a1:01:30:15:cf:ff:89:5e:c2:0b:90:
                    1b:e7:b2:3b:1a:4a:03:cc:c8:53:fc:0e:5f:f0:bf:
                    76:a7:c1:1e:6f:e0:ad:94:00:c0:f5:59:47:15:26:
                    95:e3:32:8d:3a:64:35:2a:3b:b6:63:7b:75:bb:9d:
                    8c:e8:f4:08:5d:7e:92:f2:78:99:d1:2f:9f:c8:3f:
                    d8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C8:F1:F7:E2:9B:35:B8:EB:BD:02:D6:0F:6A:1D:38:E2:4E:29:F9
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69A9E962C7B311F1937617FACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:1b:5c:f3:e4:33:e5:c3:f9:47:e6:6a:09:07:92:2d:dc:3e:
         22:fa:f6:cc:94:7e:56:de:b8:ab:03:bb:bd:33:7e:2f:2c:7e:
         16:b4:7e:06:3b:10:4a:44:84:de:65:e0:20:32:81:9e:22:a7:
         81:ab:1d:4f:20:ff:db:b6:d4:be:7a:a8:18:93:c5:05:bc:14:
         64:f8:d9:39:10:97:f9:ea:8b:5c:de:f0:15:de:c2:30:7b:34:
         63:04:d8:2d:82:46:06:18:ab:fb:7c:62:bb:c7:a4:db:b5:da:
         a9:b8:c4:e5:8f:65:e4:b4:d3:72:59:1d:db:d7:c9:8d:92:d7:
         4e:cc:65:13:55:ca:4a:04:f9:f9:f2:98:56:c3:f8:8b:f0:80:
         9a:e1:cb:2c:85:79:b3:b3:ac:77:5c:e4:cb:2c:5a:3c:89:64:
         36:de:0a:75:23:e6:f2:51:0e:4e:60:bf:6a:d7:bb:2c:13:55:
         9e:4e:73:50:4c:70:25:43:ed:1f:2a:4f:e0:dc:e0:e2:eb:65:
         67:f0:95:dd:3e:bb:ce:bf:4f:da:f9:78:ba:16:cf:80:8f:d1:
         3a:ca:e0:4c:5c:9e:24:31:80:9d:14:22:4f:50:37:eb:a9:05:
         02:64:bf:f5:86:b0:bf:80:23:50:18:e4:d3:90:19:f5:9e:4c:
         a9:f2:d3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----