Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86347BD69D4411F1B22426FACE1D38B0.roa
File:                     86347BD69D4411F1B22426FACE1D38B0.roa (raw, json)
Hash identifier:          alMVOKWY3HjfB4QftnhBhlHSjRiKLn3w8TnZTI0FEa0=
Subject key identifier:   E7:E5:7A:33:1A:26:9B:22:43:D9:68:87:B8:BD:54:F8:C5:EA:16:92
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E186
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86347BD69D4411F1B22426FACE1D38B0.roa
Signing time:             Fri 21 Aug 2026 09:41:46 +0000
ROA not before:           Fri 21 Aug 2026 09:41:42 +0000
ROA not after:            Sat 28 Nov 2026 09:41:42 +0000
asID:                     137899
IP address blocks:        154.219.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123270 (0x1e186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 21 09:41:42 2026 GMT
            Not After : Nov 28 09:41:42 2026 GMT
        Subject: CN=6a881d5a-61a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3a:00:67:f4:f8:e1:a9:e1:c8:72:59:ec:da:
                    5f:2c:3e:bb:85:e2:82:02:b4:a8:5b:a9:76:31:0e:
                    bb:d1:44:dd:50:51:f9:a9:fc:b3:9c:04:ce:d4:9c:
                    2c:4b:d2:eb:64:41:11:88:98:da:e6:76:84:04:ea:
                    c5:3b:96:e7:6e:e8:7c:97:f2:a3:17:71:83:b3:8c:
                    b2:56:95:b6:a6:fb:43:77:ba:e0:60:d0:c1:a7:f9:
                    79:fe:4a:f6:42:1e:79:a9:02:8c:67:c3:04:2b:ed:
                    df:3c:0e:22:46:bd:59:3c:9f:64:f0:0a:ea:99:c0:
                    a7:60:cc:7f:05:59:dc:05:d6:a0:c9:d8:2b:79:43:
                    b2:44:8b:b9:86:53:f8:96:88:6e:4d:92:e4:69:f7:
                    b9:71:fc:4e:11:e0:59:67:41:e0:84:1f:04:5c:74:
                    67:ad:ec:a6:26:02:68:0a:89:49:6a:14:de:c3:1a:
                    4d:47:6a:1f:cc:e4:26:ca:4f:8b:ee:b2:00:4d:8b:
                    7c:c2:a6:d2:66:41:e3:d5:63:82:76:fe:24:4d:cc:
                    26:29:a9:9d:3f:49:71:66:dd:12:4b:7c:2d:ea:e3:
                    e5:45:aa:fa:61:43:c5:6a:1f:7f:cc:b3:b2:73:18:
                    73:70:20:ab:a2:e8:35:e9:50:e6:b9:c7:0e:07:81:
                    9a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E5:7A:33:1A:26:9B:22:43:D9:68:87:B8:BD:54:F8:C5:EA:16:92
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86347BD69D4411F1B22426FACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.219.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4e:8f:81:93:12:56:40:3e:c2:e7:cc:f5:c8:76:7f:63:ac:9c:
         10:f4:dd:c7:66:fd:88:f5:49:7f:aa:20:90:30:74:97:73:6d:
         01:e4:57:81:a3:6a:f0:7c:dd:9a:53:d7:b9:44:0d:92:46:32:
         5f:2b:f2:02:ea:73:ed:45:e6:a8:34:4a:da:af:b1:38:33:ed:
         53:91:9c:83:3b:18:d5:7f:7f:c3:3c:e3:2f:17:a0:2c:f0:d8:
         aa:83:3c:bd:31:00:4e:d9:f6:5e:d5:95:e9:ef:f4:bd:56:ba:
         11:79:a5:d0:7d:2d:c0:2b:60:27:f1:44:e3:fb:81:90:3e:fe:
         9b:57:20:f3:c0:99:fb:ba:a8:28:ec:32:a8:96:5e:8f:0b:a5:
         c7:3c:ef:23:86:2d:78:fa:a9:fe:df:12:70:ed:90:7f:e7:f1:
         70:04:22:98:ec:7e:de:9d:89:60:85:f4:92:61:7a:e4:94:1e:
         94:71:d3:bc:a0:05:e4:ee:20:42:93:d2:1b:da:95:cf:4d:dd:
         66:ab:e2:ec:9c:7e:b5:7a:3c:cf:58:fe:c2:64:b7:ce:a4:a3:
         c4:6c:85:4e:c3:d6:38:7b:75:44:ed:8d:5b:ee:8d:18:d3:61:
         d1:ac:60:bf:f1:89:59:24:da:df:71:e6:75:23:61:7f:06:cb:
         93:83:78:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----