Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B468E974BA4011F1B2F924A7CE1D38B0.roa
File:                     B468E974BA4011F1B2F924A7CE1D38B0.roa (raw, json)
Hash identifier:          /NX4BkVuDnqrdcEhrl2ln05mXZh0+lVCWxmqDlLootE=
Subject key identifier:   DF:98:E0:FF:4A:1E:B1:B1:0C:70:4A:2F:FA:D1:92:38:01:61:BC:8B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EAF8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B468E974BA4011F1B2F924A7CE1D38B0.roa
Signing time:             Sun 27 Sep 2026 06:57:30 +0000
ROA not before:           Sun 27 Sep 2026 06:57:26 +0000
ROA not after:            Sun 01 Nov 2026 06:57:26 +0000
asID:                     49505
IP address blocks:        154.223.204.0/24 maxlen: 24
                          154.223.205.0/24 maxlen: 24
                          154.223.206.0/24 maxlen: 24
                          154.223.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125688 (0x1eaf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 27 06:57:26 2026 GMT
            Not After : Nov  1 06:57:26 2026 GMT
        Subject: CN=6ab8be59-3389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3c:28:93:22:7f:96:ce:c2:35:12:08:04:da:
                    f8:01:ce:03:2c:85:06:8f:cf:fd:fc:06:d4:f7:d7:
                    68:a2:7c:dc:4e:a1:c9:3a:03:1d:8c:1c:e4:2b:ba:
                    39:10:fb:cb:a3:59:21:19:26:4d:b8:8f:31:07:7b:
                    3c:e8:f4:5b:93:1c:6a:d8:10:c7:c8:77:0a:50:db:
                    e9:a1:0d:4c:1e:7c:71:c7:3a:e5:6d:32:ca:e8:f9:
                    d3:f5:70:f8:89:b8:f3:b7:90:97:2c:59:68:09:60:
                    97:23:a0:cc:2c:20:21:8b:92:35:04:e0:b6:5a:ae:
                    af:9c:6d:54:65:f0:d8:3a:7b:a8:e1:56:26:db:f0:
                    5e:90:21:b4:df:95:a9:01:66:d9:93:30:37:d8:6f:
                    a1:81:b0:50:5a:59:2a:0e:7a:d2:b8:b1:58:f0:03:
                    f5:5c:7f:6a:67:c8:2e:cf:b6:b0:b4:af:cb:bb:c7:
                    5e:f1:78:15:99:d9:e2:04:05:28:45:0c:ac:4d:50:
                    97:1a:fc:1c:08:ff:01:2c:05:27:51:fe:f5:da:76:
                    9e:ac:8c:f2:1a:d9:00:83:af:a9:54:12:9d:ea:93:
                    b1:02:d9:09:8a:f3:66:2e:d2:7b:d0:f0:a8:58:35:
                    ac:e1:e1:27:45:19:21:2e:da:37:2e:ba:7d:c2:8b:
                    2a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:98:E0:FF:4A:1E:B1:B1:0C:70:4A:2F:FA:D1:92:38:01:61:BC:8B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B468E974BA4011F1B2F924A7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.223.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:48:2c:3a:f0:6c:23:29:07:48:cc:66:1a:92:6f:f6:0a:f3:
         3d:45:50:16:ef:f1:67:a2:de:dc:25:7b:9e:4f:fb:66:8c:ee:
         5d:18:72:ca:11:61:12:33:1d:bb:b3:ed:42:5e:d0:0f:5d:35:
         e2:19:3a:f5:29:9b:5c:1d:3c:75:00:15:04:c2:99:de:5f:3d:
         96:a9:21:20:fd:ea:eb:6d:63:5a:9e:f4:fc:d5:fe:89:13:96:
         f5:78:85:57:d7:00:b7:ff:f7:c9:5d:b1:32:74:95:a2:c2:07:
         c3:c9:a2:95:2d:dc:26:44:a1:ad:7e:a2:e6:cb:e9:8e:ea:c2:
         e9:0d:6a:62:99:16:9a:cc:a2:37:01:65:3c:df:06:41:a5:fe:
         f8:5b:08:b1:e7:f7:63:15:15:c8:7f:b2:12:73:bb:96:3f:4e:
         e9:51:4f:7f:0f:13:d4:0e:01:f5:e4:f6:80:ae:f7:80:89:59:
         93:ea:ac:aa:85:d3:dc:9b:d4:6c:df:80:7e:97:2a:84:4f:5b:
         87:9c:3b:47:04:1d:55:b9:ec:5a:f2:96:b4:f0:40:9c:78:fa:
         98:41:b2:01:08:1c:21:0e:6a:12:7a:83:3e:2a:7a:a2:ac:45:
         69:b6:86:76:e6:2f:be:de:79:30:54:3c:9d:8a:c0:dd:ca:6b:
         44:7e:9a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----