Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3188364CC5211F1A4A1CFA4CE1D38B0.roa
File:                     E3188364CC5211F1A4A1CFA4CE1D38B0.roa (raw, json)
Hash identifier:          C7ZakyU0IsE1QAxY8zdKrTxxY7wSlgES2acr+xu2LPo=
Subject key identifier:   49:EA:1E:64:3C:97:8D:3B:E2:E6:49:57:A9:CD:1F:54:47:C8:F9:8B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EEF0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3188364CC5211F1A4A1CFA4CE1D38B0.roa
Signing time:             Tue 20 Oct 2026 06:53:00 +0000
ROA not before:           Tue 20 Oct 2026 06:52:55 +0000
ROA not after:            Fri 06 Nov 2026 06:52:55 +0000
asID:                     140224
IP address blocks:        154.86.16.0/24 maxlen: 24
                          154.86.17.0/24 maxlen: 24
                          154.86.18.0/24 maxlen: 24
                          154.86.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126704 (0x1eef0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 20 06:52:55 2026 GMT
            Not After : Nov  6 06:52:55 2026 GMT
        Subject: CN=6ad70fcc-f89d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3d:a7:ac:21:6d:73:81:64:36:1b:b6:07:33:
                    bc:ac:b0:3a:48:5e:bc:5d:5e:95:6c:e2:e6:ff:90:
                    9c:6e:73:b4:ea:c1:54:f1:b9:a5:bc:f6:c4:fe:c7:
                    40:7e:06:cb:25:6e:19:df:b9:08:df:9f:75:b0:1b:
                    19:9c:90:f8:eb:95:2a:79:7c:0c:bc:a3:f2:08:ed:
                    92:54:a9:2f:5b:5d:cb:64:1f:22:17:12:91:f0:0a:
                    c8:23:cf:28:ea:3e:49:3a:80:c4:fc:8b:10:6f:be:
                    20:78:80:df:a7:af:78:34:72:48:52:c9:5f:b0:3f:
                    ac:de:64:54:87:82:f5:9a:64:b2:27:d3:3b:7e:39:
                    e5:cb:32:5b:ed:b1:c5:06:38:42:3f:d3:4f:6a:fe:
                    69:40:15:a0:18:d1:07:07:d6:57:9b:7a:98:e6:a8:
                    76:0a:85:ed:6d:a8:0e:bb:17:77:a5:96:d2:b8:24:
                    b8:5f:c3:7d:dd:29:0c:4e:2a:1b:ba:43:91:d7:2f:
                    8f:05:18:af:58:9e:71:7d:af:e0:6f:36:d5:07:11:
                    fc:08:5d:50:a7:b5:63:1f:5d:83:74:a5:01:40:a8:
                    ce:b3:87:42:0d:2d:a5:44:81:83:5e:a7:8c:63:36:
                    a5:14:ad:35:b6:95:53:83:1c:e0:71:61:7f:5d:f5:
                    3c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EA:1E:64:3C:97:8D:3B:E2:E6:49:57:A9:CD:1F:54:47:C8:F9:8B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3188364CC5211F1A4A1CFA4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:56:92:cb:2e:42:a0:ca:0e:92:93:6b:d4:96:a8:4c:0e:d9:
         56:c6:85:e8:8b:f1:90:62:3e:32:46:98:95:9e:82:6c:25:23:
         61:21:49:f0:c3:14:e1:74:a4:45:14:eb:1c:76:88:56:fd:51:
         33:29:32:d5:09:85:da:75:93:33:6d:be:a9:f7:70:0b:2a:52:
         7a:7f:29:2a:c1:a9:5f:7d:05:12:64:03:54:ef:df:91:29:c5:
         0c:32:66:7c:11:6d:84:75:86:9e:a8:a9:87:8e:9c:cf:8d:ff:
         81:7f:be:44:92:65:b8:3f:31:68:6d:f4:6d:fa:2d:33:f3:f9:
         70:cf:a3:58:85:84:91:ae:39:a0:1b:ba:ce:0a:4b:45:02:15:
         06:ef:c7:a1:c8:37:b7:47:4b:61:ea:58:a1:64:14:a5:55:7a:
         bd:b7:02:44:51:8b:a7:5d:a6:25:d8:8d:d2:e4:55:88:1c:87:
         a8:eb:2b:be:ed:91:26:56:b2:29:a8:a2:7a:2d:ac:52:ab:fd:
         71:09:db:7a:f8:5c:22:6c:71:23:0f:a5:bb:d5:fd:a2:56:e9:
         84:6e:07:d5:86:c8:8f:4d:50:1a:f6:a5:55:c5:82:f5:3a:c7:
         44:04:64:b1:3d:08:3b:b9:1c:a4:58:80:1d:06:bf:0c:92:f8:
         65:10:96:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----