Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBEFE2A4BF2011F1A8BFF2F1CE1D38B0.roa
File:                     FBEFE2A4BF2011F1A8BFF2F1CE1D38B0.roa (raw, json)
Hash identifier:          5ySa+Gw6HvZ3WAvrYZ9XjFGnEmsX5sWlDoIM6lUa+WI=
Subject key identifier:   15:24:AF:7B:2E:17:85:85:D8:B2:6F:E4:4D:BA:E0:DC:4B:10:B1:A8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC10
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBEFE2A4BF2011F1A8BFF2F1CE1D38B0.roa
Signing time:             Sat 03 Oct 2026 11:53:01 +0000
ROA not before:           Sat 03 Oct 2026 11:52:58 +0000
ROA not after:            Tue 10 Nov 2026 11:52:58 +0000
asID:                     139646
IP address blocks:        154.86.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 08 Oct 2026 00:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125968 (0x1ec10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  3 11:52:58 2026 GMT
            Not After : Nov 10 11:52:58 2026 GMT
        Subject: CN=6ac0ec9d-253d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b4:95:52:f8:89:4f:54:b2:1c:06:51:c4:31:
                    92:0a:ab:02:d1:74:ef:b2:9b:22:42:cc:e4:75:db:
                    eb:22:3a:d1:7f:c9:e5:e7:12:cf:d0:53:34:06:04:
                    8a:95:02:bb:1b:b4:b7:ac:a7:e6:96:99:81:2f:39:
                    94:58:61:ee:1c:4b:d8:c5:96:0f:9f:dc:4f:08:e4:
                    a1:f0:00:fb:1f:f6:b9:1c:59:90:52:f2:f7:82:3a:
                    d9:7e:eb:11:f1:20:61:35:0c:9e:f0:ef:9f:6b:04:
                    c8:ed:53:99:e3:ff:a5:99:5f:ea:67:fd:a9:68:2d:
                    92:07:d8:86:5a:c4:af:0e:40:69:1b:18:de:b7:c8:
                    2b:92:86:c2:62:b6:ab:14:44:e5:f1:f4:13:6b:e2:
                    02:d8:fd:24:36:c5:1e:13:73:f0:81:79:1f:f9:ce:
                    14:b8:0c:3a:b7:a7:e8:ab:f4:98:6e:38:e1:4e:bf:
                    2b:31:dd:30:ac:32:50:a1:4b:49:d7:b1:a1:c3:4c:
                    13:5a:03:cd:72:7e:b7:90:72:8b:be:dc:d4:ad:93:
                    0e:38:ec:fe:81:01:97:61:d2:d1:91:a2:c1:37:09:
                    ae:93:d0:6d:d5:9a:80:d4:f2:a5:a6:7b:46:82:42:
                    e7:1c:bd:f4:c7:e4:a9:76:35:26:40:ae:68:c3:61:
                    a2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:24:AF:7B:2E:17:85:85:D8:B2:6F:E4:4D:BA:E0:DC:4B:10:B1:A8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBEFE2A4BF2011F1A8BFF2F1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:18:f6:0f:c5:b2:e3:81:13:13:fe:99:48:78:b7:5b:8c:15:
         3e:31:cb:ee:67:68:d9:05:9d:4c:46:d8:d0:4e:2f:78:15:7f:
         7e:71:7c:41:bd:c6:14:b5:aa:15:24:49:72:f3:13:eb:9f:24:
         3f:af:91:0e:76:08:8b:5d:e7:06:f5:30:f4:35:0b:3a:79:ef:
         10:d9:a5:57:f8:c5:62:9b:ae:75:90:d9:47:e1:23:7c:41:1f:
         6e:35:7c:f4:a9:ec:ea:12:69:59:8c:fd:dc:07:d1:a0:77:2d:
         76:56:bc:0a:50:a7:61:3b:8f:12:1f:b0:ef:fd:e5:57:32:82:
         54:ad:20:41:64:9b:06:a6:69:e9:8f:89:57:75:4a:5b:84:ba:
         92:a4:1e:24:34:4d:2a:ce:38:28:62:03:95:24:30:18:f6:a0:
         e7:28:e5:da:ec:36:df:46:81:cb:6b:69:f7:59:09:07:d2:46:
         c5:66:65:4d:f8:f5:07:a0:2b:3b:58:84:ab:3b:61:31:54:70:
         84:46:d1:d5:0b:98:15:53:17:44:4f:1a:25:30:fe:9c:87:37:
         80:19:9a:fe:5c:c8:25:4b:f4:cf:75:32:b6:81:80:0d:74:96:
         f3:bd:72:d3:8d:34:8b:11:1e:4c:7b:6f:dc:89:e2:38:e7:e7:
         13:a0:d5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----