Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE169FD4C79D11F19D533EF0CE1D38B0.roa
File:                     FE169FD4C79D11F19D533EF0CE1D38B0.roa (raw, json)
Hash identifier:          4lmgCNYMjoNX5yiPOMPIYMKQTrZ/Rpo5TzNKDmQ5XoY=
Subject key identifier:   69:75:FD:EC:9D:C0:64:C1:BA:A0:84:DE:09:A9:DA:87:91:8F:F8:8A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EDEB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE169FD4C79D11F19D533EF0CE1D38B0.roa
Signing time:             Wed 14 Oct 2026 07:08:01 +0000
ROA not before:           Wed 14 Oct 2026 07:07:56 +0000
ROA not after:            Sat 14 Nov 2026 07:07:56 +0000
asID:                     147176
IP address blocks:        154.197.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126443 (0x1edeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 14 07:07:56 2026 GMT
            Not After : Nov 14 07:07:56 2026 GMT
        Subject: CN=6acf2a51-b9ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6f:ac:5e:c6:c2:df:04:3c:2d:e7:44:1b:2d:
                    2f:a9:24:5f:5c:b1:29:bc:1d:fb:f9:d7:df:d9:a6:
                    c1:a2:be:b1:72:7e:f5:27:a9:4c:dd:56:85:69:1e:
                    c8:de:ca:fa:15:cc:35:55:d6:8d:be:8b:ab:39:e7:
                    dc:0f:a4:8e:7e:af:e4:e7:71:45:ed:e9:0e:4c:26:
                    fc:65:2e:0e:46:eb:71:55:e4:2f:ac:19:bb:58:fe:
                    cf:5b:48:f6:82:c8:24:b8:f2:7a:83:ac:7c:8f:37:
                    47:1c:c7:58:4d:19:b5:67:d5:b5:c3:2a:71:86:56:
                    ad:e8:f0:af:12:a5:fa:35:ed:16:83:a6:e9:04:e7:
                    d6:33:c3:1c:76:fe:3d:4d:f8:1a:ff:74:59:5b:9f:
                    e9:81:45:32:aa:0c:80:48:c9:33:7a:ce:bd:16:12:
                    6f:aa:54:d1:17:95:93:dc:8a:9f:6a:5e:78:9d:c5:
                    32:f9:1a:8c:4c:d8:c5:87:f7:69:98:62:3b:29:9b:
                    11:17:59:64:a5:bf:97:fa:71:74:a7:ee:43:c1:c4:
                    33:86:be:02:e0:7d:5c:8f:0a:ce:79:64:19:e3:7d:
                    d5:95:b1:21:d2:6d:97:03:28:d3:04:3b:8b:e6:b9:
                    49:28:8b:20:b2:01:ab:47:88:f7:86:bc:c1:13:1e:
                    8a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:75:FD:EC:9D:C0:64:C1:BA:A0:84:DE:09:A9:DA:87:91:8F:F8:8A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE169FD4C79D11F19D533EF0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:0c:2d:33:13:f1:18:c5:70:4a:b8:85:f5:ee:4c:f2:65:77:
         d8:89:44:e4:c2:29:5c:51:16:0b:cf:ce:73:66:7c:22:85:26:
         99:bd:69:e7:78:3c:76:04:1d:e1:3d:96:d0:60:b2:f3:8e:ec:
         fb:0f:b4:c2:41:e9:d6:03:f7:f9:03:49:4d:cf:9d:76:3c:85:
         b6:62:f1:f3:d7:c0:cb:2f:b6:a4:c6:f9:dd:13:84:f8:23:7b:
         5b:86:ed:81:7b:f3:b2:31:9f:af:d0:d0:4e:26:ca:bb:d8:4c:
         2f:bb:86:a2:6c:4d:6a:92:4f:28:37:04:31:59:0d:5a:2f:a6:
         bc:18:64:5a:c0:18:71:55:e0:6a:d4:e8:3b:d3:c0:92:73:81:
         a5:c4:f7:2d:99:84:42:ef:7c:b8:e5:15:fe:46:e0:d0:98:44:
         11:56:41:76:3f:39:d1:bd:ce:20:5e:f9:de:20:77:9f:62:81:
         d1:44:a2:77:a6:cf:cc:0a:66:62:9e:0b:63:41:3a:f5:bc:c1:
         9e:9e:9d:43:da:9d:07:f3:df:60:3d:81:3c:5f:ab:44:c9:e7:
         2d:8c:69:dc:35:b9:f8:9c:84:21:1f:a2:38:eb:ef:d6:7c:28:
         0c:4c:0b:29:cd:e2:9f:fa:e0:52:99:f7:16:52:fc:c5:65:21:
         fb:47:82:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----