Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/68B6DEECC70F11F19496D8C5CE1D38B0.roa
File:                     68B6DEECC70F11F19496D8C5CE1D38B0.roa (raw, json)
Hash identifier:          +tcoBlV/EPPSWcGZVLusVqSMVU/5Ki9xxgST9CTqaHw=
Subject key identifier:   8C:CF:E2:A6:99:FC:FD:64:2B:39:DA:10:7D:F5:77:DD:D9:2E:76:4D
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       1A83
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/68B6DEECC70F11F19496D8C5CE1D38B0.roa
Signing time:             Tue 13 Oct 2026 14:07:22 +0000
ROA not before:           Tue 13 Oct 2026 14:07:18 +0000
ROA not after:            Fri 13 Oct 2028 14:07:18 +0000
asID:                     397423
IP address blocks:        102.165.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 08:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6787 (0x1a83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Oct 13 14:07:18 2026 GMT
            Not After : Oct 13 14:07:18 2028 GMT
        Subject: CN=6ace3b1a-fed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3d:70:35:53:9a:f6:ec:0b:0e:fb:f0:c2:0c:
                    68:87:a5:d7:ad:97:f9:05:0b:63:8c:29:78:b2:2a:
                    5b:70:8d:cc:ee:c5:25:1b:4a:7c:46:55:af:43:cf:
                    af:58:46:4d:7a:67:e8:9e:d4:9f:41:c1:bc:bd:c3:
                    16:b2:c3:f6:cb:02:ca:8e:07:63:28:77:25:5f:21:
                    04:a5:a2:29:3f:f3:65:5e:e0:1a:48:74:56:67:73:
                    21:9f:e0:a5:d6:04:af:4f:9a:e8:6f:52:e1:0c:ba:
                    1e:16:30:1f:45:af:8d:aa:ce:59:2d:e5:2b:2a:65:
                    ca:6b:78:4f:f7:2c:10:19:02:d6:11:54:85:50:d0:
                    51:12:1a:ed:e1:2d:29:5e:05:9e:5e:83:84:ed:0c:
                    6b:bf:5b:ef:b0:71:8c:6e:79:e0:8c:28:2e:b3:86:
                    08:8c:51:74:ed:18:f4:21:c7:99:b2:c3:bc:10:d8:
                    92:c4:cd:c6:25:89:0a:4d:f8:49:e7:0c:22:4f:db:
                    91:46:82:cc:f5:41:44:e5:2c:c9:ca:1f:12:87:bb:
                    5a:5f:c9:bd:99:aa:e5:b4:02:ab:8f:07:1a:e6:6f:
                    96:26:cd:f3:44:7e:7c:57:6e:93:c1:9a:04:73:14:
                    ee:3f:ae:e4:63:0b:37:87:25:b8:ec:d7:38:aa:bb:
                    d2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CF:E2:A6:99:FC:FD:64:2B:39:DA:10:7D:F5:77:DD:D9:2E:76:4D
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/68B6DEECC70F11F19496D8C5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:60:d3:89:f9:7f:91:c5:de:e1:49:2f:0a:fa:de:88:25:27:
         99:f1:e1:cc:20:20:ee:df:61:23:e9:44:8e:96:aa:2f:01:8b:
         35:37:ff:d5:03:45:4c:ff:99:b0:a7:a5:47:87:c7:46:bb:8d:
         ec:42:9c:87:27:4d:7d:88:c0:d6:79:eb:ba:19:a4:cf:78:5f:
         9c:c5:17:4d:3e:c0:0b:29:1f:bb:ad:ec:be:a5:31:27:d9:86:
         a2:22:20:eb:7e:8c:3b:21:5f:4a:81:26:70:c3:8d:3d:fc:5d:
         ed:90:d0:69:b2:ff:b0:ea:89:49:77:ef:93:e9:63:f9:22:4d:
         96:d3:38:2d:5f:c4:24:46:cd:1f:71:f1:4c:fb:d9:86:86:c5:
         50:f2:f8:77:20:b5:c3:ef:74:01:bc:b9:02:ad:36:63:b9:18:
         47:9b:68:dc:7a:d6:12:d7:4e:1d:71:5d:54:8c:73:21:f1:a5:
         dc:3d:17:c3:d7:3b:82:7b:44:f5:14:fc:66:78:c2:72:b0:53:
         b4:4d:0b:34:12:dd:19:04:41:a5:c0:22:59:7a:41:6e:19:ab:
         04:e1:d9:99:2c:73:9e:9e:1b:03:9d:27:a4:ef:98:fc:5a:22:
         cc:40:7f:45:69:ac:ef:14:26:2f:d2:91:58:ee:5a:d0:50:7b:
         a5:93:1e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----