Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4814EC84C86C11F18AAE2FB0CE1D38B0.roa
File:                     4814EC84C86C11F18AAE2FB0CE1D38B0.roa (raw, json)
Hash identifier:          O1UfMrIA3kV1vKFlH6bmbg1WrlyMDN4k/jsR8O/bc3g=
Subject key identifier:   C9:2A:B8:49:B6:6A:9D:C4:46:39:73:B2:A6:1B:4E:20:87:FF:CA:89
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE27
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4814EC84C86C11F18AAE2FB0CE1D38B0.roa
Signing time:             Thu 15 Oct 2026 07:44:42 +0000
ROA not before:           Thu 15 Oct 2026 07:44:38 +0000
ROA not after:            Sun 22 Nov 2026 07:44:38 +0000
asID:                     401696
IP address blocks:        154.94.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126503 (0x1ee27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 15 07:44:38 2026 GMT
            Not After : Nov 22 07:44:38 2026 GMT
        Subject: CN=6ad0846a-99f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b9:70:5d:b2:3f:47:b0:01:58:86:b7:55:43:
                    5b:fa:a5:12:42:5d:fc:2c:e3:96:23:00:36:3d:07:
                    50:68:aa:60:2d:99:02:c1:99:cf:3b:0e:dc:e0:5a:
                    56:73:18:ed:f5:91:7f:a2:f1:31:5f:56:da:68:5b:
                    e7:4e:4b:c6:52:d9:c2:72:90:7c:9d:5e:7b:f0:22:
                    7f:53:8b:30:5d:7b:32:16:1a:de:43:1a:db:a4:34:
                    83:a4:48:a6:11:45:c9:c1:6c:0f:1e:6d:bc:aa:7d:
                    02:c4:37:62:d7:86:23:4b:e9:da:52:97:01:2e:a5:
                    9f:59:a6:af:5e:ff:5b:3a:9f:b3:d4:57:8f:bb:7a:
                    bf:24:43:31:0b:e8:1d:70:35:b7:f0:7e:9b:f7:70:
                    7f:f4:b3:eb:e7:3c:c5:10:9e:0a:f8:a1:c8:d8:9f:
                    00:47:8d:de:62:86:28:f2:3f:11:4a:b7:29:35:9c:
                    f3:37:a9:13:82:47:21:f0:6f:5f:63:d0:3c:51:86:
                    22:24:b8:41:a1:17:35:75:6b:61:fd:d9:e9:00:b9:
                    0e:ff:aa:b0:8d:c0:a4:b1:e1:0d:b7:19:4b:20:f7:
                    a0:39:74:61:84:9a:0c:c7:ee:a1:a7:74:2c:87:1f:
                    d1:df:96:dd:5e:91:a3:81:5f:cf:5e:09:d7:c2:d0:
                    c2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2A:B8:49:B6:6A:9D:C4:46:39:73:B2:A6:1B:4E:20:87:FF:CA:89
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4814EC84C86C11F18AAE2FB0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         27:4c:4b:6e:df:1d:b2:76:20:88:10:9c:aa:df:10:6b:fc:07:
         8e:95:8b:32:75:69:7b:f3:2d:ab:03:d8:a0:41:29:e0:fb:13:
         6e:b0:e6:23:59:d9:00:2f:8d:4e:62:96:d2:44:8b:d6:4a:82:
         08:d8:d4:5e:db:09:f2:58:13:7e:b4:a2:9b:0a:4a:42:7f:f0:
         a8:ca:9d:6b:4e:ae:22:5b:44:f9:b8:ad:bb:38:b6:22:91:49:
         ba:d4:24:39:7d:e0:22:82:33:a9:e3:6f:4b:22:69:3b:20:bd:
         c4:05:dd:1d:7a:ed:58:89:d5:92:65:81:85:d4:f0:17:21:19:
         7d:d7:e5:36:67:03:1c:02:92:2e:25:6b:48:c4:58:e3:8a:b8:
         08:99:45:ca:a0:37:d8:47:18:92:b8:12:0f:e4:1e:0c:ef:1a:
         01:26:69:4c:d9:4f:14:7f:4c:a5:92:65:f6:2d:7a:90:3c:3f:
         ad:ca:8e:c9:c1:44:7e:75:08:3f:f2:3f:0d:ed:82:3e:52:85:
         e4:90:73:d9:e5:a6:85:8b:be:21:e3:a1:4b:5e:67:6b:8f:61:
         e2:4d:93:a3:37:90:ec:64:02:77:62:df:41:54:49:d9:8e:e8:
         65:e8:64:b1:a8:1b:9f:71:d9:1f:49:a0:3c:ac:4d:fe:37:ea:
         ad:50:e6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----