Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5968913ECEB611F1AFADC1F6CE1D38B0.roa
File:                     5968913ECEB611F1AFADC1F6CE1D38B0.roa (raw, json)
Hash identifier:          E5GyNOvGz7P8+Rsnpt4PC89vzfUJ3N8DJkQ7I1yIC8w=
Subject key identifier:   A9:A4:B4:5E:6F:C1:A5:CC:A3:41:9C:A1:F3:54:F6:32:2B:B5:93:D7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EFA0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5968913ECEB611F1AFADC1F6CE1D38B0.roa
Signing time:             Fri 23 Oct 2026 07:50:01 +0000
ROA not before:           Fri 23 Oct 2026 07:49:56 +0000
ROA not after:            Fri 04 Dec 2026 07:49:56 +0000
asID:                     198243
IP address blocks:        154.83.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 13:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126880 (0x1efa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 23 07:49:56 2026 GMT
            Not After : Dec  4 07:49:56 2026 GMT
        Subject: CN=6adb11a9-4d52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:44:51:62:bc:9c:21:97:45:ec:c7:ba:9f:a9:
                    e5:29:8d:d1:da:95:cd:04:04:b9:b5:9a:88:55:d3:
                    17:44:44:d6:78:09:f2:23:a2:f9:bb:14:97:12:3d:
                    8b:dd:39:3b:e5:0d:87:e4:d1:26:d1:b4:1d:2b:1e:
                    d4:39:50:ac:30:0a:58:a2:b1:a4:10:a1:56:42:de:
                    e2:ae:cb:59:4e:5e:82:b0:b4:d2:fc:3a:14:f4:63:
                    8f:4b:e6:28:da:58:37:61:2b:c7:98:0c:79:80:e4:
                    44:3f:d8:c3:31:53:16:c4:29:a9:4a:6c:df:eb:aa:
                    90:ec:cd:fc:bc:26:69:fc:53:a3:63:c3:9c:12:31:
                    94:a2:b2:87:5b:cf:d4:91:7a:32:ec:72:06:e6:2f:
                    ab:ff:17:ef:26:c0:90:4f:eb:ca:bb:3b:eb:b8:c8:
                    02:6f:e9:c6:7e:5d:67:8e:82:40:f6:4f:92:4d:d6:
                    3d:55:33:2d:58:45:10:3f:e3:07:fc:7c:95:4a:cd:
                    8c:b9:f7:26:ca:fc:f9:10:bd:2f:aa:de:fc:96:4b:
                    70:a3:d4:29:82:ec:bd:ac:46:dc:b5:ae:05:64:14:
                    88:0a:11:87:57:c0:95:41:d9:8e:94:07:39:1e:29:
                    bf:a7:04:5d:93:ec:b5:bf:42:69:e0:f3:2d:30:8e:
                    c6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A4:B4:5E:6F:C1:A5:CC:A3:41:9C:A1:F3:54:F6:32:2B:B5:93:D7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5968913ECEB611F1AFADC1F6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:f7:61:21:f1:f3:22:fd:ed:51:cd:66:01:b1:ec:6c:2b:6b:
         cf:54:bf:d1:dd:95:d9:16:8a:cf:60:90:21:50:22:14:66:58:
         55:fc:9d:54:83:6d:e1:d5:64:e2:22:e5:fc:7d:e8:ea:d6:db:
         df:69:f6:fc:4d:21:8c:6b:14:74:51:a4:d9:29:98:c0:f1:28:
         af:5e:70:02:46:e7:be:e3:5f:95:bc:df:e4:2b:fc:c9:c7:2f:
         98:ed:ec:c5:83:a5:52:2d:10:62:9f:ac:7d:1a:e0:a1:69:7f:
         ce:7f:b2:bc:c3:86:9d:a0:d0:cf:72:96:17:ed:41:bd:72:2b:
         84:58:81:5f:88:dc:1a:af:e0:13:0a:9d:57:e9:7c:27:4d:71:
         80:1b:0b:59:9a:c9:54:de:5d:83:7e:9c:6f:dc:ba:3b:95:f6:
         fd:80:a6:cc:cb:36:3b:38:5f:fe:75:72:d8:86:0d:0c:c4:1d:
         96:6d:2c:ff:7e:12:a9:e4:b8:51:e4:87:e8:60:fb:63:21:53:
         06:34:fc:52:cf:a6:dd:2e:3d:3f:4c:a4:2a:14:0f:82:e5:62:
         f4:ef:45:07:58:0e:f0:ff:49:5b:9f:8e:2f:a3:4d:bc:3a:17:
         3a:bb:5c:e8:a2:d6:34:4e:36:b7:7a:df:f1:88:1b:e4:9f:a9:
         99:c7:57:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----