Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68AD5E7ACEB811F1B1CDF103CF1D38B0.roa
File:                     68AD5E7ACEB811F1B1CDF103CF1D38B0.roa (raw, json)
Hash identifier:          GtakPgkNw6Wk6sUe2NbweG/F+3Y6Uc6uuGj6fjvA/iI=
Subject key identifier:   5D:4A:EC:DE:DB:79:56:24:A1:42:70:64:45:87:EC:69:ED:B9:1B:49
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EFA6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68AD5E7ACEB811F1B1CDF103CF1D38B0.roa
Signing time:             Fri 23 Oct 2026 08:04:45 +0000
ROA not before:           Fri 23 Oct 2026 08:04:41 +0000
ROA not after:            Tue 08 Dec 2026 08:04:41 +0000
asID:                     198243
IP address blocks:        154.222.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 13:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126886 (0x1efa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 23 08:04:41 2026 GMT
            Not After : Dec  8 08:04:41 2026 GMT
        Subject: CN=6adb151d-b4e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:84:e9:cd:a9:a7:2b:cd:ca:3e:85:f6:99:1a:
                    b0:eb:53:bd:4e:7f:04:0a:a1:44:28:9d:dc:1c:d6:
                    23:e3:1c:bb:77:ee:c3:d4:a6:5e:6a:bd:49:83:54:
                    ab:e5:dd:7a:2b:f9:e5:1e:c8:af:02:5b:74:46:76:
                    b9:36:e6:1f:20:c6:9e:7a:f5:09:b9:6c:90:61:cc:
                    4d:3b:b6:b6:12:f4:79:8c:64:d1:74:7b:12:cf:26:
                    c8:e9:ea:db:1c:c0:eb:97:cd:80:c4:8c:43:f5:8d:
                    d1:6f:70:5e:f5:78:81:66:5e:6b:e2:4d:8f:4e:39:
                    f1:79:ad:4e:19:2a:88:cb:17:18:53:89:5e:a1:9d:
                    05:9a:1b:0a:10:77:69:bf:03:2a:00:63:fa:8e:c6:
                    df:85:a4:d0:40:34:d5:8f:d9:cb:93:18:5a:bc:7f:
                    4e:d9:75:60:d4:b9:5e:04:65:01:1a:db:08:67:c8:
                    0d:2a:60:ef:9e:40:e1:b2:66:21:84:46:36:6d:57:
                    7e:27:c3:df:9c:68:13:45:61:c5:25:b8:bd:c8:02:
                    99:6d:db:59:37:7e:29:36:eb:50:15:e6:d5:ab:52:
                    38:4f:56:e7:1b:12:72:f1:ff:37:54:06:79:28:b7:
                    4b:c0:8a:28:f0:76:35:4d:e7:72:1d:9c:8c:ca:a8:
                    50:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4A:EC:DE:DB:79:56:24:A1:42:70:64:45:87:EC:69:ED:B9:1B:49
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68AD5E7ACEB811F1B1CDF103CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:17:73:0b:b4:9d:92:e8:1b:c7:41:26:69:15:f7:21:e6:dd:
         91:dd:fa:e0:7b:4e:d7:5e:0a:fb:0b:ec:fa:35:2d:11:ad:59:
         aa:41:32:dc:83:67:e4:0a:95:01:e9:ae:6f:b1:d0:d5:65:fd:
         48:7b:81:35:28:f8:f1:3e:d4:84:88:fc:65:3c:00:4c:c5:b1:
         4c:fc:5c:90:a5:9c:21:18:1e:05:43:3a:ef:a4:44:83:8c:90:
         8f:cb:e8:1b:af:64:7d:96:e8:59:7a:c1:71:b9:67:a2:f5:21:
         11:60:ee:06:75:98:41:56:b5:88:ac:3b:e3:fa:a9:3c:11:2a:
         98:8e:1a:14:f9:c4:6b:3b:c2:3e:14:e2:d8:ca:ad:9b:df:17:
         2a:21:f1:4a:aa:25:31:0d:83:79:4f:e5:9c:4e:1d:4f:a7:bf:
         ae:29:b4:2c:9c:c0:f4:58:45:24:9c:02:cd:79:4c:7d:42:5a:
         26:c3:51:5c:f3:e3:48:34:94:29:41:39:ed:7b:7b:e9:e4:bd:
         11:73:cd:44:5c:f3:f4:cc:5c:ab:78:6b:42:07:06:82:4c:0a:
         04:dc:4e:e2:9f:05:64:67:37:2d:56:12:72:3b:fc:76:59:c5:
         8f:39:40:77:ce:33:10:74:08:9b:76:e6:4d:1b:a6:f4:ea:4e:
         74:52:c2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----