Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3D44C3CD1DA11F1892C85F9CE1D38B0.roa
File:                     F3D44C3CD1DA11F1892C85F9CE1D38B0.roa (raw, json)
Hash identifier:          QbO9xtyXpysbwX/CfXhZqlV0OTkTRuGdM8n62YqbVWU=
Subject key identifier:   0B:24:D1:73:68:C3:8B:C9:4A:B3:97:9B:F1:FB:88:DA:64:6A:35:37
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01F060
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3D44C3CD1DA11F1892C85F9CE1D38B0.roa
Signing time:             Tue 27 Oct 2026 07:49:35 +0000
ROA not before:           Tue 27 Oct 2026 07:49:30 +0000
ROA not after:            Fri 27 Nov 2026 07:49:30 +0000
asID:                     136897
IP address blocks:        154.86.156.0/24 maxlen: 24 (superfluous maxlen)
                          154.86.157.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127072 (0x1f060)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 27 07:49:30 2026 GMT
            Not After : Nov 27 07:49:30 2026 GMT
        Subject: CN=6ae0578f-9189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2f:4b:35:9e:d7:48:0f:e0:b2:6b:07:99:d9:
                    5c:35:b1:8c:10:36:19:96:a3:ca:ef:58:7b:cd:9a:
                    f7:0d:8d:e9:c5:7c:8b:7e:11:9f:87:65:3f:f3:22:
                    77:20:d7:6d:78:37:ed:70:1d:e0:cf:1b:8a:06:35:
                    77:bb:fd:6e:00:b4:1d:ff:a9:ce:d7:3a:0f:c1:4e:
                    76:e9:98:c7:8f:c1:70:9d:49:14:30:92:91:64:48:
                    a0:a4:c7:17:c7:ed:b7:c7:f0:d9:19:ec:d7:7e:ec:
                    3d:45:9b:40:17:0b:4a:9c:60:a1:4c:2a:a2:94:54:
                    a0:fd:de:cf:97:dd:66:21:c9:b4:5c:97:d3:77:29:
                    33:6d:e4:44:b6:82:8a:4e:5c:50:25:dc:9f:f2:dc:
                    71:b3:17:a1:49:42:2b:58:b9:f9:2e:b9:e2:bf:d4:
                    f1:73:49:c8:d6:19:63:96:e8:91:fe:c1:c8:5f:3f:
                    83:09:d0:1d:88:4a:a6:28:27:88:08:6d:94:56:f1:
                    cc:7a:1a:fd:69:21:a1:8e:91:b3:fe:f4:f6:5c:40:
                    20:c3:ac:94:ef:dd:61:c9:62:27:47:46:f7:e9:ca:
                    90:92:7f:67:4d:1d:b6:e0:e5:65:30:49:ee:fa:b4:
                    a5:10:dd:f9:94:0b:42:b9:4b:5f:12:50:7f:d9:05:
                    83:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:24:D1:73:68:C3:8B:C9:4A:B3:97:9B:F1:FB:88:DA:64:6A:35:37
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3D44C3CD1DA11F1892C85F9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:95:b0:db:85:1d:fe:3a:a4:4d:05:a4:73:1d:e9:09:de:86:
         66:61:68:d3:ae:ae:19:11:c2:be:0a:f4:ba:ab:d6:9e:c9:4f:
         33:04:6d:b8:2f:17:8a:e1:0a:8c:e2:e8:a4:fe:fa:37:d1:bb:
         12:32:8e:35:10:87:0a:3b:bc:7e:d1:fa:21:86:ac:b5:6f:dc:
         7c:d6:44:5c:85:87:9a:e3:97:1b:8f:8d:fa:ef:de:ed:3b:14:
         6f:18:8c:c8:87:73:ca:fd:01:92:ed:77:d0:df:49:dd:67:de:
         0b:ad:6e:15:72:b8:55:17:37:f7:2a:77:47:7d:8e:fc:93:7f:
         90:00:84:26:33:09:47:f3:f7:4a:66:a7:1f:eb:9e:32:e8:e1:
         fc:55:a2:cd:36:9a:af:58:4d:49:ae:26:f7:fc:21:8a:49:fb:
         95:cc:04:bb:4b:31:fc:88:b8:9b:91:e5:50:5f:c2:b6:14:03:
         1d:e4:f5:33:e8:1b:26:c5:a9:68:03:d8:55:5c:a2:0f:8b:6c:
         19:c2:36:14:c8:05:dc:ec:23:dd:bb:ee:4d:49:70:d1:14:92:
         81:7d:37:33:d9:12:1b:38:34:b3:09:e9:2e:6f:d8:07:b2:39:
         71:ab:f5:f6:15:2c:e2:10:cb:01:e9:a1:0c:42:c7:b0:e6:68:
         c8:dc:3c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----