Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68425CEE9F9A11F195A98ADACE1D38B0.roa
File:                     68425CEE9F9A11F195A98ADACE1D38B0.roa (raw, json)
Hash identifier:          HV3krPugJvYHe/1eWYo4Oy5gG1txlFgvXp46XYDZ6So=
Subject key identifier:   BF:50:FE:F0:06:D4:DC:6A:A8:2B:BD:24:4C:7F:24:4A:A6:48:59:E3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E22D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68425CEE9F9A11F195A98ADACE1D38B0.roa
Signing time:             Mon 24 Aug 2026 09:01:35 +0000
ROA not before:           Mon 24 Aug 2026 09:01:31 +0000
ROA not after:            Fri 02 Oct 2026 09:01:31 +0000
asID:                     62240
IP address blocks:        154.198.63.0/24 maxlen: 24
                          154.198.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123437 (0x1e22d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 24 09:01:31 2026 GMT
            Not After : Oct  2 09:01:31 2026 GMT
        Subject: CN=6a8c086f-fca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5e:61:c2:a8:d7:f7:e8:27:66:ac:66:e0:22:
                    bc:37:55:ff:bb:b1:cf:d6:73:b8:e2:cd:4c:b8:92:
                    80:23:0a:70:78:8c:d7:ff:d6:11:05:41:10:c6:1b:
                    d0:0b:b5:41:8c:b0:dc:03:38:dc:c4:3d:1c:d3:6f:
                    e3:e4:fa:af:ba:03:18:60:ed:f4:bb:ce:39:d3:e9:
                    1f:0c:26:7e:b2:c7:1a:0d:5f:fc:16:7f:15:96:37:
                    b2:0d:71:e2:d2:90:11:f5:23:97:16:65:74:e3:37:
                    49:b7:db:d7:5c:df:ef:f5:67:44:4c:19:96:1a:99:
                    31:1f:0f:b9:8e:99:e1:1f:5c:ec:77:56:96:22:60:
                    12:ca:1c:df:cf:10:1e:99:e4:24:8f:03:84:61:f3:
                    c3:89:3f:1f:fb:e8:b1:d6:18:80:48:b7:2f:71:95:
                    33:47:3e:c7:1a:1d:b9:61:2e:88:8b:6f:69:1f:04:
                    da:91:b3:d4:69:13:0c:e0:28:3b:27:ba:ba:f0:e2:
                    0c:3e:34:7a:1d:f2:61:1f:00:46:0f:94:86:02:6e:
                    33:dd:0b:29:85:da:13:1d:1e:af:7d:02:09:24:6c:
                    b5:90:22:1e:33:e0:8c:eb:6e:44:2c:ab:4e:dd:ee:
                    1f:15:3c:73:d8:47:87:bc:b4:a3:bb:e8:a1:b0:4b:
                    d0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:50:FE:F0:06:D4:DC:6A:A8:2B:BD:24:4C:7F:24:4A:A6:48:59:E3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68425CEE9F9A11F195A98ADACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.198.63.0/24
                  154.198.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:11:6c:e4:99:28:dd:55:ec:e2:59:38:8b:8d:c2:dd:94:33:
         1a:2e:ea:55:38:88:ce:f1:8b:0d:2f:09:fe:cf:95:f0:09:90:
         a0:39:a7:c0:97:30:37:b7:6b:2a:00:6e:9c:e0:e6:b8:ae:52:
         a3:35:6e:ee:fe:d6:05:39:4d:2c:7b:71:84:d6:1e:79:bb:0a:
         92:ee:74:ed:fd:c7:70:18:e8:bc:40:2e:75:a5:bc:98:f3:b3:
         56:cc:a3:11:18:71:88:82:bb:a7:f5:3e:a9:65:71:e3:18:f0:
         76:3b:b5:06:99:26:eb:5f:3c:62:be:75:00:cc:8d:ed:43:41:
         7d:f1:40:32:53:fa:88:88:a7:94:7c:f3:6a:ee:4d:c5:bf:2e:
         20:8c:a9:e8:29:14:aa:ff:10:68:3e:33:74:e8:ec:99:bb:17:
         01:5c:f1:60:3d:7e:71:62:b3:5e:6f:e9:b0:f5:bf:07:a9:26:
         aa:1f:8e:27:90:65:4f:a9:df:c8:97:50:46:4e:df:3b:82:92:
         9e:ee:8a:49:73:7d:54:55:3d:12:c8:10:aa:fd:b8:de:23:18:
         93:17:70:ad:27:54:14:b5:f2:54:71:52:3f:7d:0d:97:8d:ca:
         e1:d1:89:0d:96:3b:bd:4f:da:cd:f7:d5:5e:d1:af:ed:b8:df:
         5b:b1:d1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----