Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31A9D300A77011F1AC14DBD0CE1D38B0.roa
File:                     31A9D300A77011F1AC14DBD0CE1D38B0.roa (raw, json)
Hash identifier:          jsVr3cPz4gXfwd5B/lYouvjvH7EsJXt+6lVTXEZ2d2o=
Subject key identifier:   B4:5D:EE:5C:FC:EE:EE:B6:48:AF:EA:7E:4C:63:92:D5:ED:D8:05:69
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E4FD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31A9D300A77011F1AC14DBD0CE1D38B0.roa
Signing time:             Thu 03 Sep 2026 08:19:34 +0000
ROA not before:           Thu 03 Sep 2026 08:19:30 +0000
ROA not after:            Fri 09 Oct 2026 08:19:30 +0000
asID:                     20326
IP address blocks:        154.84.160.0/22 maxlen: 24
                          154.84.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124157 (0x1e4fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  3 08:19:30 2026 GMT
            Not After : Oct  9 08:19:30 2026 GMT
        Subject: CN=6a992d96-5299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fc:44:cd:82:a2:0d:83:07:01:f6:cd:6d:99:
                    29:62:71:ed:0c:3c:ad:a5:7a:f7:2a:f2:1b:1a:38:
                    f3:09:50:ec:83:1e:40:a6:3c:23:45:dd:4b:80:ce:
                    ac:df:18:d7:50:29:6d:4b:b9:03:41:3f:18:f9:02:
                    db:bf:f9:21:ef:d0:56:9a:f3:87:b4:22:b0:1b:5a:
                    67:d0:20:26:21:c9:08:80:36:45:8a:a6:55:f2:06:
                    98:f3:ba:97:f8:66:39:cc:90:94:c3:1c:6c:ad:27:
                    55:94:01:e1:a2:96:f5:e1:6c:26:18:e6:5b:fa:b9:
                    43:a0:ba:6f:ce:97:0a:d8:5a:cb:a2:97:ca:7c:4a:
                    d1:50:75:49:e1:9a:69:52:45:7a:db:aa:0f:24:4c:
                    79:5d:45:99:ce:89:6e:70:88:3c:55:c7:ab:08:7d:
                    b9:a4:ef:07:7b:03:f8:4e:e9:1b:21:61:70:a3:c2:
                    36:a2:a5:3d:0b:de:31:c1:86:78:3d:ef:4a:43:b2:
                    9e:e4:43:6e:f2:9c:22:8a:e0:0e:e0:ff:b9:ae:28:
                    9e:f9:46:e7:4c:b6:55:22:b0:78:cb:25:af:39:30:
                    94:95:f0:e8:62:cf:6c:3e:05:19:b9:19:fe:21:93:
                    a3:9a:9e:39:fa:70:ee:43:f0:ed:6c:ca:27:5d:71:
                    74:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5D:EE:5C:FC:EE:EE:B6:48:AF:EA:7E:4C:63:92:D5:ED:D8:05:69
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31A9D300A77011F1AC14DBD0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.160.0/22
                  154.84.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:09:09:6c:e5:0a:d9:33:15:39:6f:da:9d:2d:54:41:f1:d5:
         b1:1b:ed:2b:0f:46:8f:f6:2a:fe:3c:98:70:c3:4c:6b:69:bf:
         e0:93:2e:6b:44:d5:9d:87:d3:b0:95:8b:87:f4:40:4a:4d:65:
         8b:7e:34:b7:e0:3c:73:34:5b:b8:16:2b:bd:31:f2:6c:29:ef:
         22:bb:29:59:65:25:a5:ae:f5:3e:cc:d2:8b:7a:f4:53:83:53:
         5f:b0:54:63:f9:8e:c2:2b:1d:bb:e4:1d:8a:8f:89:1d:dc:31:
         a6:7f:b2:fb:03:8e:2f:50:6d:3e:57:93:ab:d0:e4:3d:6e:dc:
         a9:81:32:d7:d2:49:6d:a2:e2:47:67:f3:28:1d:de:12:2b:0b:
         ba:55:e8:d2:63:0e:9f:f8:9a:77:1a:9e:3c:5b:92:a9:a1:7c:
         e0:e7:a7:1c:86:92:c0:e0:13:09:5f:6b:da:84:05:99:a4:2e:
         a4:f8:53:fd:d7:bf:c0:e2:9e:a4:1f:06:9f:1d:f3:46:a1:8b:
         93:23:7a:2c:33:3f:8a:21:c4:34:0d:aa:f3:b9:6f:41:cd:e5:
         36:42:26:7b:5b:9b:11:f5:f8:7f:5f:52:47:68:77:b1:5a:2d:
         6e:33:5f:93:07:95:59:46:65:6a:b3:6e:79:59:8e:3f:aa:d1:
         31:c8:1c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----