Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ECB91CEA4FA11F18748E2EECE1D38B0.roa
File:                     6ECB91CEA4FA11F18748E2EECE1D38B0.roa (raw, json)
Hash identifier:          62aCyTOuXjhc8L0TWsLGw4tX7W0ozdQ813+qNp9ElXU=
Subject key identifier:   FB:AD:5B:D7:C3:65:C0:80:21:F7:62:43:60:06:60:31:DF:50:10:D6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E43B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ECB91CEA4FA11F18748E2EECE1D38B0.roa
Signing time:             Mon 31 Aug 2026 05:11:34 +0000
ROA not before:           Mon 31 Aug 2026 05:11:29 +0000
ROA not after:            Sat 28 Aug 2027 05:11:29 +0000
asID:                     398704
IP address blocks:        154.92.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123963 (0x1e43b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 31 05:11:29 2026 GMT
            Not After : Aug 28 05:11:29 2027 GMT
        Subject: CN=6a950d05-069e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d3:c2:12:dd:f7:9e:4d:a6:c2:0e:2f:0f:b1:
                    cf:6d:24:d0:c6:d0:4a:2e:32:a7:ce:23:c8:c6:69:
                    d4:a7:74:7b:d9:fb:b7:64:67:a3:de:c3:d7:25:a9:
                    70:3b:c7:16:f3:a3:63:cf:b9:0f:5a:e9:76:c3:b8:
                    d6:8e:22:5b:ac:a9:2a:40:e2:37:92:d9:1f:b1:b0:
                    da:af:ff:41:01:ca:99:6a:9d:26:12:2e:ae:48:8c:
                    96:99:2b:7f:75:d9:2f:ca:42:bc:ef:53:2a:8c:c9:
                    4f:6d:a9:ca:c4:86:b7:ec:0c:a2:51:81:c5:04:80:
                    a8:8d:0f:02:52:af:45:e1:a7:5f:31:b3:51:d4:99:
                    c7:c2:fe:47:ab:0c:66:cb:aa:e5:9c:fc:71:a8:18:
                    6c:2e:24:9c:2d:8a:b5:f7:54:4b:b1:51:51:3f:7b:
                    e5:26:d0:f5:e6:99:19:db:93:81:1b:0b:7d:a2:35:
                    a5:c4:fd:89:6b:34:ab:a7:1d:cd:49:e9:3d:d7:d7:
                    be:3a:9f:42:2e:d0:fe:f2:be:b4:cd:ee:d3:d8:fc:
                    e8:d4:cd:73:51:89:16:42:78:bd:b3:8a:44:7a:dc:
                    29:63:e2:d5:bb:f4:9e:6b:44:2f:c7:9e:a8:13:35:
                    e0:f0:30:ff:ef:0d:e8:30:ff:b7:8c:66:ab:5f:ed:
                    60:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AD:5B:D7:C3:65:C0:80:21:F7:62:43:60:06:60:31:DF:50:10:D6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ECB91CEA4FA11F18748E2EECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a4:38:13:ee:09:80:c7:59:7a:af:8a:bb:54:36:ee:eb:45:0e:
         33:7b:b3:d7:a7:e7:64:36:ac:e4:ef:28:2f:d5:72:2c:a8:76:
         24:e3:f4:29:53:85:6f:49:5a:cc:1a:fc:42:47:b8:32:75:21:
         6d:87:8b:94:3a:b9:4f:a3:68:ff:d9:76:08:48:8e:ee:ca:7c:
         a5:08:bb:e9:36:2f:fb:75:77:1c:b4:67:a8:e2:b7:f9:78:3e:
         d0:8a:0b:78:0d:06:fd:e3:42:2e:70:b3:aa:97:84:0a:2a:5e:
         38:34:2b:91:97:88:7c:22:ee:d7:09:79:4d:14:bf:67:45:d0:
         78:af:bf:b1:07:ad:44:8f:20:38:02:a0:76:06:d8:e0:a4:87:
         10:3f:46:cb:15:6b:b7:f5:bc:a6:70:92:32:f1:50:34:ab:6f:
         a6:a1:cc:9b:a6:40:e2:47:98:b0:6e:85:77:8e:de:f0:40:72:
         94:63:9b:d1:59:9e:1f:06:46:6b:98:05:9c:55:df:b6:63:f2:
         ac:4c:d3:a5:69:5f:d6:0a:e9:b1:84:95:41:85:d3:97:4d:6d:
         5e:62:93:b8:a0:34:ef:ce:10:f5:63:d3:c9:8b:25:7f:98:2a:
         31:ec:ad:6d:12:0d:d9:76:f6:f8:d9:1e:55:10:46:18:fc:42:
         f0:f0:ee:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----