Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F3D924EB0E211F19B8BE903CF1D38B0.roa
File:                     6F3D924EB0E211F19B8BE903CF1D38B0.roa (raw, json)
Hash identifier:          d5ha2z7Km+1Dq06/P7XQf9q/0wQFrmNkGXm6ODyeUT0=
Subject key identifier:   64:B6:BE:1C:3A:7D:EE:0A:C7:05:45:32:F1:9C:42:8D:3E:91:D8:07
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E855
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F3D924EB0E211F19B8BE903CF1D38B0.roa
Signing time:             Tue 15 Sep 2026 08:50:00 +0000
ROA not before:           Tue 15 Sep 2026 08:49:56 +0000
ROA not after:            Mon 19 Oct 2026 08:49:56 +0000
asID:                     11404
IP address blocks:        154.194.236.0/22 maxlen: 24
                          154.211.224.0/19 maxlen: 24
                          154.215.32.0/19 maxlen: 24
                          154.222.160.0/19 maxlen: 24
                          154.223.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125013 (0x1e855)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 15 08:49:56 2026 GMT
            Not After : Oct 19 08:49:56 2026 GMT
        Subject: CN=6aa906b8-bce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a8:78:62:7a:62:a9:06:70:62:f0:e8:2e:0b:
                    fa:ff:e4:02:9d:ae:42:51:e5:0b:32:85:66:95:46:
                    dc:a7:4c:45:27:4f:3a:02:1a:28:89:cc:1e:86:88:
                    5b:11:9a:8b:dd:78:80:8f:32:57:e3:b7:7a:64:db:
                    58:db:d7:63:b1:05:f2:7f:21:ec:04:e8:60:9b:46:
                    9e:44:d2:b8:fa:a0:90:1d:9b:66:93:48:c0:3a:38:
                    87:4b:ea:f9:8b:ac:b2:08:84:d4:db:be:bf:b5:1f:
                    1c:9d:51:88:8a:5a:49:8f:14:74:a6:60:e2:03:05:
                    31:fc:75:97:be:7f:30:aa:ea:f5:b1:cf:05:2a:a0:
                    2c:fe:d1:8d:16:f5:ee:cb:c6:c9:3c:24:e2:07:13:
                    3d:bd:94:b2:e9:ed:70:44:f3:f8:30:56:3f:ad:bc:
                    ea:d3:f9:87:0f:58:b5:1a:4b:11:55:4a:80:19:61:
                    ed:c7:28:3c:1d:db:b3:2b:74:b3:a4:c9:a6:7a:71:
                    f1:c6:f3:df:5f:f6:ae:85:d7:cc:ee:2e:58:ab:d4:
                    11:c4:9c:69:0e:42:30:ee:11:3a:9f:a8:a7:6b:4d:
                    91:d7:a6:91:e9:22:b2:1d:52:7a:71:e0:bb:41:79:
                    c0:8f:7b:cc:94:a4:95:4c:06:36:e7:ff:78:67:ba:
                    91:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B6:BE:1C:3A:7D:EE:0A:C7:05:45:32:F1:9C:42:8D:3E:91:D8:07
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F3D924EB0E211F19B8BE903CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.236.0/22
                  154.211.224.0/19
                  154.215.32.0/19
                  154.222.160.0/19
                  154.223.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         08:95:22:4b:af:34:cc:34:10:8c:a3:87:85:e7:15:75:e2:7d:
         f6:11:d3:43:ae:de:ef:cf:ba:17:de:82:0a:d9:1c:73:50:16:
         6b:26:45:41:6d:62:51:fc:77:88:07:22:8c:1e:dc:d8:1f:5b:
         1f:6e:95:08:da:d4:cf:2f:27:3f:9d:30:16:9c:e4:2b:12:b4:
         37:e2:ef:4e:e7:92:3a:2a:a0:90:50:37:01:4f:ad:41:0e:af:
         ff:0e:6c:ec:4b:ef:a1:b9:b5:b8:8d:d9:91:10:7d:dc:e0:ca:
         98:e1:62:8d:e0:92:c0:35:46:61:1c:fa:f2:28:46:0d:aa:ec:
         15:48:3c:64:60:8a:c9:91:aa:80:3e:e3:31:ee:60:a7:5a:ca:
         e1:b6:42:3c:44:f5:08:89:94:eb:35:a9:7c:e7:83:20:90:62:
         55:61:58:a3:76:49:49:ab:f2:32:07:05:10:5f:1c:d8:b4:98:
         4b:cf:6c:2d:13:cb:f9:ce:72:a2:20:f5:c8:43:8b:5b:8a:8c:
         08:f0:5b:f3:d2:f3:66:1f:c3:d3:df:00:4d:fc:83:05:ae:f2:
         5a:1c:7f:48:65:ce:3e:45:12:a9:7d:b4:6d:2a:69:80:cd:59:
         f5:0c:43:54:6b:03:e9:61:31:eb:84:1c:bd:d1:e7:3c:d0:40:
         d4:52:75:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----