Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71AE6812A37E11F1A2F6DCF5CE1D38B0.roa
File:                     71AE6812A37E11F1A2F6DCF5CE1D38B0.roa (raw, json)
Hash identifier:          s3MRHQUxD7B+u4I62jMjEMYkG5JWSv4p4sOHScx78PY=
Subject key identifier:   F8:A1:BF:54:B8:05:76:03:DC:0B:AA:86:0C:6E:C7:54:1A:BA:DA:B4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E3EF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71AE6812A37E11F1A2F6DCF5CE1D38B0.roa
Signing time:             Sat 29 Aug 2026 07:51:30 +0000
ROA not before:           Sat 29 Aug 2026 07:51:26 +0000
ROA not after:            Fri 02 Oct 2026 07:51:26 +0000
asID:                     214413
IP address blocks:        154.193.136.0/21 maxlen: 24
                          154.193.144.0/22 maxlen: 24
                          154.193.148.0/22 maxlen: 24
                          154.193.168.0/22 maxlen: 24
                          154.193.172.0/22 maxlen: 24
                          154.193.176.0/22 maxlen: 24
                          154.193.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123887 (0x1e3ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 29 07:51:26 2026 GMT
            Not After : Oct  2 07:51:26 2026 GMT
        Subject: CN=6a928f82-be3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0b:c6:b9:52:93:11:da:12:ae:8f:0d:df:ae:
                    2d:64:d3:25:50:e3:13:8b:0a:f0:25:26:6e:25:68:
                    47:38:c8:a2:69:ba:51:7b:20:25:97:61:75:58:59:
                    72:fd:fa:c8:9b:b6:b4:fd:8d:8b:08:21:ec:aa:b2:
                    47:37:8d:76:18:ee:bb:6b:53:43:25:97:9b:cf:c3:
                    68:0b:8c:66:0e:88:5b:a2:3d:61:a7:95:f8:c1:f7:
                    e7:2c:58:df:b0:d2:33:31:d0:1c:48:c3:45:a9:95:
                    d1:f8:d2:c7:57:58:92:0f:e8:b9:e7:c3:db:4e:fb:
                    e2:35:fd:c4:1e:1c:74:db:89:7f:17:b2:4f:78:6b:
                    8e:2a:50:1d:56:2c:d8:c1:68:ca:5c:be:b9:4a:72:
                    f2:49:c6:7e:ba:e0:41:32:a5:e5:83:95:17:4e:0e:
                    10:9a:72:d9:30:8f:0b:88:fb:01:0e:82:90:af:ed:
                    7b:17:bd:00:d4:59:c9:20:0e:5e:18:71:51:30:b7:
                    28:12:bc:ea:21:81:ee:ba:ec:3b:03:4a:37:80:f2:
                    ed:76:66:2e:68:b6:3a:ff:d3:0e:73:58:5b:80:d8:
                    95:16:e4:ab:77:b4:7c:9a:59:25:ef:62:c7:fc:44:
                    3d:58:b0:50:0c:4c:df:5e:c8:42:55:54:f9:98:70:
                    50:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A1:BF:54:B8:05:76:03:DC:0B:AA:86:0C:6E:C7:54:1A:BA:DA:B4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71AE6812A37E11F1A2F6DCF5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.136.0-154.193.151.255
                  154.193.168.0-154.193.183.255

    Signature Algorithm: sha256WithRSAEncryption
         bd:71:8f:89:e5:1d:b0:7c:b9:00:da:16:2e:aa:9f:60:6b:ce:
         01:77:92:ba:56:3b:a4:60:1d:8b:65:a9:f2:0d:f0:d5:df:d6:
         37:79:09:f7:d4:6e:ba:df:40:a2:ba:3c:53:aa:b3:60:68:63:
         8c:d1:51:23:92:3b:03:b2:5c:a3:50:35:b9:c0:c6:25:11:a6:
         24:b7:12:8c:99:77:52:6d:24:a6:83:83:ea:2e:16:79:e2:44:
         b6:ef:35:31:1a:2d:37:26:36:47:33:14:1d:94:9d:95:17:8c:
         05:b1:fb:4a:e8:fb:dc:21:38:4e:95:55:44:96:40:0c:d4:89:
         c0:44:75:61:4d:79:9f:3a:dc:b3:ba:2a:4b:56:80:3c:92:b2:
         24:6f:bd:74:5f:18:31:20:63:4d:34:c9:3f:ac:de:d9:88:de:
         12:99:16:47:74:77:10:b1:57:16:41:7f:c8:50:fb:e2:c2:03:
         4c:33:cf:2e:60:88:4f:30:27:74:75:08:3e:b7:55:a9:01:6f:
         cc:34:62:10:bf:81:a0:7f:f8:fa:6a:35:c6:49:38:5c:83:87:
         82:f1:cf:33:7a:7b:ea:28:43:0b:44:3c:cd:26:3c:d6:f9:d6:
         46:25:7f:3a:69:3f:bf:83:85:3f:75:5a:d2:89:48:9b:bb:6b:
         db:6b:ff:df
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----