Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1DECB6CB4CC11F1B84BFA0ECF1D38B0.roa
File:                     A1DECB6CB4CC11F1B84BFA0ECF1D38B0.roa (raw, json)
Hash identifier:          azSqWvDHaT+brUEPwMjG5Gv2FQcIM5YEPGI7xq+Z9ZI=
Subject key identifier:   38:B9:D0:05:62:36:F3:4D:A4:9F:FC:7D:35:01:AE:11:47:AD:A9:8A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E8EF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1DECB6CB4CC11F1B84BFA0ECF1D38B0.roa
Signing time:             Sun 20 Sep 2026 08:24:01 +0000
ROA not before:           Sun 20 Sep 2026 08:23:57 +0000
ROA not after:            Sat 24 Oct 2026 08:23:57 +0000
asID:                     18013
IP address blocks:        154.202.117.0/24 maxlen: 24
                          154.202.120.0/21 maxlen: 24
                          154.217.234.0/23 maxlen: 24
                          154.217.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125167 (0x1e8ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 20 08:23:57 2026 GMT
            Not After : Oct 24 08:23:57 2026 GMT
        Subject: CN=6aaf9821-357d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:96:ee:87:40:7c:cc:4f:c1:5c:03:dd:43:9d:
                    9c:d8:51:10:60:f5:87:e3:a9:b7:de:08:88:5b:cd:
                    89:a2:9e:4b:c6:9b:be:8d:06:48:9b:40:72:35:f4:
                    ea:7a:97:c3:a5:97:42:41:92:42:a4:29:3a:8a:07:
                    a4:9f:01:8f:11:d9:fb:fb:ff:02:3d:39:15:58:64:
                    c4:93:25:f2:d0:d7:1b:4f:ff:f6:ef:c3:56:59:bb:
                    82:5c:cc:f7:1b:da:3b:11:42:00:29:13:3d:56:4b:
                    27:c5:08:06:cb:e5:a6:5f:f9:e2:99:1b:c4:a1:81:
                    66:2f:c5:14:05:df:50:0d:41:93:f0:5b:b5:cd:72:
                    29:4d:4b:b8:6f:b2:04:75:fb:c6:c2:dc:79:3a:34:
                    d6:8e:24:5b:a0:8d:05:b1:87:d9:e5:ad:dc:83:45:
                    20:11:99:2f:a2:8d:70:4e:c6:5c:35:51:19:16:bd:
                    f9:78:e3:15:6c:36:f3:24:e5:84:17:70:46:cc:9b:
                    31:86:a6:ed:e9:de:b4:62:85:c4:52:f6:98:5d:5f:
                    b1:86:40:04:57:7e:e2:95:4c:a8:24:9a:d9:d7:a3:
                    1a:0e:94:75:db:31:8b:c0:4f:89:d7:f7:54:61:df:
                    9e:e9:05:f6:9d:36:6f:46:dd:cb:60:c1:09:a9:f5:
                    ef:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B9:D0:05:62:36:F3:4D:A4:9F:FC:7D:35:01:AE:11:47:AD:A9:8A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1DECB6CB4CC11F1B84BFA0ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.117.0/24
                  154.202.120.0/21
                  154.217.234.0-154.217.239.255

    Signature Algorithm: sha256WithRSAEncryption
         85:46:29:96:e8:73:96:01:ec:02:c1:d5:58:fa:ee:67:7a:9c:
         94:3b:4c:fe:ff:d1:d1:a3:31:11:16:b9:d6:ff:e7:7a:d4:cc:
         70:b6:b3:e1:da:7d:1b:1a:d0:d2:b4:5d:ce:4b:17:7a:c5:40:
         15:e2:9e:1e:90:bc:c1:ef:dc:83:60:1f:d4:6f:90:69:37:89:
         5c:1c:21:ae:8b:58:fd:a5:35:75:a5:60:1e:13:e8:51:7d:90:
         8b:9b:a1:dc:63:75:82:e1:4c:e9:87:c6:41:d4:38:1b:f7:6d:
         d7:06:31:7c:d8:f1:fa:6d:43:5b:ae:e9:6b:c2:c8:11:bb:a1:
         2f:02:d0:16:3a:81:67:d8:eb:04:ee:84:da:ed:4c:5b:55:90:
         b7:0c:a6:ce:3b:d2:f0:27:6c:30:14:d5:94:a7:c2:2b:a7:10:
         91:55:ce:92:21:fa:f2:47:34:5e:d1:74:cb:a8:a7:a4:dd:cf:
         c9:c1:a9:9a:f1:52:96:61:ee:e5:cb:8f:8b:89:18:f0:63:de:
         2e:a8:b1:76:8e:69:0f:25:dc:d4:77:5b:ec:3c:ba:1b:a4:bc:
         15:e7:46:40:b6:66:55:4c:ae:60:e6:fb:e1:0c:c7:2f:f7:a4:
         e4:cf:64:a7:dc:dd:c7:ee:3c:52:7d:04:10:66:7c:53:e0:f7:
         36:50:df:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----