Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A40ED062A9C811F1AADEFF03CF1D38B0.roa
File:                     A40ED062A9C811F1AADEFF03CF1D38B0.roa (raw, json)
Hash identifier:          9ps7EKM8TUID2Vf8rQZXGwaTfB5YzRg4p2TqI4frNpg=
Subject key identifier:   63:4A:DB:C7:1E:C2:3C:90:F5:A2:5C:1C:01:77:0D:5C:96:7E:04:65
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E5D7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A40ED062A9C811F1AADEFF03CF1D38B0.roa
Signing time:             Sun 06 Sep 2026 07:57:44 +0000
ROA not before:           Sun 06 Sep 2026 07:57:39 +0000
ROA not after:            Wed 07 Oct 2026 07:57:39 +0000
asID:                     140224
IP address blocks:        154.86.16.0/24 maxlen: 24
                          154.86.17.0/24 maxlen: 24
                          154.86.18.0/24 maxlen: 24
                          154.86.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124375 (0x1e5d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  6 07:57:39 2026 GMT
            Not After : Oct  7 07:57:39 2026 GMT
        Subject: CN=6a9d1cf8-4846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:45:63:91:00:ea:61:0b:c5:1f:cc:0f:37:93:
                    7b:1d:96:c7:4e:a4:22:8b:a8:49:5e:db:3d:62:4d:
                    80:52:82:6a:4b:ac:31:ee:14:f0:c3:28:95:c9:ca:
                    3d:b8:ec:f5:cf:f4:dc:89:4d:ff:c1:f1:7e:db:28:
                    6e:56:33:8e:9d:96:83:5c:7a:8d:ac:af:df:20:07:
                    db:4d:70:9e:89:cf:65:85:6c:0f:85:82:e7:33:05:
                    62:36:67:66:a1:31:48:c8:d9:dd:1e:57:1a:d3:9e:
                    3f:41:bb:97:c8:0c:da:61:3b:4d:5f:61:fe:01:ab:
                    78:fb:7a:1f:01:07:46:1f:fc:dd:03:65:ea:fe:28:
                    c0:b5:20:06:ae:44:8d:44:51:b0:3f:a1:a9:01:32:
                    71:35:75:1f:96:9b:01:7f:67:2d:53:58:0a:1c:d9:
                    64:7a:03:dc:c1:c5:13:d4:e1:7a:03:5e:34:d4:9f:
                    5f:ff:7a:6d:7f:b2:07:13:38:08:0f:38:61:b0:f8:
                    bf:42:0c:44:50:be:2e:6c:7d:11:1a:71:95:7a:1e:
                    e3:e0:94:ca:85:d5:20:41:f8:fa:be:89:2a:3a:84:
                    8c:76:2a:dd:37:e2:f8:bb:fc:cb:da:19:0a:c8:0a:
                    f7:7f:ac:9c:a7:9d:ca:8a:7d:94:e0:5e:d4:63:e5:
                    f0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4A:DB:C7:1E:C2:3C:90:F5:A2:5C:1C:01:77:0D:5C:96:7E:04:65
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A40ED062A9C811F1AADEFF03CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:69:6a:9d:64:4b:3d:cc:45:63:41:30:e3:a1:0b:88:d1:5d:
         41:89:13:ea:00:22:9c:ca:b6:fc:d9:89:64:93:ac:66:bc:e5:
         c7:1c:d0:51:3a:3c:ee:d7:6d:c9:ee:a6:73:d5:f4:b6:99:95:
         90:12:94:94:ff:91:5b:67:70:b7:58:f7:4a:17:2c:6a:d6:11:
         58:39:d3:41:d7:35:13:d6:b5:88:32:00:ae:b2:da:ef:f7:dc:
         41:c7:32:c7:a1:70:1f:0c:09:85:db:c3:cf:1f:db:e4:5e:b8:
         8d:58:a6:c0:87:4d:c2:a1:95:45:9f:46:ae:d8:fd:d2:1c:bb:
         f6:1c:53:a4:68:78:2b:c8:49:7a:54:03:45:2e:ad:21:57:be:
         14:3b:25:49:36:ef:11:21:62:6e:68:ed:b8:03:de:34:7f:02:
         7f:72:5c:95:54:8c:70:78:19:63:aa:ef:4a:cb:cd:bc:9d:e4:
         2a:71:d0:96:5d:7a:2b:95:e6:63:7c:19:67:1f:a1:85:99:43:
         0f:f8:45:f0:bb:e8:b4:79:d6:74:97:3e:9d:fe:89:23:5f:43:
         5c:33:1b:18:7c:cb:74:79:a8:ed:0e:c0:47:07:75:44:78:cc:
         8a:f6:91:68:3b:27:0f:ed:85:4a:c8:d6:29:fe:90:9f:77:d0:
         08:9c:8d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----