Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1EF3B2EB4F011F19ED2C4F5CE1D38B0.roa
File:                     D1EF3B2EB4F011F19ED2C4F5CE1D38B0.roa (raw, json)
Hash identifier:          EveHipGPBtrD/yZNv8ox72HGPioJkn4tkD9sRtq3f3E=
Subject key identifier:   0B:73:D7:A9:67:50:02:9C:FC:8B:ED:90:FA:FA:DE:BD:59:0D:33:E3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E939
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1EF3B2EB4F011F19ED2C4F5CE1D38B0.roa
Signing time:             Sun 20 Sep 2026 12:43:03 +0000
ROA not before:           Sun 20 Sep 2026 12:42:59 +0000
ROA not after:            Tue 27 Oct 2026 12:42:59 +0000
asID:                     63139
IP address blocks:        154.94.86.0/24 maxlen: 24
                          154.94.87.0/24 maxlen: 24
                          154.94.88.0/24 maxlen: 24
                          154.94.89.0/24 maxlen: 24
                          154.94.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125241 (0x1e939)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 20 12:42:59 2026 GMT
            Not After : Oct 27 12:42:59 2026 GMT
        Subject: CN=6aafd4d7-8d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ed:33:ce:04:15:6c:96:4c:89:75:3e:3a:ab:
                    24:a2:ac:7b:63:a0:c8:64:af:d6:42:8b:c3:1b:a0:
                    f1:31:b2:97:53:29:39:08:43:a9:91:39:03:07:86:
                    1b:db:b4:5b:5c:d8:23:f4:76:64:fd:eb:48:bf:3c:
                    b9:0d:c3:e1:7b:ed:a1:e2:42:5a:a3:b9:bc:b4:b9:
                    0a:43:a4:6f:82:14:64:20:92:ea:34:f8:c9:82:de:
                    0b:aa:b9:09:b0:69:06:36:28:a4:c6:47:07:d1:13:
                    a3:15:e3:1d:bd:5f:05:7b:e8:11:76:ee:c8:49:68:
                    25:1f:77:41:24:54:56:b3:4d:14:6b:a9:56:31:f3:
                    4d:b5:a0:92:c2:e2:2a:84:dd:53:d2:e2:a6:df:da:
                    c4:52:66:86:d2:0c:d9:f0:e3:31:49:c6:24:ff:8a:
                    a2:b7:6b:be:56:2f:f0:1c:c8:70:c2:96:ef:06:a4:
                    a0:02:e7:ea:b9:a8:a2:af:be:89:76:0c:9d:e2:81:
                    65:37:bd:81:13:f6:d0:f9:ed:5a:05:df:6d:0e:a2:
                    2e:8a:3b:55:36:ad:17:1d:9a:68:d4:b4:5e:e9:13:
                    d0:34:fb:a4:6d:26:e6:6b:b1:c9:7e:15:88:57:7c:
                    b9:45:91:e4:32:75:c0:c8:fc:b5:c0:63:d3:c6:d9:
                    a7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:73:D7:A9:67:50:02:9C:FC:8B:ED:90:FA:FA:DE:BD:59:0D:33:E3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1EF3B2EB4F011F19ED2C4F5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.86.0-154.94.90.255

    Signature Algorithm: sha256WithRSAEncryption
         12:a5:c3:7f:bc:6b:d9:76:af:82:f6:41:85:9e:80:18:49:2b:
         95:8a:fc:11:a7:ad:e7:53:36:8f:3f:95:30:88:b3:52:76:3e:
         ff:2b:b2:f1:54:96:24:de:ab:a0:7a:56:12:01:21:83:91:48:
         b4:36:cb:93:cc:95:30:af:c3:a8:4f:ce:09:d6:6c:0b:7c:0a:
         c0:04:44:23:31:4d:06:b6:31:0d:e8:5e:73:76:2b:c3:67:a6:
         b0:54:0d:98:c0:eb:94:64:98:11:0d:77:59:de:c0:a1:b9:d0:
         8c:3b:9b:f1:38:6f:35:8a:1c:9d:ad:1a:2b:63:da:4a:21:fb:
         6f:a0:52:8b:c8:89:d2:80:e0:99:73:d0:7b:c7:4b:5d:f4:dc:
         70:54:03:09:80:43:97:c4:97:c7:e1:5c:c6:62:66:8b:98:6a:
         bc:be:27:af:81:16:7c:5a:c1:a0:ae:b3:34:c7:17:4f:96:12:
         00:97:5f:aa:53:d7:8f:94:94:fb:69:4e:1c:77:5b:81:4a:7a:
         ee:77:7d:6a:5b:cc:6e:07:3a:83:f6:2d:8c:9c:d6:60:00:3d:
         ba:41:b2:ca:23:71:ae:66:f0:1a:2f:51:f0:08:5a:53:ee:3e:
         6c:f1:40:83:b8:aa:bc:e0:6d:b3:85:49:a4:4b:c1:f1:68:32:
         fe:cd:77:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----