Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D39D2768B4FC11F1B741CAC2CE1D38B0.roa
File:                     D39D2768B4FC11F1B741CAC2CE1D38B0.roa (raw, json)
Hash identifier:          l+bOZ/cyQYwEUCkxr+AdPgvC+QcFmzH5455E9eSNO+c=
Subject key identifier:   47:7D:A7:00:7F:39:0E:5D:F9:49:BE:4C:0F:21:49:C5:F9:36:7F:8A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E955
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D39D2768B4FC11F1B741CAC2CE1D38B0.roa
Signing time:             Sun 20 Sep 2026 14:09:00 +0000
ROA not before:           Sun 20 Sep 2026 14:08:56 +0000
ROA not after:            Sat 24 Oct 2026 14:08:56 +0000
asID:                     402169
IP address blocks:        154.202.117.0/24 maxlen: 24
                          154.202.120.0/21 maxlen: 24
                          154.217.234.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125269 (0x1e955)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 20 14:08:56 2026 GMT
            Not After : Oct 24 14:08:56 2026 GMT
        Subject: CN=6aafe8fc-c469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:11:35:c2:d1:9d:b9:25:aa:26:c3:0b:bf:6d:
                    43:eb:71:0c:57:57:7f:02:05:6a:bc:28:4e:53:40:
                    9e:08:64:b6:bb:95:b4:0c:9c:39:d6:18:92:41:ca:
                    86:99:72:be:e9:36:6e:21:47:63:60:db:fe:2e:eb:
                    fa:ee:c6:a1:a5:2d:11:56:4f:f5:1f:39:ab:28:4e:
                    d8:d3:9f:f6:5c:9a:3b:7f:35:ec:c2:f3:fd:db:6e:
                    30:83:f3:42:78:44:8a:f5:45:90:8c:68:ef:2d:35:
                    01:07:c7:01:32:c4:3b:21:a3:d2:b1:57:19:d3:f1:
                    7c:98:f8:df:ac:ab:61:e9:7f:b4:a2:12:ff:7e:fb:
                    b5:6a:68:5f:ff:a5:2b:25:29:58:b2:2f:57:59:04:
                    51:ae:c2:2f:1e:ae:19:06:d2:99:a9:e4:37:63:12:
                    77:42:c1:46:52:d5:ab:04:2c:85:db:b7:f2:41:a4:
                    c5:bb:1a:39:99:34:68:d9:cd:bb:75:48:92:50:b9:
                    5b:c9:80:f4:ff:d7:ae:28:d4:95:27:45:1b:88:a3:
                    bf:72:c8:fd:3d:97:92:f4:0b:0e:d9:fa:57:7b:97:
                    05:ea:48:2a:5a:90:10:9a:35:47:fe:2b:63:06:10:
                    39:ef:06:2f:90:22:10:cf:96:54:3a:34:26:d5:c2:
                    6f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7D:A7:00:7F:39:0E:5D:F9:49:BE:4C:0F:21:49:C5:F9:36:7F:8A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D39D2768B4FC11F1B741CAC2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.117.0/24
                  154.202.120.0/21
                  154.217.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:3d:e0:8a:96:75:23:19:94:6b:87:aa:be:f4:57:ec:41:f1:
         d8:a8:5a:10:d3:64:48:b6:f8:fa:59:e5:24:4b:8a:11:aa:7d:
         3a:42:9e:20:29:a6:7f:b0:e0:21:db:5a:db:20:dd:f1:c3:3f:
         89:24:4e:8f:b8:7e:05:b5:28:e0:af:05:43:fc:41:46:0f:88:
         69:e2:b1:fa:3a:02:77:12:dd:46:ca:3f:9b:0a:b0:fa:7c:1d:
         4c:13:85:47:a5:52:a9:8c:bc:fb:e1:14:5d:dd:7d:48:df:c0:
         a1:6b:51:ea:06:0d:07:84:b4:a1:15:bb:5b:68:9f:45:1d:38:
         aa:d2:af:46:ee:05:32:ce:c7:e8:7f:f2:b4:dd:3c:29:b2:96:
         3e:bb:a3:84:e7:8f:51:e8:09:ae:98:bd:e8:81:c9:3e:d3:e2:
         19:fa:b3:35:90:fa:67:b8:4e:fb:a9:97:d1:16:60:ff:dd:b7:
         d7:ac:0a:e8:0e:8d:30:bd:31:a2:7f:e4:89:0c:dd:f9:76:3e:
         5c:d2:a1:9c:2c:e8:d9:b4:f0:b4:b3:a9:52:b3:25:ea:34:f8:
         d7:a9:59:82:66:27:57:00:ff:af:94:0f:cc:fb:c9:3f:2f:6d:
         f2:b6:02:f3:bc:90:f4:81:54:7f:c6:fb:01:fd:61:a7:01:83:
         35:7e:6e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----