Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3DC0F7AAB8111F1AA20F2EACE1D38B0.roa
File:                     D3DC0F7AAB8111F1AA20F2EACE1D38B0.roa (raw, json)
Hash identifier:          o9BKiOCMEvMGv6exllOsdY5GQVqYM7MZXrrEEt32Eig=
Subject key identifier:   8F:6A:89:18:73:C0:7E:53:37:A6:80:AB:DA:51:F6:9E:2C:B0:5A:A7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E66E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3DC0F7AAB8111F1AA20F2EACE1D38B0.roa
Signing time:             Tue 08 Sep 2026 12:35:52 +0000
ROA not before:           Tue 08 Sep 2026 12:35:48 +0000
ROA not after:            Wed 04 Nov 2026 12:35:48 +0000
asID:                     401783
IP address blocks:        154.196.208.0/24 maxlen: 24
                          154.196.209.0/24 maxlen: 24
                          154.196.210.0/24 maxlen: 24
                          154.196.211.0/24 maxlen: 24
                          154.196.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124526 (0x1e66e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  8 12:35:48 2026 GMT
            Not After : Nov  4 12:35:48 2026 GMT
        Subject: CN=6aa00128-edab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:60:e1:93:9d:94:1f:29:3c:15:17:fd:19:ab:
                    a4:6d:b9:d4:bc:bc:92:74:5c:83:49:83:e3:dd:ad:
                    b5:b8:e8:33:a2:71:7e:6b:c5:53:66:a5:c2:74:84:
                    7f:e2:8c:18:94:71:44:eb:dc:fc:13:0a:f2:df:53:
                    e3:16:4e:a0:2b:ec:b5:0e:5a:ca:55:ee:3d:46:7a:
                    eb:0d:eb:cf:32:2f:22:2d:c1:15:10:d6:e8:34:ed:
                    61:21:46:e2:e7:36:52:97:94:cd:19:51:6d:ff:e1:
                    77:99:9d:e6:a1:d9:04:ac:d0:bb:49:b0:fd:4f:c6:
                    e9:74:9e:85:ca:c1:24:84:b4:ef:17:63:8c:9f:75:
                    ac:15:6c:27:c1:f0:25:71:fb:b0:e5:4f:81:99:16:
                    dd:24:70:a9:1e:d1:2b:21:f7:45:fd:97:71:2c:d1:
                    94:32:2a:7c:96:16:ae:86:92:86:45:06:c5:da:5d:
                    0b:2c:9f:dc:24:f3:3f:cf:75:42:a4:bb:e0:33:40:
                    c5:c9:89:0a:ac:b0:f2:2e:65:69:3f:53:ab:ec:32:
                    b5:1c:11:79:30:4a:a5:b5:3d:69:16:3b:73:4a:08:
                    48:f3:83:92:be:bf:0b:73:4e:02:86:c3:cf:c7:5e:
                    7d:28:94:4c:8d:e0:02:ad:ca:3f:78:cd:d3:22:b4:
                    a3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6A:89:18:73:C0:7E:53:37:A6:80:AB:DA:51:F6:9E:2C:B0:5A:A7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3DC0F7AAB8111F1AA20F2EACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.208.0-154.196.212.255

    Signature Algorithm: sha256WithRSAEncryption
         38:cc:6d:e6:5a:86:02:04:af:e8:29:58:e0:9d:4c:d6:f4:9b:
         56:02:bc:1d:cb:e7:c3:d5:b0:dd:e6:9c:0a:c3:d2:91:13:9c:
         99:94:66:e3:04:fe:2d:04:16:d4:59:25:4f:af:dc:6a:4b:13:
         60:b1:9c:cd:55:16:94:f8:4a:b4:8a:33:9c:a3:14:e8:58:56:
         26:77:21:65:0c:66:d8:ae:14:94:f1:df:f5:d3:dd:12:35:40:
         fc:27:a2:12:63:0d:5c:6c:ad:2f:b8:31:fc:bf:39:6d:20:87:
         c3:3e:51:7b:a1:0b:0f:8f:b6:e4:02:62:76:c7:db:20:ac:21:
         7b:7b:67:bf:41:30:df:ac:c9:07:f7:9f:27:d5:07:61:7c:ce:
         e3:7b:b9:a3:7b:8c:d8:5d:47:ee:7d:ee:3a:21:04:16:39:17:
         ac:2e:82:53:21:e2:9b:ba:53:59:26:2b:ac:18:48:8d:b2:0e:
         09:ea:2e:c2:5d:4f:0a:69:96:98:e7:95:fe:b9:e7:ba:8a:de:
         57:58:6d:93:ec:d3:50:82:2d:eb:18:98:f5:0a:34:0c:3e:51:
         e0:6d:43:09:2d:87:b5:79:9f:31:97:4c:f5:de:09:08:8e:fd:
         f2:4d:6f:03:ac:d1:1c:98:90:bf:da:be:d0:5a:6e:f0:15:aa:
         b9:e6:a6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----