Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8AF6B8EB10411F19CAB4FD1CE1D38B0.roa
File:                     F8AF6B8EB10411F19CAB4FD1CE1D38B0.roa (raw, json)
Hash identifier:          /IVV05zjVQ1berRPt0Rkr7eqzDpsB3WLYBiHqvubVdA=
Subject key identifier:   C2:95:C6:ED:22:75:48:59:52:0C:C3:31:5C:E5:AA:C6:55:96:97:2C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E875
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8AF6B8EB10411F19CAB4FD1CE1D38B0.roa
Signing time:             Tue 15 Sep 2026 12:57:14 +0000
ROA not before:           Tue 15 Sep 2026 12:57:10 +0000
ROA not after:            Sat 24 Oct 2026 12:57:10 +0000
asID:                     2914
IP address blocks:        154.92.199.0/24 maxlen: 24
                          154.92.205.0/24 maxlen: 24
                          154.92.206.0/24 maxlen: 24
                          154.92.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125045 (0x1e875)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 15 12:57:10 2026 GMT
            Not After : Oct 24 12:57:10 2026 GMT
        Subject: CN=6aa940aa-4e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:52:3d:11:90:eb:7b:d6:93:04:e7:7f:01:48:
                    35:3a:83:68:f9:bb:7c:6a:03:ed:d1:93:a4:7f:98:
                    56:fa:75:c3:ef:55:6a:7c:fc:56:78:d4:9b:a3:84:
                    69:0a:71:35:21:74:61:6f:19:d4:c1:0d:f1:8f:f2:
                    ca:66:bf:16:c9:5b:b4:25:43:65:17:f9:3a:86:ca:
                    54:5c:a3:5b:76:b8:85:85:76:f8:d7:86:90:f8:4b:
                    e0:c8:71:f2:bb:a0:63:24:c5:89:61:96:b4:f3:6f:
                    da:df:10:67:96:0c:2d:20:1e:98:47:8f:03:d3:10:
                    82:5c:16:cf:36:4e:7f:63:9c:45:3b:7a:26:70:a8:
                    69:69:d5:d6:b4:d5:68:fc:3c:da:b3:54:50:31:c4:
                    93:2d:34:0d:f8:03:a9:56:a1:18:e9:61:45:32:c1:
                    c2:c1:2a:63:ea:bd:8f:9e:91:7f:66:4e:05:bd:ce:
                    ce:b1:9c:ac:aa:8a:49:5c:bb:e9:26:e4:68:87:2f:
                    45:24:a5:1b:d4:c5:2c:50:f1:ce:31:4e:9e:22:68:
                    f5:4d:02:a0:84:94:66:d4:ed:f9:dd:9a:b2:7c:2b:
                    e4:f4:bc:f3:70:8d:9e:df:ce:41:7e:4a:e4:3a:5c:
                    79:80:55:e8:86:f8:8d:b5:54:08:ed:75:22:d6:0b:
                    9d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:95:C6:ED:22:75:48:59:52:0C:C3:31:5C:E5:AA:C6:55:96:97:2C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8AF6B8EB10411F19CAB4FD1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.199.0/24
                  154.92.205.0-154.92.206.255
                  154.92.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:67:09:3c:dc:51:35:61:32:f0:69:78:7c:80:b1:21:c0:fb:
         ab:a5:cd:2a:c8:08:63:6d:d8:5d:36:1b:c4:27:ca:a3:d6:28:
         ae:82:fa:3f:48:4d:44:f5:e3:b6:63:c3:49:89:3a:a0:52:48:
         d3:8f:52:aa:78:70:42:4c:d6:71:70:13:ad:e0:ef:74:9c:33:
         22:67:d0:56:2d:13:cc:98:67:03:47:6d:55:1c:ec:f6:d8:7c:
         d7:29:95:92:41:bf:ad:52:2c:a3:10:ad:9b:4b:a4:dd:fb:74:
         57:2a:4a:21:1d:65:9d:57:f3:84:0a:80:68:e4:e0:0b:3e:95:
         79:99:df:89:f8:07:6b:6f:98:78:a5:4d:97:f4:1a:eb:67:2a:
         51:b3:1a:2f:1c:b4:85:a7:63:ce:fe:5f:82:d6:78:c6:73:ac:
         dd:da:90:3c:3a:28:ce:05:b8:b8:b1:9c:e3:51:4a:be:dc:17:
         0a:a2:65:ef:1f:66:5e:0f:93:c9:37:15:56:c5:a0:16:63:bd:
         5c:9f:74:99:29:87:94:e5:d1:a0:57:ec:ba:24:40:63:2c:d4:
         7b:5c:7e:82:4a:81:d0:81:dc:90:7d:e3:67:f2:fe:1a:15:2d:
         4f:98:8b:34:82:c6:89:b3:1e:8f:73:fa:a3:6a:28:94:bc:9a:
         2f:9a:87:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----