Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8AD18769D4D11F18AB5B2B0CE1D38B0.roa
File:                     B8AD18769D4D11F18AB5B2B0CE1D38B0.roa (raw, json)
Hash identifier:          +DbQi+fNbX8LEZIYPN75jyzsDtq+KpzdiCXNrxD4uYM=
Subject key identifier:   E3:FA:8A:1C:FE:A7:30:77:3B:0C:C6:A5:DC:F7:DF:B8:69:C3:36:38
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E18E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8AD18769D4D11F18AB5B2B0CE1D38B0.roa
Signing time:             Fri 21 Aug 2026 10:47:36 +0000
ROA not before:           Fri 21 Aug 2026 10:47:32 +0000
ROA not after:            Fri 09 Oct 2026 10:47:32 +0000
asID:                     214143
IP address blocks:        154.81.132.0/22 maxlen: 24
                          154.81.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123278 (0x1e18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 21 10:47:32 2026 GMT
            Not After : Oct  9 10:47:32 2026 GMT
        Subject: CN=6a882cc8-4c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d9:62:bc:fe:c6:e8:47:c2:4a:1b:f3:30:83:
                    69:24:86:a2:3c:0e:49:02:ce:9d:55:2d:f7:13:fb:
                    28:c0:ca:cd:ee:4a:57:97:e4:7d:c6:87:97:e4:77:
                    03:87:a8:3b:49:29:15:c6:e9:e9:51:92:09:65:3b:
                    60:a8:1e:f7:bf:4d:74:d7:eb:e6:f8:82:16:ec:6b:
                    3a:bc:22:0e:ee:32:43:46:40:43:dc:0b:9d:2e:d3:
                    12:8a:5e:30:12:a4:87:a0:fd:05:81:9c:85:3a:94:
                    8e:67:01:a5:e9:ad:8d:d1:15:94:b1:aa:89:d3:fa:
                    d9:e3:fd:ad:89:d2:17:aa:38:83:0f:44:d2:0d:12:
                    b7:89:4b:a6:de:b3:0f:24:2a:39:3d:50:46:2b:f4:
                    5b:54:7c:ed:5f:bf:1b:9f:4a:73:98:61:a0:74:26:
                    58:c2:66:ad:d7:11:88:60:3b:59:64:22:a9:0b:03:
                    27:f0:df:e7:b6:35:0f:2b:56:44:f1:22:71:8f:6c:
                    26:df:f6:e7:45:f0:c1:6c:b7:9c:22:d5:3f:13:e8:
                    0f:94:e5:60:86:a4:cc:f3:1a:d9:a8:49:bf:98:c2:
                    12:5b:9b:53:df:3e:18:1f:80:21:c2:36:6e:a9:6d:
                    93:1e:61:43:72:e5:64:ec:65:0f:18:05:7d:74:2b:
                    d3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FA:8A:1C:FE:A7:30:77:3B:0C:C6:A5:DC:F7:DF:B8:69:C3:36:38
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8AD18769D4D11F18AB5B2B0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.132.0/22
                  154.81.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:7d:ec:39:4b:da:e6:b7:1b:f4:a4:6d:31:60:83:d1:94:3f:
         a6:3d:15:e4:b2:e0:29:43:e7:dc:c5:31:ac:93:70:53:89:18:
         dc:e8:d3:d9:77:bf:e4:61:e9:dd:25:3a:f7:a7:84:1d:ca:7e:
         a7:be:7c:82:68:9f:26:5a:ea:03:65:1f:ab:ac:ab:0f:9d:89:
         8d:d1:10:3f:88:8d:ae:ea:24:7e:b6:63:dd:dd:8b:4f:c2:4b:
         80:0a:a4:de:76:8a:2c:d5:6a:0f:37:b8:39:8c:d6:47:76:b4:
         7a:75:3c:a1:33:a6:1d:b0:e8:9c:41:be:a8:17:12:dc:69:15:
         fe:2d:2d:73:4c:68:5e:58:80:d8:e1:92:0a:7f:ec:3a:bb:16:
         f0:41:c0:4e:00:d0:16:42:f4:86:b8:74:5d:5d:a7:63:29:53:
         41:c3:2c:e4:8c:0a:fc:eb:17:5a:9b:0e:8b:4f:84:c5:61:c9:
         c3:f3:1b:7d:c3:80:e1:48:ae:db:01:76:be:40:18:cb:e7:12:
         4f:ba:ca:2c:fb:98:0f:50:be:79:77:f1:2b:cf:82:08:d1:12:
         e2:ff:f5:ce:8f:36:26:17:2d:55:29:90:e9:d3:28:4b:14:5c:
         84:54:c4:56:dc:37:27:94:4e:24:5f:dd:53:3a:75:d9:d7:b7:
         b3:b8:80:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----