Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0376DC229C7F11F1820B42C6CE1D38B0.roa
File:                     0376DC229C7F11F1820B42C6CE1D38B0.roa (raw, json)
Hash identifier:          nnJfvsLCPPMpWsb3dyDF6ZqwPxoHgv3WK+EPegDwIxg=
Subject key identifier:   81:E9:4A:55:1C:E6:38:28:6A:66:08:44:E9:0C:FF:8F:5D:97:B0:46
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E06E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0376DC229C7F11F1820B42C6CE1D38B0.roa
Signing time:             Thu 20 Aug 2026 10:07:56 +0000
ROA not before:           Thu 20 Aug 2026 10:07:52 +0000
ROA not after:            Sat 10 Oct 2026 10:07:52 +0000
asID:                     32043
IP address blocks:        154.82.162.0/23 maxlen: 24
                          154.82.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 10 Sep 2026 13:25:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122990 (0x1e06e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 10:07:52 2026 GMT
            Not After : Oct 10 10:07:52 2026 GMT
        Subject: CN=6a86d1fc-dc64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:17:b1:03:2f:d5:8b:27:db:e3:72:4e:37:e5:
                    bc:ed:10:a9:27:2b:ef:b8:8e:2a:b4:ce:35:93:22:
                    81:bd:74:bf:1e:bd:3f:b8:0b:67:ff:d1:13:1c:67:
                    d6:1d:70:ab:9a:9a:83:ab:71:e1:f8:02:f5:59:1e:
                    a2:51:da:9e:37:5f:96:38:67:7a:32:94:ab:4a:93:
                    87:86:9e:e3:09:5f:b5:07:8d:16:66:b7:84:90:20:
                    d5:22:d1:eb:64:df:36:f9:d2:f2:30:7a:de:9b:52:
                    1a:5d:42:23:74:6a:88:3f:86:43:be:7b:60:ee:8e:
                    75:0a:63:c2:8e:71:07:2d:9d:f1:47:b3:6c:50:b0:
                    bd:3b:3f:5a:b4:7d:5d:6d:5b:9a:1d:ca:f9:1e:c2:
                    d8:37:3a:5f:04:b5:c5:44:5d:bc:05:7c:c0:52:0b:
                    32:50:3e:87:6b:fb:03:8a:32:b3:3b:2e:69:ae:42:
                    7f:7f:06:df:6a:15:58:68:11:52:1e:cd:39:a9:fa:
                    7f:e8:47:29:65:b4:07:2e:78:e5:2c:cd:e1:b4:d8:
                    be:2a:cc:51:37:c0:d9:3d:c4:af:05:0a:94:cf:a6:
                    a7:0d:15:fe:d1:fa:71:d3:da:81:f6:11:28:32:81:
                    f2:0c:8a:1b:c4:42:f5:1c:0d:82:91:63:b6:15:63:
                    18:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E9:4A:55:1C:E6:38:28:6A:66:08:44:E9:0C:FF:8F:5D:97:B0:46
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0376DC229C7F11F1820B42C6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.162.0-154.82.167.255

    Signature Algorithm: sha256WithRSAEncryption
         84:e0:18:24:80:eb:ea:c5:d9:f2:57:0c:f6:b1:3d:04:ae:21:
         55:ad:56:8c:61:fa:3e:19:70:fa:0f:97:0b:0e:78:d6:27:2a:
         5f:21:3f:e5:85:85:23:f0:07:03:63:ac:a3:ac:db:03:88:88:
         e1:5f:4e:75:ec:8a:18:6b:0d:2e:29:19:60:ed:5b:64:85:81:
         2e:01:b2:c1:f0:d7:63:83:67:bd:b4:e2:a1:58:c9:e8:ea:9d:
         5b:ae:93:3a:99:78:17:ec:23:b4:e2:b0:ad:3c:79:28:cb:2b:
         f7:d6:a9:81:7d:ea:cf:84:39:eb:c2:e8:ed:09:a5:cb:0f:32:
         52:ef:87:be:71:16:f1:59:1f:fd:4d:58:5b:7c:9c:17:e8:f2:
         b2:83:53:a5:90:a9:2b:4b:64:42:26:c2:e3:54:c6:1e:83:6c:
         d3:ec:bc:a2:e7:5c:68:66:3d:b4:57:27:33:f4:80:0e:2d:a6:
         7f:7c:a7:95:a3:04:53:36:9c:b5:2f:10:be:e0:35:55:55:8b:
         2f:84:48:aa:71:59:49:ea:ce:4b:9f:e7:cc:3f:e5:6e:3b:d5:
         04:87:9c:b5:ff:04:ba:8b:4b:6e:52:f0:fe:c4:f3:2d:06:76:
         1b:ea:0a:0a:ac:01:5d:f0:e1:bc:12:ce:17:13:a9:6a:fa:76:
         01:2d:ad:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----