Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07F14F269D3D11F1BD4739CCCE1D38B0.roa
File:                     07F14F269D3D11F1BD4739CCCE1D38B0.roa (raw, json)
Hash identifier:          Z81wbp6rLCtnCyE5nHWJrt7ITTlBcgXDqOYjTQwpSL8=
Subject key identifier:   9C:42:2E:F1:EA:A8:45:83:7E:C7:B9:5E:88:4C:B1:42:25:37:8E:31
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E16B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07F14F269D3D11F1BD4739CCCE1D38B0.roa
Signing time:             Fri 21 Aug 2026 08:48:08 +0000
ROA not before:           Fri 21 Aug 2026 08:48:04 +0000
ROA not after:            Sun 27 Sep 2026 08:48:04 +0000
asID:                     6079
IP address blocks:        154.81.200.0/21 maxlen: 24
                          154.83.48.0/20 maxlen: 24
                          154.90.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123243 (0x1e16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 21 08:48:04 2026 GMT
            Not After : Sep 27 08:48:04 2026 GMT
        Subject: CN=6a8810c8-f639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a3:5a:25:31:22:a2:26:dc:be:c6:32:38:a6:
                    6e:5c:e1:75:51:a0:86:a8:d3:b7:7b:57:a4:37:37:
                    c1:a6:d3:a4:c9:f2:79:81:59:54:fa:91:be:ed:91:
                    0a:b6:c0:02:b8:3f:dd:dd:af:8c:d3:bd:92:f2:e5:
                    2b:0f:59:25:ec:7b:78:49:41:94:79:41:89:b9:1a:
                    6f:87:ee:40:e3:b9:d3:c3:d3:e8:5d:c1:da:c9:e1:
                    ac:af:76:5c:53:9a:43:b5:7d:c8:06:48:7e:a3:38:
                    54:7d:0a:87:ad:76:7b:68:ec:3f:03:eb:18:2a:e3:
                    33:04:3f:fc:21:e5:93:aa:d8:07:2c:4e:93:71:0f:
                    90:97:84:19:57:38:f7:60:84:fe:4a:b8:00:30:93:
                    33:74:86:63:64:54:35:74:1c:33:b8:61:66:be:a9:
                    5c:ea:36:83:53:83:08:87:ce:52:38:c3:bb:9e:d4:
                    af:33:79:dc:f0:14:b0:3c:ce:7e:79:24:30:f7:07:
                    b5:c8:17:ff:2c:be:9f:20:5d:4d:26:a7:3d:0c:23:
                    0c:07:9d:ff:b7:b1:9f:b5:73:8c:47:3c:51:0f:48:
                    23:8a:7a:83:60:32:b5:57:29:11:e5:01:e2:81:02:
                    42:eb:a4:bd:a3:68:73:a0:e0:29:44:3b:b5:1c:27:
                    73:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:42:2E:F1:EA:A8:45:83:7E:C7:B9:5E:88:4C:B1:42:25:37:8E:31
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07F14F269D3D11F1BD4739CCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.200.0/21
                  154.83.48.0/20
                  154.90.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:b6:e8:be:3c:43:79:9e:68:88:4b:0d:f1:54:28:d1:96:c4:
         56:7c:e7:b8:1f:e3:f1:2c:aa:fc:26:86:3e:36:65:c0:67:6a:
         df:34:6c:1c:ac:59:92:df:f1:27:62:ac:16:46:5e:b1:06:7b:
         47:d4:01:ba:fa:e4:98:83:a3:30:9a:68:32:ef:be:f0:c5:92:
         61:e9:88:d2:93:ac:5f:6a:e5:64:0d:d5:b6:65:12:b7:85:04:
         c5:26:10:5a:af:22:dd:04:2d:67:df:a1:70:47:eb:d2:61:85:
         a5:96:c9:c2:d8:68:a3:c7:bc:ab:b1:21:b4:ab:18:3c:7e:e7:
         d3:98:b4:c5:fe:89:15:ab:dc:bc:7d:55:9b:6c:f0:bd:33:93:
         c2:ce:3e:a3:12:c0:a8:70:3f:69:40:45:d2:05:1c:4a:9a:d0:
         c2:e5:98:48:3a:fe:42:fe:6d:6e:1f:ef:e4:ec:5c:a4:c6:87:
         4e:87:7b:79:3e:4a:f4:39:0f:3e:a5:50:5c:6d:9b:82:cf:26:
         b4:21:e6:51:e7:13:f0:b2:2b:75:af:ec:4b:1e:df:7f:12:5d:
         17:28:4f:64:56:84:2f:f2:95:18:97:e8:2e:2f:b2:02:a9:31:
         95:8b:d7:28:7a:d5:7a:0a:f4:d7:de:20:e1:25:27:3c:74:2d:
         9c:e4:16:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----