Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/086C6A2A9EBF11F189AB3CBACE1D38B0.roa
File:                     086C6A2A9EBF11F189AB3CBACE1D38B0.roa (raw, json)
Hash identifier:          NpZETw3Unq+aFu73+6Uh/8fBDRKa6h3bxIcxRIk7EWc=
Subject key identifier:   1F:5B:77:18:75:78:62:DC:5D:D9:FC:CB:A9:2D:9E:B4:CF:1F:0A:DA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E1D3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/086C6A2A9EBF11F189AB3CBACE1D38B0.roa
Signing time:             Sun 23 Aug 2026 06:51:15 +0000
ROA not before:           Sun 23 Aug 2026 06:51:10 +0000
ROA not after:            Wed 02 Sep 2026 06:51:10 +0000
asID:                     401696
IP address blocks:        154.201.64.0/19 maxlen: 24
                          154.201.94.0/23 maxlen: 24
                          154.201.94.0/24 maxlen: 24
                          154.201.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 06:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123347 (0x1e1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 23 06:51:10 2026 GMT
            Not After : Sep  2 06:51:10 2026 GMT
        Subject: CN=6a8a9862-6a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:26:61:2e:b7:8e:af:15:66:29:51:52:3d:92:
                    43:b5:14:6d:56:19:d1:a8:09:31:52:52:d7:9d:b7:
                    1f:38:9a:98:50:33:8b:16:01:81:61:e0:0d:ed:58:
                    5e:32:45:64:04:f9:f6:69:a5:e1:fd:95:25:53:7e:
                    e1:09:c4:b6:42:8e:9b:1b:2e:f2:75:aa:58:3d:a5:
                    b4:46:f3:05:1f:0f:ce:f7:e6:9c:84:f9:77:e0:d3:
                    4a:75:8d:4e:c9:01:66:a0:9d:78:e5:a1:96:6f:25:
                    94:9a:1a:b3:97:94:df:91:4c:bf:d8:66:b7:85:02:
                    61:16:9e:66:56:fd:fd:3a:5b:46:31:fb:c4:a7:af:
                    f2:2e:47:ce:ad:9b:21:f3:8a:ce:3c:c7:36:3d:0f:
                    9b:93:4f:b1:fb:9d:37:a8:1c:71:64:13:a0:dc:00:
                    69:82:1e:9d:79:bf:15:33:08:b4:4c:7a:c8:2d:d9:
                    c6:49:57:6c:1f:b7:96:cf:fe:6b:ec:a3:d8:cb:61:
                    b6:04:8e:31:b0:6e:ae:3d:eb:86:61:b5:d8:b6:29:
                    8c:5c:51:77:65:ab:45:7a:10:63:9e:77:81:1d:e7:
                    f1:ce:f5:a1:93:af:69:1f:93:7c:f0:72:a3:07:92:
                    c7:2e:a4:74:31:26:96:67:ca:ec:44:cf:26:1d:19:
                    6c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:5B:77:18:75:78:62:DC:5D:D9:FC:CB:A9:2D:9E:B4:CF:1F:0A:DA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/086C6A2A9EBF11F189AB3CBACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         cf:94:98:9e:a3:ff:dd:92:41:64:ab:09:09:43:0a:08:f5:46:
         0e:27:79:87:32:08:2d:44:21:38:c4:4e:e8:15:6d:f2:88:26:
         38:ad:fd:92:c3:e8:a6:14:55:1f:b6:3d:44:56:9a:12:83:e1:
         51:6a:c4:66:d6:ae:3c:a2:6c:38:76:19:d2:4f:c6:8b:30:b9:
         fe:3d:bf:49:74:24:16:a8:21:2b:09:2f:7d:2a:12:66:dd:34:
         df:30:b4:13:c8:17:b3:79:4d:e8:49:9f:0e:76:fb:d4:d1:f2:
         79:01:ae:08:64:97:b2:6e:4d:63:ad:5e:8e:60:84:3e:fe:66:
         1e:7d:c3:40:94:66:01:e7:37:ec:2d:53:c5:7b:2b:0f:6a:d2:
         94:62:eb:05:95:2a:2c:ae:af:52:6b:9c:5a:fa:5a:c0:d3:5d:
         d7:27:84:77:a5:3d:5f:4b:ca:30:03:bc:20:95:bc:70:b4:29:
         df:c7:94:b9:f4:05:ef:1f:6d:5d:93:06:21:12:4d:fa:a6:46:
         78:f6:04:b1:ff:c5:87:8d:56:74:55:2a:76:66:57:07:0a:7a:
         26:19:5b:e7:90:88:1b:06:59:12:d9:c7:ff:b2:21:95:e6:e4:
         8c:04:1b:a1:aa:cd:14:c0:8f:c3:fb:fc:d9:45:f2:a7:a1:b1:
         42:61:0a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----