Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/095810269DE611F18B2CA2CDCE1D38B0.roa
File:                     095810269DE611F18B2CA2CDCE1D38B0.roa (raw, json)
Hash identifier:          R9wObjIuqN6oXzflbFtu19gKwBl4AkzKblyKoJjWOCU=
Subject key identifier:   BF:66:7A:3B:2E:A6:94:AB:B6:E7:E4:DA:DA:65:97:8B:E8:DF:54:FD
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E1AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/095810269DE611F18B2CA2CDCE1D38B0.roa
Signing time:             Sat 22 Aug 2026 04:57:55 +0000
ROA not before:           Sat 22 Aug 2026 04:57:51 +0000
ROA not after:            Sat 28 Nov 2026 04:57:51 +0000
asID:                     402506
IP address blocks:        154.219.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123309 (0x1e1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 22 04:57:51 2026 GMT
            Not After : Nov 28 04:57:51 2026 GMT
        Subject: CN=6a892c53-adf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6a:d0:c2:0d:c9:c4:94:dc:b6:e6:91:54:02:
                    21:07:07:51:73:d9:e5:e5:a2:9a:47:66:4a:d5:c2:
                    94:46:25:29:a5:d3:d4:cc:f9:00:60:49:74:69:f4:
                    7c:d6:8b:bf:b3:90:0f:cc:21:83:0e:58:ba:29:9b:
                    3e:cc:5c:b8:35:14:72:94:11:ff:1a:6b:49:24:b7:
                    6a:9a:b5:21:d1:18:d8:0c:0d:f6:ef:7b:8a:12:11:
                    e2:57:05:72:8c:9b:1c:e4:05:2f:e7:f6:94:62:33:
                    49:e7:7e:7e:d4:82:a2:a9:26:58:51:6b:86:25:77:
                    4a:bf:c9:b1:6f:25:06:b4:75:0c:3a:0c:97:e7:6a:
                    91:e7:8c:f9:15:0c:99:e1:61:a8:94:f8:db:e8:65:
                    2e:72:6e:24:33:1a:00:88:37:1b:09:92:58:b7:65:
                    ef:65:16:38:fe:30:16:e3:85:15:74:fc:ee:cc:b4:
                    00:26:93:fe:c6:15:1b:89:9d:d2:89:da:bd:88:fa:
                    75:e6:8e:40:fd:65:89:26:77:c5:ef:8f:b2:3a:c0:
                    1a:9a:9a:86:f3:bb:cd:f1:23:5a:78:17:02:81:27:
                    21:6c:4d:7b:c8:b0:9c:09:de:13:19:60:cb:dd:fa:
                    46:f9:97:e1:38:d6:7a:03:90:c5:5f:fd:1e:ad:fb:
                    13:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:66:7A:3B:2E:A6:94:AB:B6:E7:E4:DA:DA:65:97:8B:E8:DF:54:FD
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/095810269DE611F18B2CA2CDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.219.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bc:2d:08:b0:68:ac:6c:9b:ef:b8:22:7b:0c:b5:f5:13:3e:d0:
         74:dc:1e:2f:4d:56:5d:54:8b:4e:4d:27:fe:b2:08:cc:05:4f:
         9e:f3:08:82:4e:1a:a6:99:a9:cc:60:82:31:b3:80:c5:77:28:
         9b:fe:22:4a:5f:57:ea:ca:f6:79:a3:87:59:2f:04:09:a2:a0:
         8b:d3:1a:c0:8e:f4:c6:4e:74:92:9f:c9:2b:03:a2:3f:16:e9:
         7f:a7:55:a8:e0:77:5f:b3:d6:8b:a9:63:cc:52:83:54:dc:95:
         d3:bb:dd:67:b2:3b:ba:82:4f:0e:36:1b:3d:78:60:fb:b6:3d:
         2b:c0:2b:a6:0d:97:6a:5b:ac:89:dd:cb:a1:55:44:25:66:05:
         f3:99:91:f9:99:27:c4:57:07:83:8d:0b:e5:ab:97:21:a7:52:
         14:5d:52:bf:26:2e:62:22:08:53:82:66:e4:75:4f:cc:d4:15:
         44:fe:e9:52:fe:d3:15:19:ae:c8:97:7f:ad:8d:17:c0:a9:3d:
         6d:c9:ef:fe:d8:66:1b:e0:7c:8c:6b:0b:a7:bf:aa:0e:93:be:
         39:b4:a6:ab:11:55:3a:37:26:49:9e:42:d8:cc:f7:d3:03:25:
         e6:94:dd:ab:62:00:74:ad:d4:ae:f0:b3:43:96:9a:0a:3f:b0:
         90:a3:18:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----