Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09CB42B6963F11F1B2583EDECE1D38B0.roa
File:                     09CB42B6963F11F1B2583EDECE1D38B0.roa (raw, json)
Hash identifier:          YBcbMrPBanWCuGAKfQKkixajWJYnqoddn/cZLBfZUs0=
Subject key identifier:   7E:01:97:62:E4:86:86:CF:76:13:9D:DE:65:3F:CE:64:32:C7:9F:B0
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DE84
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09CB42B6963F11F1B2583EDECE1D38B0.roa
Signing time:             Wed 12 Aug 2026 11:14:52 +0000
ROA not before:           Wed 12 Aug 2026 11:14:48 +0000
ROA not after:            Sun 12 Aug 2029 11:14:48 +0000
asID:                     17561
IP address blocks:        154.93.208.0/24 maxlen: 24
                          154.93.209.0/24 maxlen: 24
                          154.93.210.0/24 maxlen: 24
                          154.93.211.0/24 maxlen: 24
                          154.93.212.0/24 maxlen: 24
                          154.93.213.0/24 maxlen: 24
                          154.93.214.0/24 maxlen: 24
                          154.93.215.0/24 maxlen: 24
                          154.93.216.0/24 maxlen: 24
                          154.93.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122500 (0x1de84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 12 11:14:48 2026 GMT
            Not After : Aug 12 11:14:48 2029 GMT
        Subject: CN=6a7c55ac-1308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c6:0e:a5:53:79:2a:ce:0b:d6:27:8b:9c:58:
                    b5:e6:a2:e8:34:18:17:50:28:98:65:02:ef:5d:3e:
                    7f:9b:8b:42:f0:cb:24:bf:b8:ea:ab:ee:b1:09:d1:
                    9d:22:6e:90:e6:e8:f9:b5:dc:6e:70:d8:df:db:ef:
                    d5:54:28:de:99:6f:12:e6:38:33:43:b7:d5:03:f7:
                    2a:ec:a9:8f:a4:93:05:d4:ab:24:86:91:5d:6e:bd:
                    ad:80:43:a7:f7:94:fe:b5:35:ca:0f:db:fd:0d:4d:
                    1a:5b:9b:bd:bf:48:27:23:e6:10:7e:b5:d5:53:4e:
                    34:ae:07:01:07:eb:bc:27:59:22:27:45:1e:b7:67:
                    79:c2:52:2b:bc:b9:89:5a:b9:26:4f:7b:4d:69:e1:
                    78:81:c6:cb:57:1d:c0:85:63:da:bf:b2:be:d9:68:
                    ae:52:43:9f:91:93:cc:99:13:de:c7:cf:e8:42:71:
                    58:b2:ea:55:fb:5b:73:c0:fb:72:79:60:65:50:98:
                    1f:d2:27:38:ab:68:98:98:31:ce:43:cb:57:ac:8d:
                    28:4c:13:d0:d3:c5:27:ab:3a:bc:83:09:6e:01:ed:
                    ac:23:9f:0b:7e:a9:b9:26:20:d9:60:e4:44:f5:ed:
                    27:f7:05:29:8f:ca:b7:4e:5e:d3:a0:cf:ba:1b:c6:
                    73:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:01:97:62:E4:86:86:CF:76:13:9D:DE:65:3F:CE:64:32:C7:9F:B0
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09CB42B6963F11F1B2583EDECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.93.208.0-154.93.217.255

    Signature Algorithm: sha256WithRSAEncryption
         2b:b3:0b:64:b6:59:18:5b:d9:e6:f3:be:81:0b:f3:51:8a:e0:
         93:66:a1:52:00:66:20:db:ee:c8:8e:ac:86:73:fb:dc:34:5a:
         e4:5d:63:b4:1a:71:52:78:54:4d:cc:21:18:73:3b:be:85:ea:
         b5:fb:10:66:16:c2:38:1b:76:aa:3f:8c:3a:9a:5c:cc:e0:c7:
         60:8c:8c:64:51:75:04:0f:6a:62:f7:df:48:63:a5:25:b5:85:
         32:0b:56:ad:f8:04:8d:1d:15:5f:7a:a2:14:5c:21:b0:20:ae:
         fd:e9:fe:25:18:87:63:2e:08:f2:58:f7:fb:8f:99:a7:42:8b:
         a7:c4:10:3f:cb:da:fb:df:8c:1d:63:d3:c1:e5:d7:38:26:dc:
         3c:70:af:19:50:06:34:f9:5a:ab:d8:51:eb:d6:fe:b0:e8:be:
         76:58:d6:05:6d:eb:84:00:d2:9b:1b:86:16:2d:c7:af:46:43:
         14:2f:d9:ef:e8:a4:b4:e0:31:3b:e6:5e:cc:bf:18:06:26:52:
         e8:c5:5f:83:b4:2b:e4:5d:d4:65:d2:f4:46:84:28:1c:48:3d:
         92:2c:42:9d:10:16:b7:4d:f1:be:f8:dd:59:ca:9f:49:44:6a:
         e2:78:85:fd:40:f4:a7:9f:14:c6:d7:33:18:a4:4e:c8:a3:c1:
         1d:d6:2d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----