Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DE0FA3C9C6811F1874973BFCE1D38B0.roa
File:                     1DE0FA3C9C6811F1874973BFCE1D38B0.roa (raw, json)
Hash identifier:          wWPjXXRSdZysvJMzROOYmTsXlEHfhMYWgs8R5Uf2dHU=
Subject key identifier:   31:E7:2D:75:C3:81:B8:1D:41:79:AC:F2:30:13:1C:DF:91:C9:27:12
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E033
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DE0FA3C9C6811F1874973BFCE1D38B0.roa
Signing time:             Thu 20 Aug 2026 07:24:02 +0000
ROA not before:           Thu 20 Aug 2026 07:23:58 +0000
ROA not after:            Thu 24 Sep 2026 07:23:58 +0000
asID:                     55020
IP address blocks:        154.89.144.0/20 maxlen: 24
                          154.89.160.0/19 maxlen: 24
                          154.89.192.0/20 maxlen: 24
                          154.95.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122931 (0x1e033)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 07:23:58 2026 GMT
            Not After : Sep 24 07:23:58 2026 GMT
        Subject: CN=6a86ab92-147c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f6:6c:40:e8:bf:dc:55:4b:80:4a:ab:26:60:
                    c6:6f:00:88:8f:ac:93:1e:4a:62:24:2f:ae:5e:27:
                    10:12:a7:b6:e4:78:d3:b9:60:d3:0a:9c:23:66:52:
                    82:ab:64:53:95:34:ea:c8:c0:12:61:9c:cb:87:2a:
                    5e:6e:12:aa:e0:a4:1b:8b:bf:07:25:29:e5:c3:1c:
                    9f:73:db:45:2d:bd:bb:3a:ae:99:ad:cd:41:e4:01:
                    40:5b:6c:62:69:81:df:22:e2:98:3e:a6:ea:07:2b:
                    13:92:36:e5:7e:4c:c5:7c:fd:99:b5:18:f7:b5:12:
                    67:84:6c:d8:00:09:77:76:ad:b9:0f:ab:ea:fc:d9:
                    ba:72:cc:09:a3:5c:ab:cd:1c:8a:c9:84:cb:96:5b:
                    21:45:eb:3a:fd:99:95:20:f5:64:1a:7b:14:55:f0:
                    90:de:c1:74:f0:d7:62:d1:b6:12:0a:e1:84:a2:d4:
                    df:9c:7c:36:0e:e4:08:f5:a3:37:4b:a8:50:8f:c3:
                    65:9a:e6:26:5e:5a:2d:4c:7d:93:83:2f:05:32:d3:
                    f0:9c:6a:13:91:f7:c8:82:db:c2:89:25:c5:88:c9:
                    c0:41:68:95:f7:6c:f7:df:c4:01:08:5d:c0:16:75:
                    3f:41:48:55:f8:dd:78:20:ca:4d:7e:6d:7b:4e:19:
                    ae:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E7:2D:75:C3:81:B8:1D:41:79:AC:F2:30:13:1C:DF:91:C9:27:12
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DE0FA3C9C6811F1874973BFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.144.0-154.89.207.255
                  154.95.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:47:89:32:4e:cb:12:8e:3c:f6:c6:47:99:51:fb:62:67:62:
         ee:b8:fc:a3:d0:2d:e8:9c:7b:b2:b0:47:29:91:73:6a:b7:fd:
         a7:8f:58:63:d4:d3:b8:4f:de:05:03:d9:ca:d6:b7:42:a5:0e:
         b3:47:24:f1:7c:81:ce:3a:60:fa:bc:35:76:b9:3c:5f:f8:33:
         cd:01:8f:79:1c:6f:23:42:5f:48:a6:02:eb:4f:3f:60:0d:65:
         a6:de:ab:08:49:cd:8f:da:71:91:a8:e4:b5:ee:c0:f9:89:db:
         17:f4:89:b1:c9:1b:f7:19:7c:d0:d9:e3:1b:5b:7f:aa:93:ff:
         95:c6:3f:56:91:50:e1:44:a9:a8:64:7a:63:6c:68:48:c1:16:
         8c:e4:e9:0e:fa:c8:6d:c0:45:bd:29:2b:23:e8:12:4f:dc:c4:
         ed:57:1c:a7:cc:8e:d5:8d:33:77:f1:02:2b:e9:0a:ae:70:95:
         92:a5:3b:58:c4:63:1c:86:6e:18:48:18:f5:0e:55:fc:5a:af:
         f8:59:b9:c6:00:9b:0b:a3:97:b6:72:42:09:4e:b5:db:0e:9c:
         38:5b:04:d3:61:d5:68:6e:90:6c:81:eb:95:c6:07:0b:96:84:
         08:2c:aa:f8:c2:47:d7:70:0d:21:6b:4e:09:f2:82:c6:53:5a:
         5c:95:33:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----