Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21592648A9CF11F1ACF839ABCE1D38B0.roa
File:                     21592648A9CF11F1ACF839ABCE1D38B0.roa (raw, json)
Hash identifier:          QIYvysJZSMZ3R2fEEjnLzPfwCFV6fogTM766HdjI3gI=
Subject key identifier:   DD:AF:24:FB:CA:45:74:CD:DE:6A:D9:BB:52:22:75:5E:37:17:41:50
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E5E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21592648A9CF11F1ACF839ABCE1D38B0.roa
Signing time:             Sun 06 Sep 2026 08:44:11 +0000
ROA not before:           Sun 06 Sep 2026 08:44:07 +0000
ROA not after:            Wed 07 Oct 2026 08:44:07 +0000
asID:                     395886
IP address blocks:        154.86.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124391 (0x1e5e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  6 08:44:07 2026 GMT
            Not After : Oct  7 08:44:07 2026 GMT
        Subject: CN=6a9d27db-a7fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a1:80:40:fd:84:2b:ca:9e:33:fb:a7:c7:26:
                    68:30:3d:98:50:61:9e:fb:98:2a:9f:09:a3:9a:ab:
                    c1:da:3e:55:25:32:43:8b:f6:2c:d8:93:eb:42:3c:
                    5c:6a:41:f9:70:20:0e:81:c7:01:7c:7c:c8:96:46:
                    f7:e5:28:9e:03:f3:a1:25:c3:3b:9e:40:18:f6:c1:
                    c8:d8:3f:d5:a4:ad:fc:ae:2d:99:90:b8:3e:41:61:
                    94:74:9c:af:b6:48:65:97:61:a0:15:ab:3d:0d:78:
                    e3:8e:9e:e4:7d:a5:00:f6:0d:af:7c:1f:ae:c3:af:
                    60:5d:9d:0c:36:2b:23:0d:c3:e7:c1:b2:15:62:8a:
                    9a:6d:86:7c:f5:18:5b:a4:52:ce:0c:6f:6a:49:59:
                    66:74:f5:e5:18:fb:b8:1e:e4:a7:23:b1:3d:2f:82:
                    bd:eb:75:37:b0:9a:9f:3d:49:3a:91:43:59:31:ab:
                    80:5a:a4:96:c9:f2:18:52:2d:b2:8b:e4:5d:7f:c5:
                    58:09:f3:9c:df:f9:a1:04:68:60:22:c9:d2:e1:78:
                    16:34:2c:a5:41:0e:4d:9f:6f:5e:4e:e3:b2:79:ea:
                    4d:b9:6c:f3:0e:c3:5d:3c:71:d8:2f:5c:d7:78:4e:
                    34:f3:0a:9d:90:1c:bf:03:ec:d4:2e:61:4d:ee:a6:
                    1c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:AF:24:FB:CA:45:74:CD:DE:6A:D9:BB:52:22:75:5E:37:17:41:50
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21592648A9CF11F1ACF839ABCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ce:6c:b4:31:93:70:94:78:e9:37:4f:30:bb:e5:72:30:ad:95:
         0c:58:15:70:e4:ce:58:a9:f2:04:b0:be:fe:c5:f0:27:02:d8:
         be:47:d2:51:a4:42:31:40:a2:b3:22:51:ec:9e:68:4e:89:94:
         46:e8:56:8c:c2:67:ff:30:26:41:19:42:35:5d:61:b6:ee:38:
         4e:8b:2d:b3:62:5e:6d:c0:28:15:dd:94:76:e5:78:59:0e:bf:
         aa:5f:b4:11:05:a9:7b:a7:68:d2:62:60:83:bc:35:37:7c:d7:
         29:b5:d7:f8:2b:df:9f:78:f8:1c:7e:ae:85:a9:98:8d:d0:a8:
         6d:ec:e8:09:fd:fb:dc:56:7f:84:8f:e2:a0:09:6b:cd:9b:97:
         c8:a1:0f:9f:ed:9e:49:fc:bc:1e:b4:64:be:e4:89:e5:ff:f6:
         56:87:a2:83:91:0f:f1:90:10:83:d6:46:89:e8:8e:89:81:6d:
         92:d4:04:ab:4d:6b:57:e1:e4:ee:6a:c8:17:a3:aa:1f:35:81:
         71:16:b2:80:2c:3a:cf:2c:25:b9:8d:34:21:45:d2:19:c8:73:
         a3:e6:59:ec:2f:15:34:8d:86:72:23:e7:92:42:f7:dc:84:1a:
         ca:b0:54:f6:46:42:9a:91:e1:82:0c:d1:8e:8f:97:1a:f0:80:
         a4:78:05:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----