Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30F9C45A9D2B11F1B6D187E2CE1D38B0.roa
File:                     30F9C45A9D2B11F1B6D187E2CE1D38B0.roa (raw, json)
Hash identifier:          Koy2sFxaLkcNw+8P4u/DU2wXPa3szSmGzQHO/uGsf40=
Subject key identifier:   EC:55:EA:68:4B:56:C2:5A:AA:5C:B1:7D:41:23:2A:A8:3B:28:C2:E5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E138
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30F9C45A9D2B11F1B6D187E2CE1D38B0.roa
Signing time:             Fri 21 Aug 2026 06:40:26 +0000
ROA not before:           Fri 21 Aug 2026 06:40:22 +0000
ROA not after:            Sat 19 Sep 2026 06:40:22 +0000
asID:                     54600
IP address blocks:        154.193.192.0/18 maxlen: 24
                          154.193.192.0/20 maxlen: 24
                          154.193.208.0/21 maxlen: 24
                          154.193.216.0/21 maxlen: 24
                          154.193.224.0/20 maxlen: 24
                          154.193.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 10:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123192 (0x1e138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 21 06:40:22 2026 GMT
            Not After : Sep 19 06:40:22 2026 GMT
        Subject: CN=6a87f2da-6160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fe:77:af:f6:7b:d6:b0:b2:ce:c1:f8:09:02:
                    22:49:e6:90:a6:1f:af:f3:1c:a7:24:10:38:fe:02:
                    16:29:8a:53:bf:c7:0a:03:d6:a2:ff:34:3e:4f:12:
                    c8:b3:33:a8:bc:35:9e:fe:56:22:63:d7:34:8a:94:
                    cf:20:21:a4:7d:34:46:63:3d:61:c7:ae:28:c4:ef:
                    ec:63:3d:aa:9a:60:97:94:99:e7:cc:cc:ee:fc:9d:
                    d6:bb:97:33:1b:90:e7:3f:dc:d7:21:f3:6e:e8:c4:
                    ef:98:84:bd:77:46:4f:59:08:bd:e1:92:25:89:05:
                    0c:f0:73:70:cb:60:c0:09:a0:6f:dd:b7:81:3a:d1:
                    d5:2e:6e:59:48:8b:4b:9d:00:93:9b:b9:30:9c:4f:
                    8e:c0:31:bf:04:e6:c1:d6:8d:6b:70:e8:c2:a7:b4:
                    e7:52:cf:78:be:41:cd:f6:94:ef:8a:9f:36:1e:bf:
                    84:5c:c5:54:17:73:5d:fc:4a:86:61:8e:3a:48:98:
                    f9:9f:06:7e:d9:73:cc:63:8c:db:a0:54:e1:55:ea:
                    1b:f7:ed:5e:bc:29:d3:fd:ef:d3:ef:df:9f:ff:ef:
                    b1:e2:78:11:50:bc:2f:4e:b8:5e:c8:8d:3d:c0:06:
                    f1:39:de:f6:c4:15:ad:30:54:12:36:d8:e5:42:0d:
                    db:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:55:EA:68:4B:56:C2:5A:AA:5C:B1:7D:41:23:2A:A8:3B:28:C2:E5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30F9C45A9D2B11F1B6D187E2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         19:9f:99:3c:5c:25:5a:3e:5b:e2:17:dd:0a:3d:f9:53:cc:6d:
         4e:5c:98:6d:f2:13:b7:0a:4c:8a:0d:4d:57:ad:9b:2d:cf:3f:
         11:ab:8d:4b:0c:87:9f:9d:fa:a6:f5:0e:2c:cf:c3:66:ef:32:
         05:a7:4b:87:7a:30:3a:39:66:94:bb:e2:41:65:69:39:bc:5c:
         78:59:e6:00:08:1a:69:ef:81:3a:64:d6:d1:1a:2a:33:1a:a4:
         a5:2b:a1:75:24:25:d4:32:1d:3f:a6:e4:63:91:64:e1:9b:b3:
         b9:41:4d:7d:a8:05:54:1f:ff:e6:e7:9c:2e:30:ee:c3:88:a4:
         44:14:d3:3a:85:52:99:37:23:5c:46:15:0c:70:9f:82:9e:bc:
         75:64:e7:61:6d:ab:bd:bd:74:14:0b:63:29:22:2b:06:cd:c9:
         ab:62:86:96:5e:dc:98:4d:c0:65:25:a9:63:73:d8:2a:12:64:
         4e:c0:2c:44:1d:b8:42:2b:97:a5:23:1d:1d:bd:b8:b1:f7:2e:
         bf:8b:25:4b:99:9c:c4:30:22:8e:28:6c:53:9f:19:53:ac:45:
         17:8b:09:01:0d:2c:da:a3:a9:5a:76:74:8f:95:45:9c:5a:f1:
         0d:d4:04:69:39:2e:6f:cc:05:53:72:d3:66:54:16:6e:64:7e:
         19:d0:cf:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----