Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31D9260A9F9111F1A2FC7AA2CE1D38B0.roa
File:                     31D9260A9F9111F1A2FC7AA2CE1D38B0.roa (raw, json)
Hash identifier:          iY9o8dCku6TceBAvUxNH1N1FOzvCiIX3IrKvOGpKPgs=
Subject key identifier:   F7:4F:E5:BD:90:60:E6:AD:53:1F:DE:71:B3:23:E4:EB:5C:D0:2D:20
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E20E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31D9260A9F9111F1A2FC7AA2CE1D38B0.roa
Signing time:             Mon 24 Aug 2026 07:55:38 +0000
ROA not before:           Mon 24 Aug 2026 07:55:34 +0000
ROA not after:            Tue 22 Sep 2026 07:55:34 +0000
asID:                     8796
IP address blocks:        154.94.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 12:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123406 (0x1e20e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 24 07:55:34 2026 GMT
            Not After : Sep 22 07:55:34 2026 GMT
        Subject: CN=6a8bf8fa-7a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:9d:7d:de:22:17:b9:95:d9:c5:51:5d:4d:48:
                    a0:2b:cc:0b:24:e2:83:cd:c1:41:93:c1:de:95:92:
                    47:70:0f:de:82:9a:b5:8a:7e:31:a5:d3:73:f6:29:
                    ff:76:7c:49:b3:61:1a:f7:c7:79:78:a1:fc:91:32:
                    81:61:ae:fc:03:86:75:52:8b:72:12:a3:ff:10:39:
                    d7:5d:e6:81:44:1a:47:19:6b:e1:06:ec:60:cd:35:
                    54:05:a3:45:39:a3:b4:c6:08:fb:e7:47:85:10:2c:
                    86:de:f3:15:c2:54:9e:be:07:6f:57:87:58:65:99:
                    80:96:d8:3e:5a:32:a9:57:d9:51:66:17:cf:07:91:
                    30:8a:e4:02:7f:db:b0:fa:8e:bc:03:77:95:8b:cd:
                    ea:0e:ff:53:bd:9f:62:b2:2b:c8:a4:9f:f4:d0:53:
                    54:b8:8a:20:31:38:dd:60:bd:7d:c4:ff:72:5a:9d:
                    d5:4e:36:4e:f1:4b:0a:a6:d2:4d:c3:8c:e3:4e:b3:
                    45:23:84:5f:5d:78:88:6a:95:b0:b6:90:3c:d7:c0:
                    7d:98:ad:49:ed:a4:6d:03:62:f7:84:95:58:af:a4:
                    28:af:37:cf:3c:93:48:e2:ef:e2:bf:a9:e7:3c:6d:
                    63:78:6e:14:9b:d8:0e:42:37:67:a9:2d:0d:c4:6d:
                    59:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4F:E5:BD:90:60:E6:AD:53:1F:DE:71:B3:23:E4:EB:5C:D0:2D:20
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31D9260A9F9111F1A2FC7AA2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         70:5f:01:1f:b7:45:d2:29:1c:47:31:c1:fd:13:c3:4b:27:4d:
         39:17:ad:24:df:79:24:7a:8f:5d:45:c6:fa:e1:e3:3c:30:35:
         b7:19:60:75:e2:c0:09:27:a1:29:8f:0b:26:a7:4c:6c:26:33:
         e5:cb:a9:2b:47:dd:ad:f0:6c:08:20:5b:bd:24:87:be:f3:8e:
         76:e5:47:89:05:d5:ee:83:4a:ad:54:ad:37:e3:c6:db:20:08:
         7c:0b:7a:32:3a:c6:12:c7:5f:13:dd:5f:f4:59:bb:db:0f:92:
         17:f5:0c:5a:61:02:76:11:7c:8a:52:97:4a:4e:90:ef:7d:76:
         89:d1:3e:7c:a0:fc:4d:b8:64:4c:e8:75:4f:6c:b3:3b:c2:cf:
         9c:19:f7:18:3f:43:47:54:25:9c:cb:b3:c0:2e:98:c8:bf:82:
         8f:e6:cb:4a:81:67:48:e8:2a:cd:cd:d8:d8:12:0e:bf:21:63:
         cf:25:b2:4b:36:37:9a:82:02:40:0f:e8:25:e2:bd:01:14:b7:
         b9:86:a0:0b:0c:ea:c4:d7:4d:c2:fd:e0:8f:5f:6b:e4:bf:06:
         70:f0:8d:cb:9c:5f:a0:81:f8:cb:a9:58:6f:83:d1:28:39:51:
         0d:61:63:d5:e9:97:8a:ff:d6:89:07:74:e7:89:a5:67:61:b8:
         99:40:0e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----