Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4163C616BBD411F19928A1EDCE1D38B0.roa
File:                     4163C616BBD411F19928A1EDCE1D38B0.roa (raw, json)
Hash identifier:          tndKsrS8fiGZ7b6xdPnzuGTLYQMhWxdQawKCs48BTtc=
Subject key identifier:   81:0D:15:92:FA:19:70:7B:AE:8D:62:5F:FB:A0:42:97:6D:E3:4F:F8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EB43
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4163C616BBD411F19928A1EDCE1D38B0.roa
Signing time:             Tue 29 Sep 2026 07:06:13 +0000
ROA not before:           Tue 29 Sep 2026 07:06:09 +0000
ROA not after:            Fri 27 Nov 2026 07:06:09 +0000
asID:                     6079
IP address blocks:        154.81.200.0/21 maxlen: 24
                          154.83.48.0/20 maxlen: 24
                          154.90.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125763 (0x1eb43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 29 07:06:09 2026 GMT
            Not After : Nov 27 07:06:09 2026 GMT
        Subject: CN=6abb6365-8f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:76:f4:c3:34:5d:63:b1:c1:08:2c:3f:10:01:
                    2c:cf:dd:7b:70:8b:35:18:7a:ea:eb:b9:a6:6c:da:
                    3b:75:62:fa:ec:52:ce:34:43:9a:4f:fb:7f:08:8f:
                    b9:f1:77:6b:99:f5:39:59:c2:af:99:0c:8b:b7:12:
                    e3:41:e9:7f:47:9e:70:c8:2b:cf:f4:38:5b:00:75:
                    67:25:12:f0:0a:c1:bf:a7:da:96:59:25:71:e2:0d:
                    0b:f4:71:ed:bd:1c:79:0c:76:c5:01:c7:9e:c7:ee:
                    0f:16:40:7e:81:3e:76:ed:e1:a3:32:21:af:d9:40:
                    85:b5:b3:89:57:54:bc:92:db:3c:34:59:45:6b:03:
                    26:b7:f2:e9:e6:fd:92:76:c4:7f:dc:70:1f:f9:43:
                    3c:b2:da:26:83:24:ae:79:d5:48:73:8c:98:16:43:
                    c2:c1:5f:eb:1c:2c:a7:39:ae:67:9a:2c:66:5f:ce:
                    6d:a4:0d:be:4b:11:60:2a:ab:3e:94:22:bd:f6:eb:
                    1e:3a:4f:99:90:9a:74:38:5c:69:2e:2b:df:af:41:
                    67:f3:bf:5e:f3:db:a5:3c:de:fd:bf:07:f0:e2:72:
                    21:aa:74:6f:81:dd:1c:45:a7:4c:ba:d8:4c:1d:8e:
                    43:d6:08:06:60:c9:fa:69:46:24:48:6b:f7:59:d0:
                    4f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0D:15:92:FA:19:70:7B:AE:8D:62:5F:FB:A0:42:97:6D:E3:4F:F8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4163C616BBD411F19928A1EDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.200.0/21
                  154.83.48.0/20
                  154.90.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:61:76:c1:81:5a:1e:19:ee:9d:4e:09:14:0a:f5:32:b6:ca:
         a2:b9:5b:16:7b:38:62:b2:c1:4c:e0:d7:b5:16:a6:e9:53:f1:
         19:2b:e0:be:94:d3:5e:49:06:da:59:80:a1:9a:e0:24:5e:41:
         f7:67:3d:43:d2:28:b7:14:d1:8b:4e:18:da:3e:7a:67:6d:e8:
         52:5a:a4:5e:23:84:aa:b6:69:ff:c2:0c:b7:e1:04:d4:81:a8:
         89:5b:0e:10:a6:73:82:e1:03:ac:15:8e:03:f9:a4:1c:ee:00:
         95:ec:30:74:c2:16:cc:3b:79:26:64:84:45:17:67:94:4c:ce:
         49:9d:44:cd:d8:97:06:2e:77:67:cf:56:ca:9e:95:80:63:83:
         27:07:9e:14:1b:a9:20:4b:eb:90:30:38:40:fc:a8:fe:bc:9d:
         8e:c5:e4:2d:97:37:fc:13:47:40:c8:53:0d:d9:01:fb:d6:de:
         0d:94:d9:7f:14:e6:f6:69:38:34:14:e4:b7:57:d3:4f:42:83:
         25:1c:35:ab:f0:49:ca:65:3a:b1:16:15:dc:25:8d:a6:3a:2e:
         de:91:21:87:93:15:ca:b6:93:f4:3a:6e:bf:6f:91:dc:45:dd:
         54:94:46:11:89:0f:b4:92:47:81:a8:fc:a2:b0:e4:d7:79:54:
         3d:77:3c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----