Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/471584FABF1C11F181418BD2CE1D38B0.roa
File:                     471584FABF1C11F181418BD2CE1D38B0.roa (raw, json)
Hash identifier:          3+Xc/gvwNQFhoeTJvF/RGgawyNRuMNXk8sZGMiq39kk=
Subject key identifier:   EB:19:15:37:03:A0:BB:3A:3C:62:E4:8A:41:8B:23:4E:99:E3:8C:01
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC08
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/471584FABF1C11F181418BD2CE1D38B0.roa
Signing time:             Sat 03 Oct 2026 11:19:20 +0000
ROA not before:           Sat 03 Oct 2026 11:19:16 +0000
ROA not after:            Tue 10 Nov 2026 11:19:16 +0000
asID:                     136907
IP address blocks:        154.95.72.0/22 maxlen: 24
                          154.95.96.0/22 maxlen: 24
                          154.95.100.0/22 maxlen: 24
                          154.95.104.0/22 maxlen: 24
                          154.95.108.0/22 maxlen: 24
                          154.95.112.0/22 maxlen: 24
                          154.95.116.0/22 maxlen: 24
                          154.95.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125960 (0x1ec08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  3 11:19:16 2026 GMT
            Not After : Nov 10 11:19:16 2026 GMT
        Subject: CN=6ac0e4b8-2cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:03:d3:e5:24:de:08:3c:81:bb:ba:00:90:c6:
                    e4:5e:aa:b0:db:2b:b2:65:75:10:a8:50:5c:95:53:
                    bf:55:95:a9:51:07:d8:c7:e6:01:ab:2d:64:55:fb:
                    ba:dd:0c:88:f5:80:18:3e:4b:a8:83:0a:59:28:aa:
                    9a:6b:90:8d:6d:b1:96:2a:20:77:f6:fe:6b:d7:05:
                    dd:19:16:57:87:38:f5:65:a3:de:63:97:c9:9f:f5:
                    1d:f1:2c:63:23:06:4a:1e:1a:37:f6:cb:6f:57:0f:
                    4b:2e:ee:5a:bb:ee:ca:2a:8d:85:69:4e:cc:3c:d9:
                    44:fb:da:3c:f8:bf:68:76:f2:b7:d5:de:38:ac:4d:
                    3c:cd:73:c5:68:97:bd:bd:5c:cc:10:b6:b9:26:25:
                    db:3e:91:e4:d9:94:07:0d:4c:eb:dc:71:dd:23:0a:
                    3c:01:e4:56:81:3f:db:a5:b6:fd:6b:4a:5d:94:f3:
                    c8:8f:dd:a2:cd:22:8d:b8:c6:6d:d2:f8:86:cd:f8:
                    8a:44:34:3c:8d:6f:c9:b5:03:1d:25:4d:1c:77:9f:
                    ee:83:42:fd:49:35:d8:71:96:b3:66:aa:52:37:01:
                    de:9c:12:a6:85:9e:ac:c0:6e:dd:6c:0b:fa:22:61:
                    9a:e2:02:a2:8a:a9:95:d4:91:f5:08:77:39:57:38:
                    cf:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:19:15:37:03:A0:BB:3A:3C:62:E4:8A:41:8B:23:4E:99:E3:8C:01
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/471584FABF1C11F181418BD2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.95.72.0/22
                  154.95.96.0-154.95.121.255

    Signature Algorithm: sha256WithRSAEncryption
         3c:e8:f7:3d:e2:cb:dd:71:6a:68:a9:17:04:7d:cb:33:5e:20:
         d5:47:3c:b3:84:ef:fc:64:90:67:b4:3f:1f:9a:e4:e5:60:28:
         3a:57:79:14:1d:6f:56:60:10:c5:87:fc:30:75:86:f5:2e:5b:
         48:47:01:b0:9f:80:dc:47:8b:16:27:32:d8:e7:de:8c:6e:3b:
         1a:c8:06:6a:d0:c1:f8:45:f8:da:3e:50:31:c0:78:4a:52:33:
         04:c6:25:d0:8d:33:d4:fd:f6:4a:49:c3:a0:dc:d8:cc:ff:f3:
         81:76:13:94:36:ac:81:6b:85:61:53:5f:fb:f7:be:e8:44:4f:
         ac:de:67:71:ab:88:7e:79:a8:6b:b6:b8:9d:a1:79:3a:43:0e:
         d2:ba:5f:23:96:2f:6a:d0:28:af:e6:be:c1:3c:37:77:fc:47:
         6a:53:59:90:5b:eb:05:d3:9c:31:4d:c6:fe:5e:1f:91:5f:b9:
         12:ef:a0:9f:e9:f3:28:3e:76:cd:c4:22:2c:b4:ce:00:73:a4:
         f1:48:e5:6b:ce:aa:50:00:00:50:c3:04:0f:43:6f:ba:8b:53:
         85:cf:4f:39:13:da:a3:f7:64:07:fc:35:fa:01:44:dd:0a:d4:
         98:0e:8e:2f:d3:79:86:71:8b:15:09:93:1d:3e:50:2c:85:10:
         3d:c1:99:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----