Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A95B1BE93BF11F1AD3910C3CE1D38B0.roa
File:                     4A95B1BE93BF11F1AD3910C3CE1D38B0.roa (raw, json)
Hash identifier:          +wiKtQWLXfx0wqSIzb87LARaDh3JQGlp3l7fYdbXo5M=
Subject key identifier:   D0:26:24:F7:EE:5B:E0:23:AD:97:AB:78:20:78:6A:D4:29:3F:6A:E3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DDA1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A95B1BE93BF11F1AD3910C3CE1D38B0.roa
Signing time:             Sun 09 Aug 2026 06:55:23 +0000
ROA not before:           Sun 09 Aug 2026 06:55:19 +0000
ROA not after:            Tue 30 May 2028 06:55:19 +0000
asID:                     141109
IP address blocks:        154.209.93.0/24 maxlen: 24
                          154.209.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122273 (0x1dda1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug  9 06:55:19 2026 GMT
            Not After : May 30 06:55:19 2028 GMT
        Subject: CN=6a78245b-c4ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:97:e5:9b:26:2d:e6:c5:cb:5c:fd:4c:86:17:
                    2b:71:0a:de:7e:88:77:39:6d:25:fa:a2:a7:1b:48:
                    82:b3:c2:b5:43:8b:8d:89:b3:08:83:e2:b7:44:d9:
                    5f:76:9b:f6:e5:5b:64:c1:63:22:0a:36:57:31:8d:
                    fe:ab:b6:33:c9:ec:61:2f:5a:f0:35:a8:e0:2c:af:
                    43:04:db:55:4d:23:9a:9b:4c:2f:36:fc:5b:aa:0f:
                    76:1c:98:f4:ad:e8:c1:60:c4:40:1e:91:6e:95:29:
                    38:bb:e0:04:73:cc:64:d1:a8:be:e0:2f:cd:b8:fc:
                    34:8a:fe:d2:f6:89:4e:da:46:b3:e7:98:aa:07:f1:
                    d2:2d:6f:b3:d1:db:dd:e0:93:f9:f1:0c:cf:e7:b9:
                    ea:c1:a5:3a:45:80:10:62:d1:45:99:4a:30:3f:ae:
                    cf:d9:4a:34:30:7d:c8:30:f6:66:62:f6:01:29:9a:
                    c2:ca:76:14:55:52:db:0b:51:a1:32:e1:6b:8d:f6:
                    c3:06:03:7a:e8:16:89:43:a8:82:f3:5f:9b:f4:fc:
                    68:72:9f:03:8a:4e:81:e8:7b:be:18:c8:18:c3:4d:
                    12:bf:13:12:97:19:ae:26:5f:73:42:19:a8:25:7d:
                    b2:36:94:b3:4c:78:d6:a6:78:ad:55:65:4a:ec:71:
                    3a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:26:24:F7:EE:5B:E0:23:AD:97:AB:78:20:78:6A:D4:29:3F:6A:E3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A95B1BE93BF11F1AD3910C3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.209.93.0-154.209.94.255

    Signature Algorithm: sha256WithRSAEncryption
         7b:9f:c5:23:60:1c:49:fc:cb:f5:25:0d:ce:29:38:e0:27:66:
         61:50:68:10:10:ee:dd:5b:c6:4b:4a:83:15:4d:09:c0:bf:76:
         60:8a:f8:39:0a:69:b2:cc:7c:a1:14:41:29:24:fb:93:5d:ad:
         8a:50:85:9a:31:ab:46:47:12:17:17:cc:15:cc:6f:14:90:5e:
         d4:dc:f7:f4:3c:5e:4e:fd:f7:12:7e:0c:23:6b:c6:92:e1:35:
         80:78:5a:43:c5:49:bb:bd:87:19:02:96:e7:68:8b:ed:fa:0c:
         b0:bf:eb:8c:d0:b8:91:66:71:07:d5:88:40:0b:ab:b7:3f:68:
         e0:7b:e8:cd:78:91:1f:9d:7b:f8:5c:8a:86:0c:c4:86:57:3a:
         39:ec:55:12:cb:03:4d:f3:f2:45:2e:89:14:5e:6f:bf:98:97:
         ff:90:d8:41:0c:a4:7b:de:14:fb:99:16:1f:e8:d7:b2:54:1b:
         35:dd:bf:04:9c:4a:af:9e:cb:45:aa:0b:f5:e3:9b:74:86:3d:
         ec:c3:c8:76:0f:12:fe:a4:a4:e4:5d:97:c2:25:fd:40:52:46:
         1b:d2:a8:5c:6d:f8:c5:7e:e6:97:49:b1:b7:e3:73:6c:65:de:
         2a:9e:df:3f:34:2f:f5:ec:be:13:83:8e:4e:66:3d:8f:97:2e:
         75:d8:bd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----