Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4BA6B85AC6D711F1862D15DFCE1D38B0.roa
File:                     4BA6B85AC6D711F1862D15DFCE1D38B0.roa (raw, json)
Hash identifier:          zm3HB0rt/gvOmdfXHI3oeu7DNwygU2VJ6CIzobvckz4=
Subject key identifier:   0F:2E:5A:6B:45:76:E1:60:B0:2D:74:C7:B3:ED:87:F9:EE:22:03:5B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EDC6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4BA6B85AC6D711F1862D15DFCE1D38B0.roa
Signing time:             Tue 13 Oct 2026 07:25:42 +0000
ROA not before:           Tue 13 Oct 2026 07:25:37 +0000
ROA not after:            Fri 23 Oct 2026 07:25:37 +0000
asID:                     11404
IP address blocks:        154.83.160.0/20 maxlen: 24
                          154.89.240.0/20 maxlen: 24
                          154.90.80.0/20 maxlen: 24
                          154.90.96.0/19 maxlen: 24
                          154.92.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126406 (0x1edc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 13 07:25:37 2026 GMT
            Not After : Oct 23 07:25:37 2026 GMT
        Subject: CN=6acddcf6-b187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:17:d4:03:7e:1a:3c:27:de:c3:9a:ca:14:c9:
                    b0:24:b5:1f:b6:ff:89:74:26:30:52:e7:41:76:2d:
                    c9:b0:4c:9b:ba:83:fd:30:56:4c:64:2d:53:0d:87:
                    eb:8d:ec:f2:2f:00:1e:cb:58:03:18:a3:fe:f6:d5:
                    4a:39:a3:f1:fa:18:59:97:98:e5:14:81:c8:f9:8d:
                    6c:a2:59:f9:c3:2a:7c:a6:1e:06:a6:ad:f2:6c:ac:
                    f0:05:ac:8d:94:ce:3c:d9:e6:c5:b4:af:0c:29:df:
                    8a:50:51:ab:90:b8:2a:30:6d:81:cd:61:6b:1b:06:
                    f8:bb:d7:e7:b7:ba:25:bd:9a:7c:d4:9a:d3:59:ef:
                    83:b0:52:28:bc:42:50:75:30:ef:05:1a:68:73:7a:
                    e7:a0:93:21:2a:f5:ec:47:14:28:1e:8a:f3:52:b6:
                    18:d4:53:b6:4b:66:ea:aa:dd:03:86:67:e8:55:b3:
                    68:90:de:09:77:c8:5e:b3:6a:64:df:cf:9d:3f:d3:
                    42:92:cc:7d:d6:d3:7f:af:82:41:61:eb:51:9f:17:
                    d5:22:bc:82:6a:83:5c:67:1e:2f:16:8d:93:48:22:
                    81:50:36:eb:98:3a:60:7f:36:24:ed:ca:92:dd:53:
                    9f:c7:cb:1c:e6:3c:ed:b1:64:d4:d0:9f:e1:36:49:
                    41:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2E:5A:6B:45:76:E1:60:B0:2D:74:C7:B3:ED:87:F9:EE:22:03:5B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4BA6B85AC6D711F1862D15DFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.160.0/20
                  154.89.240.0/20
                  154.90.80.0-154.90.127.255
                  154.92.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         22:78:ae:93:b1:25:ec:6d:d1:14:5b:21:10:82:0b:d2:9f:60:
         00:8c:3e:d5:29:f7:c9:b9:a8:9a:7e:ae:9c:bd:cc:91:01:e8:
         ec:5c:e1:bc:ab:bc:0a:07:39:4c:2d:17:65:19:1f:94:c3:fd:
         ff:69:05:c4:61:0a:8f:b3:0d:6d:3e:43:c1:dd:11:9b:19:9b:
         6a:79:6b:16:fd:72:33:4b:59:c4:c5:b5:95:5a:72:4e:2e:4a:
         4a:5e:b1:42:a1:5b:49:cc:b9:7a:26:de:80:4d:37:42:de:68:
         7d:6e:30:d1:f6:4e:8d:00:6e:c0:09:50:a6:93:03:9c:18:77:
         b4:09:00:c3:53:7d:6c:c6:38:f1:64:ce:e9:b7:7e:a1:dc:34:
         4f:66:03:75:f8:4c:df:18:5f:de:72:aa:ae:ab:75:f1:f6:e6:
         8e:94:82:8b:8c:6e:9e:e0:ff:80:ac:da:5f:d8:d4:d4:43:9e:
         f1:53:8f:2d:db:31:fa:5f:57:05:4a:64:d7:56:8f:1f:9b:3c:
         f0:19:3e:30:e4:3f:51:fd:a4:a5:2d:f7:c3:94:0b:26:43:13:
         14:d5:fd:e8:c2:ea:a1:e0:5f:dd:cf:b2:13:f7:aa:a7:49:95:
         e6:50:c0:b9:a2:56:fa:35:da:33:f9:ee:03:c9:07:4c:28:81:
         d1:49:28:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----