Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D205F1A9FD611F1B9865FBDCE1D38B0.roa
File:                     4D205F1A9FD611F1B9865FBDCE1D38B0.roa (raw, json)
Hash identifier:          wuHMNHvKzoV2fqsWL33/9REoHLRb1zm1/tJ77aFCT18=
Subject key identifier:   40:84:9D:DC:E5:89:D1:BC:25:C8:BB:B0:63:67:BF:55:EE:EF:0D:E4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E264
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D205F1A9FD611F1B9865FBDCE1D38B0.roa
Signing time:             Mon 24 Aug 2026 16:10:19 +0000
ROA not before:           Mon 24 Aug 2026 16:10:15 +0000
ROA not after:            Tue 22 Sep 2026 16:10:15 +0000
asID:                     137899
IP address blocks:        154.94.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123492 (0x1e264)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 24 16:10:15 2026 GMT
            Not After : Sep 22 16:10:15 2026 GMT
        Subject: CN=6a8c6ceb-d00b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:57:56:85:86:22:0c:13:81:3b:13:1f:49:ed:
                    7a:27:8c:91:ac:72:e4:83:ad:e1:2f:7f:c5:15:35:
                    e3:0a:78:e5:85:2d:cf:97:61:ee:e1:ad:3d:5d:7c:
                    de:f1:ff:e9:e3:e0:9e:c9:a4:a2:b4:1a:4a:2a:22:
                    ab:5f:6e:b9:56:ac:eb:54:93:1e:5d:1c:c6:18:a7:
                    de:e9:28:0b:64:9d:77:1a:ff:fa:a9:8b:82:b9:3a:
                    39:08:7d:79:58:e4:b4:9c:df:d4:90:50:d2:db:a2:
                    76:a5:d7:7f:4f:f6:1d:2b:6b:39:0a:b2:34:1f:1c:
                    d6:f4:ea:52:24:b3:bf:39:ba:81:c8:42:62:b9:10:
                    5d:8c:e4:5d:66:25:9e:28:ba:f9:fe:8a:69:db:fb:
                    bb:ba:84:99:95:53:72:74:ab:8c:18:bd:eb:3e:23:
                    49:f1:5c:15:ae:d8:c1:48:47:71:b7:d3:03:1d:2f:
                    14:ac:14:3b:28:3d:fe:b0:d8:4c:b5:76:f3:d2:cb:
                    b1:0e:7d:60:08:74:e8:3c:55:7b:ef:64:c2:2f:f7:
                    59:6f:28:bd:cf:5e:70:e8:b7:c4:e7:27:a4:ff:04:
                    ac:aa:89:af:a0:a7:ee:2c:18:0e:71:43:25:db:51:
                    34:53:93:c8:6e:0e:e0:07:1b:64:23:81:24:e3:f1:
                    ad:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:84:9D:DC:E5:89:D1:BC:25:C8:BB:B0:63:67:BF:55:EE:EF:0D:E4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D205F1A9FD611F1B9865FBDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6a:d5:9e:89:c8:eb:18:f4:a5:a1:ba:af:00:ad:02:f0:a3:fb:
         a4:85:3b:51:56:e8:2d:7d:71:43:9b:39:6e:26:42:92:ce:ee:
         a3:16:8c:69:bd:a7:19:07:65:26:c6:28:92:08:0d:83:8d:7a:
         fb:b5:2f:8a:51:d7:93:0a:9b:5a:12:64:fc:5b:50:0f:65:e3:
         7b:28:89:11:41:e2:24:c4:8c:93:65:14:3a:94:b7:79:45:c9:
         e3:b4:f7:b7:25:d1:ea:23:5d:ce:cc:99:af:8d:5b:e3:bc:a3:
         11:06:f5:e5:78:06:cb:04:76:d8:4b:35:c1:a5:53:cc:f6:fa:
         16:0b:24:d2:04:f2:61:45:5a:32:d7:fb:7f:1c:5f:11:72:96:
         c2:55:15:16:25:4b:ba:5b:be:e0:7b:61:3b:b7:a9:e9:c2:90:
         90:83:02:b0:c4:7c:68:91:f8:18:31:b2:c7:f5:68:4b:12:ba:
         12:13:5a:c2:6a:d9:d0:31:83:72:34:e4:d1:d6:ef:08:8a:bc:
         50:a9:8c:e2:11:d4:20:43:ad:a4:dd:7f:31:40:d4:4b:84:13:
         1c:23:60:7c:19:86:48:76:62:8a:b1:5e:51:6d:b6:49:98:49:
         0d:87:4b:76:f3:74:bf:e2:bf:c2:e0:a4:b6:a1:29:88:7b:ce:
         16:0e:7b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----