Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EF9B466A77A11F1A9A2EC0DCF1D38B0.roa
File:                     4EF9B466A77A11F1A9A2EC0DCF1D38B0.roa (raw, json)
Hash identifier:          yyaOKNic7D+l8c0k1xdhoJ6FytsVrr0iPiJMNKmQ9SQ=
Subject key identifier:   B4:28:70:94:CE:BD:AB:2F:EE:C9:0A:3B:84:22:C5:A7:3A:7A:B2:B9
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E521
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EF9B466A77A11F1A9A2EC0DCF1D38B0.roa
Signing time:             Thu 03 Sep 2026 09:31:58 +0000
ROA not before:           Thu 03 Sep 2026 09:31:54 +0000
ROA not after:            Sun 13 Sep 2026 09:31:54 +0000
asID:                     8796
IP address blocks:        154.86.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 12:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124193 (0x1e521)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  3 09:31:54 2026 GMT
            Not After : Sep 13 09:31:54 2026 GMT
        Subject: CN=6a993e8e-4fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:90:67:bc:89:26:c9:44:fa:bb:d6:7e:f4:eb:
                    14:f2:fa:c6:3a:b4:95:75:10:da:76:2f:8d:a4:0c:
                    a6:97:5b:9b:84:25:44:f6:a9:d9:a2:02:ff:20:fb:
                    30:fd:cf:12:ce:48:58:ac:09:97:44:c1:ca:25:86:
                    70:45:f3:f6:c5:d0:cb:0f:d0:58:46:13:24:2c:b0:
                    58:b3:ff:73:90:6a:5c:b2:bd:22:f9:c3:81:d7:f3:
                    2b:d4:7c:45:c1:ea:7c:d1:e6:61:5e:ff:d0:61:ad:
                    ab:c4:3d:8e:aa:a6:2b:37:b9:4f:0d:7e:fc:d9:23:
                    15:a6:cc:56:aa:3b:4d:35:92:f0:fb:5b:67:31:d2:
                    9f:2d:68:9c:c1:1a:3f:5c:d7:29:5f:2b:76:ad:96:
                    0b:d3:98:d4:04:2f:03:6f:ae:98:8f:48:6f:12:2c:
                    41:3d:5d:4f:a8:65:6b:32:0a:b4:1c:96:7f:7e:14:
                    6d:a6:1a:94:32:db:c6:c9:7f:93:81:ba:f7:ee:6d:
                    f7:74:7b:c6:2a:de:58:d3:08:37:5c:47:07:6f:7a:
                    2f:ab:69:9c:70:aa:9f:cf:c6:c5:ac:39:ca:22:24:
                    1b:7e:b0:61:f4:65:61:12:ab:e3:78:85:c3:9c:6f:
                    86:20:29:7c:b1:39:ef:72:e4:37:70:d3:98:30:51:
                    ea:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:28:70:94:CE:BD:AB:2F:EE:C9:0A:3B:84:22:C5:A7:3A:7A:B2:B9
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EF9B466A77A11F1A9A2EC0DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:e9:10:84:76:45:cc:13:2b:ca:9d:24:3a:00:f8:52:9e:70:
         4d:ae:ab:4e:17:53:d8:4c:75:af:9e:48:ce:8e:b2:f5:23:96:
         72:cb:c2:df:2e:af:35:7a:ad:13:ce:e4:8f:eb:b2:21:87:62:
         95:17:d9:71:09:47:a4:3c:d6:7b:11:e1:65:a9:67:01:f9:b3:
         3f:49:8e:a5:2c:bd:24:0c:cc:6a:fe:c8:70:c0:4c:78:ff:d5:
         cb:27:c8:77:d2:f0:11:f3:cb:03:53:5b:3b:1b:b6:a8:4c:fb:
         cc:db:3a:aa:ca:85:98:19:11:35:62:11:cd:36:f5:a2:cd:8a:
         95:f6:50:ce:f3:75:aa:06:8b:56:06:81:c8:03:e0:09:eb:2b:
         59:f6:1f:0c:c1:70:cb:6c:a3:8e:b9:3a:9d:93:94:1d:a2:6b:
         87:df:5f:53:88:90:20:8d:41:39:e2:83:0e:a4:0c:d1:df:5e:
         5e:12:c8:04:12:32:fb:0e:42:3b:44:c9:04:bf:ed:28:f3:72:
         b2:30:71:d2:d1:18:4f:2a:c6:72:b7:dc:8a:14:ae:89:ba:a1:
         a6:56:8b:5c:d7:bb:3c:03:c8:be:9d:e8:68:bd:6f:bc:e8:20:
         9f:ee:7a:19:61:2b:07:77:49:7d:5a:8e:5a:60:a7:cf:20:10:
         f3:f3:51:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----