Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B941BFAC16811F1905813D5CE1D38B0.roa
File:                     5B941BFAC16811F1905813D5CE1D38B0.roa (raw, json)
Hash identifier:          w3ObJzX2HApLWz++Bdy8UivsPJGA1rZemIDrx61ezFE=
Subject key identifier:   99:24:40:7B:7C:B9:8E:F6:85:40:23:D5:96:F4:37:AF:F2:7E:99:E4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC81
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B941BFAC16811F1905813D5CE1D38B0.roa
Signing time:             Tue 06 Oct 2026 09:28:59 +0000
ROA not before:           Tue 06 Oct 2026 09:28:54 +0000
ROA not after:            Fri 16 Oct 2026 09:28:54 +0000
asID:                     137897
IP address blocks:        154.203.0.0/23 maxlen: 24
                          154.203.204.0/23 maxlen: 24
                          154.203.244.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126081 (0x1ec81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  6 09:28:54 2026 GMT
            Not After : Oct 16 09:28:54 2026 GMT
        Subject: CN=6ac4bf5a-32c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7d:04:b1:a6:5c:14:3c:57:3f:7b:63:7a:56:
                    a7:cd:af:85:56:c6:e5:7b:8b:29:75:b1:c1:a8:98:
                    50:a5:6e:0a:83:20:fd:35:f3:d4:90:cf:a1:5e:7d:
                    b5:27:fb:80:9a:66:f3:b2:f3:ea:d3:c1:cf:b5:8c:
                    fa:1f:76:fa:75:11:2b:f6:c5:ce:ae:71:be:e7:97:
                    c7:7b:71:f0:f1:5c:5d:6c:8a:ad:63:6b:6a:74:8d:
                    56:44:93:3a:47:32:8b:d9:32:ce:b8:a6:a8:71:db:
                    c0:9d:86:43:38:7e:f6:3a:26:e3:4f:e6:36:d0:21:
                    2f:9e:51:28:d2:51:a4:1f:ed:ac:c3:31:1b:14:4b:
                    47:bf:9f:f9:69:46:44:fd:70:e8:78:48:be:45:b1:
                    c0:18:61:5b:3a:35:75:ab:64:7f:52:34:22:aa:15:
                    50:f8:72:09:a1:62:f2:cd:5e:70:ca:dd:3f:3b:a7:
                    27:99:11:67:32:d5:4a:2c:6a:47:3e:c8:5c:5b:9f:
                    3f:d0:95:c3:07:c3:0c:69:2d:42:18:12:d0:15:45:
                    64:76:c9:f2:8b:97:f4:0b:bb:2f:a7:98:3e:b3:84:
                    c9:16:55:40:fc:52:96:7d:ec:5e:ce:dd:c9:47:98:
                    ab:a2:b0:6f:83:25:38:5f:77:51:3c:58:0f:f5:dd:
                    3f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:24:40:7B:7C:B9:8E:F6:85:40:23:D5:96:F4:37:AF:F2:7E:99:E4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B941BFAC16811F1905813D5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.0.0/23
                  154.203.204.0/23
                  154.203.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:af:a1:b7:7a:aa:37:6e:1b:47:b4:75:e7:e0:85:18:47:d9:
         ad:95:63:03:d7:2d:99:5d:76:3c:f8:23:76:0e:f2:db:43:da:
         f6:86:01:44:78:32:f4:25:e5:c2:bb:67:60:94:dd:60:65:83:
         06:2e:a2:46:a8:9c:8d:8c:6e:f1:ec:ce:73:38:00:59:9c:3a:
         85:f8:c8:79:af:bf:f5:63:84:a7:a6:c0:e4:32:4e:ed:8a:27:
         34:11:13:7a:7b:77:b3:bf:7d:3e:92:05:6c:06:e2:2a:fa:f9:
         c7:eb:c7:9c:d0:fa:b3:e0:0f:00:23:4a:f0:26:8d:64:47:30:
         14:d7:ef:b5:7e:cb:09:a3:4e:bd:78:a7:19:6f:1a:bc:08:e5:
         ef:e2:dd:eb:72:c0:17:c3:9c:1c:49:0d:f5:d8:40:d0:04:ba:
         5f:86:a0:b9:6c:50:fa:9e:56:a1:b9:64:73:e7:78:dd:f0:ab:
         9e:8f:06:2a:23:cf:15:f9:58:35:1c:38:9f:f3:38:11:f0:09:
         3b:18:6e:bf:26:dd:eb:1e:52:c9:4c:e1:fe:82:12:6c:52:00:
         dc:e6:29:b4:ec:b0:c1:98:d7:eb:61:c1:5d:f2:cb:8f:5e:21:
         9d:71:a1:46:18:e7:a2:e8:a2:1e:48:7b:fe:12:ec:ce:38:64:
         4e:39:32:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----