Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/674A8882963711F19AD44BB1CE1D38B0.roa
File:                     674A8882963711F19AD44BB1CE1D38B0.roa (raw, json)
Hash identifier:          fxhZkE94Prrd8Dlh8oqDz37ArtAoIWmkJmyEVsAWvyc=
Subject key identifier:   01:2D:8B:2D:1A:88:C4:A1:1A:60:A2:CA:37:B9:7C:32:6D:A1:1C:26
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DE67
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/674A8882963711F19AD44BB1CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 10:20:13 +0000
ROA not before:           Wed 12 Aug 2026 10:20:09 +0000
ROA not after:            Sun 12 Aug 2029 10:20:09 +0000
asID:                     17561
IP address blocks:        154.86.203.0/24 maxlen: 24
                          154.86.204.0/24 maxlen: 24
                          154.86.205.0/24 maxlen: 24
                          154.86.206.0/24 maxlen: 24
                          154.86.207.0/24 maxlen: 24
                          154.86.208.0/24 maxlen: 24
                          154.86.209.0/24 maxlen: 24
                          154.86.210.0/24 maxlen: 24
                          154.86.211.0/24 maxlen: 24
                          154.86.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122471 (0x1de67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 12 10:20:09 2026 GMT
            Not After : Aug 12 10:20:09 2029 GMT
        Subject: CN=6a7c48dd-f06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d6:67:fa:e0:31:e4:71:06:4d:63:fe:ab:d1:
                    7f:03:6e:58:3e:45:fb:03:c8:8a:07:8e:22:d1:a7:
                    79:64:4f:e6:51:fa:26:c9:4d:68:43:32:8a:59:ce:
                    1f:b7:ee:32:c5:ca:85:02:b7:66:af:ce:b2:54:9e:
                    9a:9e:a4:64:c3:ff:ab:6d:92:67:d4:4b:68:f5:20:
                    64:99:00:c1:c9:a1:2d:93:e3:0a:58:38:79:a0:76:
                    70:fb:dc:d5:fe:85:78:26:12:74:55:4b:d6:46:34:
                    ba:a8:c5:1d:2f:89:be:8a:03:a1:de:53:39:db:34:
                    d0:aa:fe:c4:0f:eb:3e:67:7b:5e:b2:23:9b:11:ef:
                    8b:36:3b:2b:e8:8b:98:75:1e:73:61:27:a7:98:4d:
                    5c:ad:6f:8f:95:1a:dc:6b:02:c4:98:f8:18:f3:26:
                    03:b7:36:b7:8f:5f:dc:91:96:0b:7b:79:db:2e:76:
                    a9:0b:2e:8f:e4:5e:14:05:52:aa:4c:bb:49:33:81:
                    c5:41:a6:fc:e2:7d:83:31:2b:53:2c:ce:84:81:be:
                    96:08:c6:39:a1:e2:9f:42:06:5d:80:f7:a6:f2:f3:
                    ab:ea:65:05:4a:c4:ff:28:92:74:3d:d1:a1:6e:17:
                    7a:d7:f8:2c:24:c3:d5:98:d8:fb:b8:92:f7:bc:2f:
                    23:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:2D:8B:2D:1A:88:C4:A1:1A:60:A2:CA:37:B9:7C:32:6D:A1:1C:26
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/674A8882963711F19AD44BB1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.203.0-154.86.212.255

    Signature Algorithm: sha256WithRSAEncryption
         59:53:c0:11:ef:27:96:80:0f:a7:91:c5:65:90:2e:20:73:0b:
         79:66:08:f6:5a:7d:3b:84:e6:fd:29:7d:3c:9e:49:58:0e:f1:
         20:00:a6:88:07:ab:4e:3d:1f:91:57:fb:93:b4:fc:e0:e3:3e:
         f8:f0:7e:fd:07:b7:29:17:bd:56:45:99:21:90:af:65:ea:82:
         68:ca:51:d2:99:2a:d6:60:b4:90:f0:45:25:28:e6:6f:aa:8e:
         6f:38:c3:19:fe:49:d0:4a:8c:25:75:c1:33:51:81:fa:ac:40:
         46:d3:7a:94:01:45:70:f9:0c:c5:0a:62:20:e1:c1:5c:ec:6e:
         d8:40:49:1f:93:b2:0c:ab:78:96:52:d8:c8:f6:de:8a:38:66:
         ae:43:5f:31:0e:e2:72:cd:14:86:eb:f6:95:bd:98:6e:19:f5:
         35:9e:69:d3:07:e2:39:37:1d:ad:ee:e6:f3:83:ef:32:39:c8:
         47:c7:00:a6:85:0b:65:4f:54:06:de:63:3a:46:69:d2:ee:66:
         7a:45:88:62:81:41:0f:04:63:11:73:2f:82:87:c2:a9:7f:43:
         d3:a8:44:6e:18:70:33:33:e9:c4:fa:b5:2b:b9:1e:8b:88:cc:
         13:c5:dc:3b:06:98:bc:30:2a:b4:f2:7e:37:21:41:a9:21:6a:
         eb:31:a1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----