Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6982CDDC9C9D11F1A21ADBFACE1D38B0.roa
File:                     6982CDDC9C9D11F1A21ADBFACE1D38B0.roa (raw, json)
Hash identifier:          esdp+f0dBydc4m9RRvNMR7SxNN4w3e7MSvxF9J3eguE=
Subject key identifier:   1E:E4:6A:1D:0D:1B:CE:F6:98:00:F6:85:4E:BD:2B:2A:90:5B:A6:B8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E0C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6982CDDC9C9D11F1A21ADBFACE1D38B0.roa
Signing time:             Thu 20 Aug 2026 13:45:32 +0000
ROA not before:           Thu 20 Aug 2026 13:45:28 +0000
ROA not after:            Sat 26 Sep 2026 13:45:28 +0000
asID:                     63139
IP address blocks:        154.94.86.0/24 maxlen: 24
                          154.94.87.0/24 maxlen: 24
                          154.94.88.0/24 maxlen: 24
                          154.94.89.0/24 maxlen: 24
                          154.94.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123072 (0x1e0c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 13:45:28 2026 GMT
            Not After : Sep 26 13:45:28 2026 GMT
        Subject: CN=6a8704fc-e6b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c3:0b:fc:66:ec:79:81:c6:8d:ab:99:69:3e:
                    21:ca:fb:97:d1:98:83:9d:36:b9:9c:df:23:bd:15:
                    99:79:6e:04:c4:ba:0d:05:4e:85:6e:da:17:83:a7:
                    ea:04:11:aa:12:c1:ac:7a:2a:05:47:7f:09:00:94:
                    e7:16:e0:ba:d9:ab:e9:bf:97:23:e4:4d:01:23:e3:
                    d9:84:16:6e:72:79:c3:88:0c:89:a5:e7:a9:88:c7:
                    96:46:d2:2e:b2:07:ae:0e:26:61:07:f1:33:2f:f2:
                    58:54:35:d4:5f:d6:aa:b5:90:3a:cd:c5:ac:ae:e1:
                    b6:d2:d7:dd:3a:e8:99:80:9b:04:52:7d:b5:2b:1c:
                    4a:7b:f6:18:27:4b:01:cb:e6:1b:fe:b3:d2:dc:ec:
                    0d:5a:a4:04:a7:01:9b:7a:8f:29:5a:3b:db:cf:22:
                    73:13:bb:34:85:c2:5b:aa:65:16:4b:14:9f:90:b9:
                    6e:18:ff:53:e3:73:a6:ac:7c:00:dd:a5:e5:d2:4b:
                    a8:98:c0:6e:e9:1a:b5:4b:a4:99:d3:bd:f1:7c:75:
                    f7:bc:5a:1a:23:e7:58:af:e9:36:39:45:57:b5:8a:
                    5d:03:24:f3:84:a7:74:ea:e1:63:4e:a4:70:e4:60:
                    57:2f:1c:84:62:3e:68:0f:b5:e6:b1:89:d5:7e:42:
                    d2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E4:6A:1D:0D:1B:CE:F6:98:00:F6:85:4E:BD:2B:2A:90:5B:A6:B8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6982CDDC9C9D11F1A21ADBFACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.86.0-154.94.90.255

    Signature Algorithm: sha256WithRSAEncryption
         2f:87:e5:36:5e:4b:3d:f3:6f:21:04:ae:cb:8a:a5:d9:6f:8f:
         f0:e4:bf:c6:da:c1:57:4a:49:e0:af:9a:9c:79:02:c9:4b:6b:
         b5:fa:c6:2c:a3:f7:df:88:3b:2f:97:33:b5:11:ee:3f:44:46:
         ea:8b:fe:f0:67:f3:6e:f2:43:74:a9:0d:cf:79:21:a6:7c:8f:
         dd:cc:90:ab:b6:e0:7b:59:f7:4c:e2:6b:34:2d:fe:df:2e:8b:
         37:ac:21:25:42:bc:d4:7c:f5:df:70:17:ab:e0:16:9f:d7:79:
         6e:a4:51:51:a6:0c:3f:d2:be:a8:d3:77:cd:9d:fc:bf:53:e8:
         99:e8:9e:5a:e6:3a:ad:cd:11:84:f9:f3:d3:bf:88:d2:2a:da:
         84:24:ea:bb:98:c2:8c:02:f5:a8:b3:fc:1e:18:6f:67:9d:7f:
         1c:b5:e4:f3:2b:d0:5f:bb:bc:4f:41:fc:9f:9e:19:03:81:85:
         2c:a1:35:c2:cd:e1:7e:fb:e8:c1:a4:17:80:0d:16:4f:7c:e3:
         f4:b8:36:ca:5c:a7:5a:7a:52:ee:3a:73:96:32:b9:8c:7a:3e:
         6a:0e:f9:01:9a:27:5c:f9:08:39:88:b2:57:d7:54:f7:fd:3b:
         a9:05:5d:ef:a7:6f:f1:6f:0a:6b:23:21:d2:73:0c:45:40:d5:
         66:94:5a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----