Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F2847789CD711F1BAE60ED2CE1D38B0.roa
File:                     6F2847789CD711F1BAE60ED2CE1D38B0.roa (raw, json)
Hash identifier:          lsX0h5yGe+9v6foIiDA2q2grYfKTePWKHhQY++d7kZI=
Subject key identifier:   64:B4:7B:40:2F:C2:6C:30:86:78:F0:9D:BC:3B:4D:85:39:88:12:D8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E0F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F2847789CD711F1BAE60ED2CE1D38B0.roa
Signing time:             Thu 20 Aug 2026 20:40:53 +0000
ROA not before:           Thu 20 Aug 2026 20:40:48 +0000
ROA not after:            Sat 10 Oct 2026 20:40:48 +0000
asID:                     63099
IP address blocks:        154.82.163.0/24 maxlen: 24
                          154.83.8.0/24 maxlen: 24
                          154.83.9.0/24 maxlen: 24
                          154.83.11.0/24 maxlen: 24
                          154.83.24.0/24 maxlen: 24
                          154.93.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123128 (0x1e0f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 20:40:48 2026 GMT
            Not After : Oct 10 20:40:48 2026 GMT
        Subject: CN=6a876654-a3cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:89:39:4e:98:d1:7b:74:3c:02:66:56:13:ba:
                    67:99:59:3a:e4:b8:51:9a:87:91:f8:c9:3f:e7:ec:
                    c2:35:ad:85:43:e2:92:96:a2:1b:d5:20:be:3a:b4:
                    94:ad:26:6f:cd:f2:cd:f4:a4:32:ab:e6:62:99:51:
                    c0:8c:93:6f:99:83:f5:de:62:63:ba:43:42:bc:2b:
                    bc:b2:9b:2c:53:eb:55:41:96:3c:fd:e6:a7:67:e6:
                    2d:69:5f:15:cd:dd:e1:2a:92:fe:13:34:39:f0:5d:
                    18:6a:68:9b:6c:c9:9e:43:37:d7:12:2f:3b:c1:8d:
                    ff:42:06:7c:80:5b:10:89:25:f2:c8:f4:7f:5a:98:
                    79:fc:74:bd:ed:d0:76:7a:90:c1:3a:53:d4:d2:7d:
                    ee:49:cd:11:e9:e0:cb:13:e2:0b:71:1e:3b:3e:ea:
                    75:bb:03:6f:51:ce:a5:0e:60:34:d8:cd:01:a1:57:
                    5f:ef:7a:c6:ff:80:b5:cc:d8:10:1c:66:44:4e:11:
                    f3:f4:3b:a1:e1:14:47:a3:92:23:7c:57:c1:fe:9f:
                    75:86:27:e3:77:86:09:1c:21:34:d9:14:c4:14:96:
                    55:e0:8a:f1:0a:a2:53:3f:16:01:6c:e9:ce:55:e1:
                    f3:73:c0:62:f4:7e:9e:68:1d:c6:c2:7a:60:50:d1:
                    26:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B4:7B:40:2F:C2:6C:30:86:78:F0:9D:BC:3B:4D:85:39:88:12:D8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F2847789CD711F1BAE60ED2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.163.0/24
                  154.83.8.0/23
                  154.83.11.0/24
                  154.83.24.0/24
                  154.93.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:4f:fb:af:be:bb:9b:26:a5:0b:48:31:f0:f5:6e:f3:4d:98:
         73:07:11:54:dc:4e:37:8e:69:5f:36:3d:ed:bc:ca:f0:6a:41:
         a3:3c:34:17:ce:ac:8b:77:dd:21:8b:4c:48:91:31:f6:3c:6b:
         f1:7c:bc:c0:a1:29:2c:0e:7a:f6:13:f6:94:f2:77:b7:16:08:
         a3:64:16:05:d5:e3:d7:21:a7:f4:28:93:27:0e:6d:86:da:62:
         40:e9:c4:da:cb:60:04:d6:2b:63:f0:e9:98:63:f3:08:c7:1d:
         ec:c6:a5:6e:58:11:d0:bc:19:51:ad:5b:45:8b:e4:cb:30:a1:
         4d:a0:92:67:5d:f2:fd:df:16:9d:cb:39:0d:69:3f:1c:08:3a:
         90:41:60:ac:33:a8:7d:0c:88:5c:22:18:27:59:1c:f3:80:b4:
         0f:9b:1d:ef:86:3e:8a:74:ca:ca:4e:a5:cb:cc:b3:39:7a:a2:
         33:76:e6:6b:0f:94:56:de:59:5b:4a:7d:a1:5a:48:d5:16:e2:
         f4:5e:e2:55:f2:c6:07:d2:40:b4:48:13:b7:e1:29:86:55:84:
         54:54:2d:41:23:e8:56:56:3d:62:1d:9d:8b:d9:26:0b:50:75:
         43:31:3d:40:a2:c8:3d:cf:07:ea:69:36:e1:9b:df:4e:ca:84:
         e1:7a:f7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----