Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7050B39A9C7F11F19ED17AC8CE1D38B0.roa
File:                     7050B39A9C7F11F19ED17AC8CE1D38B0.roa (raw, json)
Hash identifier:          fmGgnDm5ed8SLC2dBAraooEA5V91iOtMWx6u6fN9fZk=
Subject key identifier:   41:B5:D6:14:B3:BB:5F:12:43:5F:01:50:E8:16:4C:C1:04:D2:5B:E9
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E070
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7050B39A9C7F11F19ED17AC8CE1D38B0.roa
Signing time:             Thu 20 Aug 2026 10:10:59 +0000
ROA not before:           Thu 20 Aug 2026 10:10:55 +0000
ROA not after:            Thu 24 Sep 2026 10:10:55 +0000
asID:                     54600
IP address blocks:        154.89.144.0/20 maxlen: 24
                          154.89.160.0/19 maxlen: 24
                          154.89.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 10:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122992 (0x1e070)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 10:10:55 2026 GMT
            Not After : Sep 24 10:10:55 2026 GMT
        Subject: CN=6a86d2b3-e592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7b:23:0e:3c:74:af:79:cb:e4:cc:20:dd:97:
                    ba:a3:07:d5:b6:0b:10:83:cd:33:36:1e:82:cb:b1:
                    87:05:38:74:25:d2:37:cb:3e:82:be:a6:3a:c0:cf:
                    bf:20:f9:c6:68:d4:e5:81:3a:eb:57:e0:cf:93:87:
                    5c:36:d9:37:57:5b:c6:c2:80:3f:fc:f9:21:ba:4b:
                    41:f3:9c:ce:56:22:b0:cb:0e:1e:7f:ef:ed:36:5b:
                    6f:32:a3:2d:b7:4e:80:61:85:2f:8b:1c:1e:67:45:
                    fa:bd:2c:a5:86:cc:70:e9:b9:d6:83:1c:35:e5:0a:
                    d5:25:9c:b5:fa:30:ee:5f:b3:d6:7c:64:cb:81:1d:
                    7a:45:88:25:46:b0:0a:72:b7:1b:85:a7:d0:d6:9b:
                    8c:73:b2:5c:15:49:9e:0b:f6:54:ed:98:0b:f1:de:
                    64:32:f4:3c:a2:1f:69:5f:90:32:14:ce:5a:0c:1f:
                    5a:69:4b:30:62:f9:03:15:cc:bd:f8:ee:5a:32:d7:
                    35:d9:7e:65:3a:cc:0f:f4:61:e4:a7:47:e0:55:48:
                    c6:59:cf:a2:de:bd:84:3c:1d:04:dc:48:6c:9a:24:
                    19:a7:a6:e8:29:d0:12:82:01:9c:28:51:2d:5b:76:
                    b6:b5:2d:44:32:41:54:ed:b7:34:57:0e:8b:20:09:
                    a8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B5:D6:14:B3:BB:5F:12:43:5F:01:50:E8:16:4C:C1:04:D2:5B:E9
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7050B39A9C7F11F19ED17AC8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.144.0-154.89.207.255

    Signature Algorithm: sha256WithRSAEncryption
         61:09:ee:a4:73:2c:d7:14:63:c5:40:e5:96:2e:3b:d9:e7:8b:
         ec:8e:a9:78:ba:4e:a5:d5:cd:3e:2e:fb:70:57:5c:a0:8e:29:
         18:45:05:b1:0b:40:64:27:b2:7c:7e:be:64:45:06:ca:d8:49:
         ad:bb:c7:da:8c:92:5f:55:02:69:26:85:6b:5e:4e:92:d8:ec:
         3a:04:81:df:3c:ab:8d:0c:f0:ea:f8:30:d8:a3:f2:6f:d0:55:
         d8:d8:e9:74:1a:1d:36:a9:1d:78:f2:eb:d3:55:e4:5c:44:44:
         0f:ec:c6:bc:e2:a0:fb:68:4e:47:45:95:dd:75:e6:17:63:99:
         b3:dc:27:19:65:56:e0:4b:6f:f8:20:1a:9f:86:27:e2:00:70:
         0f:91:85:5e:16:f6:7c:33:a7:46:d8:36:ec:e5:65:e0:33:fb:
         32:6f:7c:79:d8:ef:71:63:25:2b:25:f1:84:b9:b7:89:b4:f5:
         26:40:1c:0a:53:07:05:28:ba:a6:59:8f:3a:79:54:85:36:a7:
         56:aa:2d:bd:2b:3f:cf:82:76:69:92:a2:36:2b:aa:6a:2b:85:
         f7:23:b3:27:61:d2:ca:ba:0f:b2:84:8f:c9:6b:29:4b:05:b4:
         e1:17:57:5b:dc:bc:e6:5e:ff:f7:e0:13:a7:3a:c4:c0:59:79:
         1b:4e:6a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----