Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/755A36CE9C8211F1842C6BDACE1D38B0.roa
File:                     755A36CE9C8211F1842C6BDACE1D38B0.roa (raw, json)
Hash identifier:          GvbqGjR33W+ruGQ4h5H7jhw+OAWYEpP1/G6eSctYYU4=
Subject key identifier:   EC:88:4B:4B:F6:10:4F:E1:DA:3C:81:E5:66:5B:9A:B7:13:4B:EE:11
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E078
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/755A36CE9C8211F1842C6BDACE1D38B0.roa
Signing time:             Thu 20 Aug 2026 10:32:36 +0000
ROA not before:           Thu 20 Aug 2026 10:32:32 +0000
ROA not after:            Thu 24 Sep 2026 10:32:32 +0000
asID:                     400619
IP address blocks:        154.89.144.0/20 maxlen: 24
                          154.89.160.0/19 maxlen: 24
                          154.89.192.0/20 maxlen: 24
                          154.95.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 14:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123000 (0x1e078)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 10:32:32 2026 GMT
            Not After : Sep 24 10:32:32 2026 GMT
        Subject: CN=6a86d7c4-57b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:31:6b:af:1b:d1:f4:b0:68:b8:c5:db:4b:ca:
                    00:b9:3d:a5:cc:a9:4c:b8:df:6c:fc:b0:b5:85:71:
                    8c:a0:6b:8b:af:f4:ae:c5:4d:33:0b:09:a7:39:f0:
                    10:4e:a2:51:ad:05:ca:87:3b:a0:1e:24:03:e2:de:
                    25:4d:07:88:f1:31:f4:da:80:ec:84:c4:0d:40:1a:
                    6b:47:d5:16:aa:62:31:19:41:e6:b6:56:f2:60:77:
                    e4:21:a3:28:fb:5c:a3:80:54:b6:da:1e:8f:0c:47:
                    f1:28:70:e3:be:b7:7e:9a:f6:d0:d0:0a:9a:b3:1c:
                    0b:2d:af:b3:82:75:86:54:9c:32:a2:38:eb:77:87:
                    7d:e7:9d:87:f0:db:da:b2:33:42:d8:e7:85:b9:22:
                    44:b7:fd:32:db:f5:72:1f:66:9e:3f:71:f6:55:ae:
                    64:b2:4d:c4:c2:3b:ca:d7:5d:23:a4:9d:87:49:37:
                    50:06:b2:19:30:22:28:cb:4b:20:94:c6:64:8c:a7:
                    9f:55:de:48:f3:e1:26:f6:d6:66:32:9d:fc:19:ca:
                    18:3b:0f:ed:f6:0b:89:36:ef:93:15:90:8d:f9:cb:
                    65:be:eb:f2:b6:ce:47:e1:e7:64:b6:83:29:18:b9:
                    72:27:b3:ff:f3:95:82:62:54:d3:19:f7:f6:57:5e:
                    21:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:88:4B:4B:F6:10:4F:E1:DA:3C:81:E5:66:5B:9A:B7:13:4B:EE:11
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/755A36CE9C8211F1842C6BDACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.144.0-154.89.207.255
                  154.95.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:9e:14:a1:44:8f:60:98:d4:23:a3:e6:01:97:30:41:3a:3e:
         1a:d6:0a:63:97:f9:34:ef:c8:95:1d:3b:94:66:97:89:7e:8c:
         83:dd:67:18:c4:95:56:b1:81:70:ce:21:8b:7d:0c:cb:3d:0d:
         e9:d3:93:09:ca:c3:5e:14:87:e2:bc:d5:22:76:19:fc:75:59:
         72:1d:b0:2d:26:81:d5:40:3c:11:5d:82:16:af:9a:ed:fa:c0:
         1b:43:0a:96:45:3a:df:95:1f:d7:52:54:eb:bd:81:b5:0b:88:
         ab:b2:97:6c:45:3d:53:6d:4a:a2:5b:87:0d:6f:fd:c6:6b:df:
         c0:07:e6:0a:72:7d:74:6a:de:c9:5d:48:ef:82:d7:73:50:c1:
         eb:a5:52:71:b6:80:5e:37:76:c4:fa:a3:14:1d:a6:55:df:be:
         74:1a:4f:65:b6:e6:01:a6:a2:b3:38:b8:1e:a2:cb:3d:15:75:
         c6:20:01:c2:ca:d0:38:3e:47:2e:1f:f0:3f:ef:ea:89:49:03:
         69:0c:02:36:ff:3a:4f:10:df:6b:d3:e7:f3:78:17:64:56:d5:
         c8:09:f1:b1:14:ec:2c:3b:02:f5:f5:a8:c1:c1:c1:ce:b0:ce:
         cb:d3:c1:75:8a:9f:e6:d7:76:3c:48:fe:5b:78:67:6b:a0:26:
         05:1f:1c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----