Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/869A6D109BAF11F18313FEDFCE1D38B0.roa
File:                     869A6D109BAF11F18313FEDFCE1D38B0.roa (raw, json)
Hash identifier:          rZj8e/e0D1XzO7H5xVt3xyhK5DHE76rfYX1IpkaqvHE=
Subject key identifier:   8D:F5:8E:96:DE:1C:42:35:4E:B1:85:A0:E4:94:DB:A0:A9:55:05:87
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E003
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/869A6D109BAF11F18313FEDFCE1D38B0.roa
Signing time:             Wed 19 Aug 2026 09:22:41 +0000
ROA not before:           Wed 19 Aug 2026 09:22:37 +0000
ROA not after:            Thu 19 Nov 2026 09:22:37 +0000
asID:                     139923
IP address blocks:        154.210.16.0/20 maxlen: 24
                          154.213.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122883 (0x1e003)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 19 09:22:37 2026 GMT
            Not After : Nov 19 09:22:37 2026 GMT
        Subject: CN=6a8575e1-6552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8a:f3:0b:db:81:fa:10:d4:44:e8:fd:22:fc:
                    dc:fe:33:b5:17:25:ab:dc:5b:09:d0:3b:9e:62:96:
                    f7:49:c4:d6:30:f7:36:0e:62:50:74:d6:57:df:89:
                    a2:ab:a3:f7:7c:56:bb:4f:34:a2:98:13:ec:0c:f4:
                    1d:5a:cb:4b:6e:45:0a:e8:76:65:88:a1:12:9d:14:
                    7d:cb:07:e6:3e:bc:c4:9b:a0:29:18:f1:b2:2b:be:
                    df:f4:81:67:c4:c6:2a:9b:cb:f8:fe:5b:9f:a2:51:
                    d6:ab:01:81:b2:2a:7d:a3:2c:75:6e:3d:c3:55:17:
                    db:6a:6e:05:e2:1c:86:f5:e8:16:82:eb:90:db:d8:
                    6c:ea:2c:86:85:5c:3d:7e:90:0c:c5:13:e3:d6:74:
                    d7:21:5f:a1:9d:fb:3a:51:34:e6:88:cd:44:b6:e1:
                    59:74:1b:3b:12:17:8f:4e:98:10:00:60:59:7b:7a:
                    df:1e:8f:76:fd:44:de:f5:c5:49:d4:1f:af:7f:cd:
                    94:1c:8a:b7:93:a5:9f:ac:a4:e6:df:6b:70:ea:bf:
                    dd:57:ea:65:e7:fc:b0:10:ed:c4:2d:ab:fa:60:f9:
                    af:21:40:03:e5:7f:89:7e:95:1e:ca:f0:52:4c:b5:
                    a8:16:d6:bd:cc:4c:69:ce:b6:05:c5:2e:9c:7d:a3:
                    8a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F5:8E:96:DE:1C:42:35:4E:B1:85:A0:E4:94:DB:A0:A9:55:05:87
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/869A6D109BAF11F18313FEDFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.16.0/20
                  154.213.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6c:e4:2e:f8:e8:c6:b7:9d:bc:58:fc:36:cd:b7:0f:1e:dc:4c:
         ff:b7:0f:35:08:e6:d6:aa:57:5f:cf:38:40:39:6b:af:27:ea:
         74:35:43:27:7f:39:34:cf:41:3a:8a:39:07:6c:a9:d6:18:e6:
         64:86:f4:4d:de:a0:91:fa:17:94:cd:1c:ab:10:c5:a1:70:96:
         68:1c:00:1b:43:bd:ca:14:4b:90:b7:6e:5f:0a:65:b0:57:65:
         27:58:fb:d4:69:26:b1:63:d0:6f:73:53:d0:4d:cc:d7:f7:5e:
         64:7f:0f:e2:2f:6c:e5:a0:96:27:17:e0:46:1f:01:5d:85:22:
         07:ed:4a:e7:5c:24:56:7c:24:30:46:6e:a3:aa:9b:ba:b2:0d:
         ac:91:43:f0:54:cd:e6:61:3b:0f:02:ae:2d:51:70:cd:0f:e4:
         ea:c7:ce:41:f8:7b:d7:26:01:7b:ca:1b:cc:8f:6e:1c:20:a6:
         21:ab:a7:8f:bc:7c:a8:68:bc:5f:e2:f2:ca:58:77:57:25:69:
         6a:f3:00:a9:0e:6f:2e:d5:33:e2:a4:d7:a6:f8:82:90:e9:f7:
         63:57:de:a7:28:2a:ff:11:57:84:48:3b:31:f1:1c:1f:e4:d4:
         6e:e7:00:44:4d:04:95:8d:87:fb:b0:30:9b:0e:07:44:a7:9a:
         c8:21:08:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----