Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BF7D2EA9C7A11F1A8521DACCE1D38B0.roa
File:                     8BF7D2EA9C7A11F1A8521DACCE1D38B0.roa (raw, json)
Hash identifier:          Y132irrsUSX0auhfoe86wo+d1CaIxOBpOW3d1Hd3tXk=
Subject key identifier:   39:93:8E:57:30:BE:E1:BB:59:75:39:0E:9E:C6:4D:45:A3:BC:E5:91
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E061
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BF7D2EA9C7A11F1A8521DACCE1D38B0.roa
Signing time:             Thu 20 Aug 2026 09:35:58 +0000
ROA not before:           Thu 20 Aug 2026 09:35:54 +0000
ROA not after:            Thu 24 Sep 2026 09:35:54 +0000
asID:                     18013
IP address blocks:        154.202.117.0/24 maxlen: 24
                          154.202.120.0/21 maxlen: 24
                          154.217.234.0/23 maxlen: 24
                          154.217.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 21 Sep 2026 18:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122977 (0x1e061)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 09:35:54 2026 GMT
            Not After : Sep 24 09:35:54 2026 GMT
        Subject: CN=6a86ca7e-0fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:3d:c1:28:0a:b5:a6:08:10:a6:bb:d1:38:10:
                    99:ec:8c:60:b1:5e:7d:66:10:64:a7:55:9c:81:f6:
                    a0:7e:c2:43:d6:01:98:c4:37:29:ac:5e:4a:7b:ce:
                    43:c8:54:a0:7f:97:fc:fc:ae:d2:80:ff:93:a4:4b:
                    e2:23:2a:ff:b6:64:83:b6:69:9b:56:e2:d8:f5:a1:
                    99:73:b3:7d:92:80:b2:1c:7d:73:7b:52:2b:bc:c6:
                    11:e6:b2:34:7b:cd:3b:b7:c8:92:4b:8e:ae:82:eb:
                    bb:15:d4:f1:f0:6e:56:8a:02:e6:d0:09:b5:2e:c1:
                    b0:45:99:92:ae:31:39:b9:f0:a8:e9:79:f8:3a:1b:
                    02:80:32:46:5f:88:dc:2f:38:91:94:0c:e0:a4:32:
                    20:dd:39:14:0a:d5:7b:28:6c:c9:bc:a8:0e:91:ac:
                    fa:83:de:13:e8:bb:66:d5:74:d6:3e:f4:66:34:3f:
                    ef:c0:15:68:be:b4:f1:5e:2f:8e:f1:b4:09:86:61:
                    61:2e:64:82:2a:f6:cc:e8:7d:10:ee:8d:25:cd:ae:
                    2f:62:7b:72:10:cc:e0:6e:55:56:df:d8:f5:9e:3a:
                    ef:c0:52:c4:0e:66:bb:e2:4c:2c:62:f1:69:a6:9f:
                    b4:82:8d:50:4f:d8:34:f7:4e:33:f3:03:92:a3:8a:
                    81:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:93:8E:57:30:BE:E1:BB:59:75:39:0E:9E:C6:4D:45:A3:BC:E5:91
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BF7D2EA9C7A11F1A8521DACCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.117.0/24
                  154.202.120.0/21
                  154.217.234.0-154.217.239.255

    Signature Algorithm: sha256WithRSAEncryption
         41:d1:a3:b4:2e:96:94:6f:89:9c:cb:33:1a:f8:58:48:20:0e:
         a1:b2:f4:f8:ff:41:55:fb:0b:35:76:26:6b:68:70:6b:ea:cd:
         a9:0a:d1:a4:34:36:81:50:ae:28:1e:95:ba:7e:c0:15:28:25:
         bf:39:d3:61:2f:52:84:4b:21:19:d2:4d:10:f7:4e:9d:de:41:
         7d:ca:92:f3:11:1b:e3:ce:b7:3a:16:d9:88:d4:e2:7d:0f:56:
         f2:6c:8f:68:cf:8a:63:c4:be:61:0c:19:54:76:df:cd:ce:40:
         96:39:24:1b:7e:f6:7a:90:92:8e:f0:28:87:e8:10:fc:49:8e:
         95:e4:63:d7:02:c4:22:08:1f:cd:9b:31:89:ad:10:e9:de:59:
         e0:75:01:54:53:e0:c5:40:4e:f8:5a:34:a1:3f:1e:50:b6:ce:
         83:3c:49:d5:e1:15:b2:3f:2d:e6:3e:d1:5c:49:6b:7f:f2:49:
         e9:82:0c:23:40:96:7f:dc:40:94:fe:65:29:9e:52:b9:66:bb:
         c3:51:e1:47:3e:d5:cc:78:a7:85:d5:f2:3a:fa:52:70:4f:46:
         b2:50:6d:c1:0d:b4:e5:8e:67:db:8d:8d:07:2d:f8:c6:59:fb:
         3e:77:16:9a:51:1e:42:fd:ab:da:4c:0b:24:63:f8:80:c7:80:
         4c:67:1f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----