Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F97ADA4A30411F1BC2F3907CF1D38B0.roa
File:                     8F97ADA4A30411F1BC2F3907CF1D38B0.roa (raw, json)
Hash identifier:          dthOWnkFMNs4uf6da0emwkAqQZHBcrDU4p7DmtegJFw=
Subject key identifier:   83:BC:6B:24:F6:14:86:E0:24:33:5E:ED:0A:C6:98:43:16:75:F8:3D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E3E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F97ADA4A30411F1BC2F3907CF1D38B0.roa
Signing time:             Fri 28 Aug 2026 17:19:01 +0000
ROA not before:           Fri 28 Aug 2026 17:18:57 +0000
ROA not after:            Fri 02 Oct 2026 17:18:57 +0000
asID:                     984
IP address blocks:        154.82.132.0/24 maxlen: 24
                          154.82.135.0/24 maxlen: 24
                          154.90.133.0/24 maxlen: 24
                          154.95.2.0/24 maxlen: 24
                          154.95.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123876 (0x1e3e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 28 17:18:57 2026 GMT
            Not After : Oct  2 17:18:57 2026 GMT
        Subject: CN=6a91c305-4fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:89:f9:b0:c8:f9:2b:4e:89:74:a9:b5:de:45:
                    f7:8b:80:33:79:49:a4:19:17:37:81:63:46:b2:a5:
                    eb:c6:88:bd:56:9e:3f:c1:56:73:1d:ef:99:d8:1a:
                    26:90:68:7a:46:79:7b:6f:7e:30:c1:21:a5:0b:5d:
                    cd:4d:2e:58:be:19:fb:c9:30:13:c0:e8:b1:c9:0c:
                    84:b3:ee:02:43:3e:c4:1e:a9:af:3e:b3:82:10:85:
                    0d:62:82:98:0c:23:ab:1d:16:0b:46:a9:ca:47:1d:
                    a4:1a:e9:2f:e9:77:3b:f8:f4:17:07:56:00:fb:d2:
                    b8:3b:cb:23:2d:1f:9c:91:7a:a7:25:31:c8:a9:cf:
                    0d:d6:67:b0:48:e9:27:7f:00:e5:f0:7e:2e:9c:ba:
                    da:66:48:12:ea:3f:5e:be:b4:c4:a7:40:df:bd:91:
                    1e:f5:41:0f:86:27:01:bd:7c:b6:3d:97:1b:fe:37:
                    e8:1d:f4:fe:dd:a8:f3:7c:c0:15:ce:f2:5e:97:14:
                    7b:5d:9e:d8:31:09:7e:20:29:da:49:4e:40:f5:15:
                    38:79:1c:c7:6b:68:4f:bd:5a:ba:e4:01:98:6e:51:
                    45:2b:21:17:a9:ec:f5:7e:08:ab:12:22:c9:11:eb:
                    13:60:26:2b:43:57:ff:61:d8:5f:ae:66:8c:b4:59:
                    43:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BC:6B:24:F6:14:86:E0:24:33:5E:ED:0A:C6:98:43:16:75:F8:3D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F97ADA4A30411F1BC2F3907CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.132.0/24
                  154.82.135.0/24
                  154.90.133.0/24
                  154.95.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:df:2b:df:e5:68:0c:e3:79:fb:85:62:70:7e:60:0e:35:62:
         63:4d:2c:88:1e:fa:90:92:f8:b8:92:62:8d:5d:3c:1b:dd:fb:
         ac:32:e0:f8:1b:53:05:2a:f6:7c:11:26:a6:86:3c:21:61:f9:
         41:1d:a1:54:66:4c:67:14:24:70:54:89:f2:fc:19:2d:8b:2a:
         bc:b0:16:71:9c:2e:b1:9a:d2:fc:0e:9a:a8:b1:c1:46:5f:80:
         a6:23:94:5c:53:47:e0:7e:20:ed:fc:6a:e7:de:d2:4f:af:cc:
         bb:f4:3b:51:c5:bf:fe:ad:4e:56:4e:03:f6:e3:79:35:03:9c:
         83:2a:e4:6f:1f:4c:9a:f9:89:d4:ac:11:f7:86:11:b4:5d:4e:
         b2:26:68:7c:06:bf:d3:f2:bb:96:97:e0:62:d4:a1:cc:56:2a:
         c2:ba:24:8a:82:95:c7:8a:59:24:b4:2a:02:65:88:45:0e:0d:
         66:12:b2:2b:e7:4c:c1:7a:de:59:f9:4f:a5:b7:91:80:fe:ad:
         57:40:73:b7:63:ed:7e:f2:21:9b:da:4c:50:a3:ce:b9:53:8d:
         de:35:ad:42:b5:f0:ae:f1:81:f5:9e:c8:ba:02:ac:17:ad:4e:
         79:eb:9d:79:96:14:4e:eb:5d:36:44:d9:4e:64:00:00:64:cd:
         f8:03:6c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----