Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90292A3C9C6911F1BBB986C7CE1D38B0.roa
File:                     90292A3C9C6911F1BBB986C7CE1D38B0.roa (raw, json)
Hash identifier:          OYfFMCrBi+KNedP7kh6FV4cdRwBwhATi5ChM91QJ6sc=
Subject key identifier:   49:D8:23:70:7D:4C:50:2B:D0:74:1E:CB:AD:6D:BB:E8:97:4B:7A:65
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E037
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90292A3C9C6911F1BBB986C7CE1D38B0.roa
Signing time:             Thu 20 Aug 2026 07:34:23 +0000
ROA not before:           Thu 20 Aug 2026 07:34:19 +0000
ROA not after:            Thu 24 Sep 2026 07:34:19 +0000
asID:                     402169
IP address blocks:        154.202.117.0/24 maxlen: 24
                          154.202.120.0/21 maxlen: 24
                          154.217.234.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122935 (0x1e037)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 07:34:19 2026 GMT
            Not After : Sep 24 07:34:19 2026 GMT
        Subject: CN=6a86adff-e88e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e9:d2:4e:cf:0e:d2:8b:12:02:d6:6c:ff:44:
                    1b:8f:87:19:0e:a7:34:b6:ac:16:0d:99:84:a6:94:
                    cb:31:75:60:55:bb:c1:13:0b:dc:78:c6:13:47:d9:
                    fd:cc:5b:75:62:4c:79:55:b6:70:15:2e:29:ea:df:
                    41:ff:cd:82:c5:17:05:b2:68:39:3f:2c:d9:ca:f7:
                    8f:e9:4f:a0:69:d3:f0:6f:87:90:62:f8:dd:76:13:
                    15:71:e1:8a:55:6a:57:d8:13:bc:4c:da:e7:f8:f0:
                    d9:cf:c4:57:5f:6b:4f:9c:e9:16:29:89:e2:2a:d4:
                    24:35:32:24:4a:9a:e1:ae:5c:52:da:23:a7:0e:c2:
                    ae:3d:0f:e6:04:bf:0d:be:38:3e:a0:20:d6:fc:e1:
                    c8:f6:ba:d9:d1:c5:be:ef:f2:4a:7e:a4:20:0c:fd:
                    ff:72:2a:c7:aa:2b:02:54:1e:b2:63:65:1f:4d:f4:
                    0a:05:42:aa:33:03:86:16:61:e2:c2:e9:f9:6c:f2:
                    ee:d1:5b:48:24:b5:89:c1:30:d1:d4:6f:ac:c3:cf:
                    98:48:a5:c3:f3:5d:35:0e:7b:16:8b:3c:af:ee:96:
                    3d:c2:61:03:bd:57:67:b5:38:03:82:7c:4c:18:19:
                    69:39:02:79:a1:c7:f0:c1:54:c2:17:39:72:38:4f:
                    18:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D8:23:70:7D:4C:50:2B:D0:74:1E:CB:AD:6D:BB:E8:97:4B:7A:65
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90292A3C9C6911F1BBB986C7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.117.0/24
                  154.202.120.0/21
                  154.217.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:d5:96:16:5b:79:58:f0:b4:48:a9:f9:95:93:17:62:4f:02:
         d0:ee:da:d1:d8:f5:4a:ea:17:24:da:48:a4:e8:ed:c4:1e:a7:
         0b:eb:9c:72:73:4d:14:43:fe:dd:80:81:25:c7:9c:72:d4:bf:
         8b:9d:18:fe:b3:d3:fc:73:42:43:68:8f:49:da:b1:13:14:40:
         fe:e2:e3:3e:ec:de:9c:1c:e3:93:ee:ea:1e:32:10:97:1a:7f:
         65:f1:90:38:c1:a8:84:0a:27:67:d3:d5:16:15:63:68:50:3b:
         77:b5:b1:02:af:d2:16:f1:45:80:d0:a4:50:da:f9:82:e1:34:
         33:6c:97:da:05:14:cd:96:ff:1c:b7:a2:12:a5:da:b2:d7:a0:
         ad:b9:45:40:f6:d1:4a:73:29:46:59:51:4e:a5:41:99:d7:cd:
         b4:41:c3:dc:3b:dd:38:30:46:7e:82:22:4f:b0:0a:5a:f0:af:
         34:c6:f7:dc:39:5d:b5:da:b1:2b:b6:2f:32:54:39:d9:9e:e7:
         d3:d0:a2:fd:a9:17:6c:6e:3b:6e:cb:c5:53:e8:02:ff:a4:3b:
         d1:61:b9:aa:9f:88:de:4f:88:0b:16:b8:d1:47:1e:3b:06:8a:
         47:c2:4e:b8:e7:21:95:ea:a7:6f:4a:d8:a4:6d:13:05:b7:31:
         22:4b:55:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----