Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92481CE4955511F1B5FF89D8CE1D38B0.roa
File:                     92481CE4955511F1B5FF89D8CE1D38B0.roa (raw, json)
Hash identifier:          dFjmYNbm3ulNm0tHZ7VSMIt6HiZE+rlQS9fh70jSgwc=
Subject key identifier:   18:AC:7E:FD:B8:91:9F:43:6A:D5:08:6E:C6:2D:6F:45:50:F7:D3:1B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DE11
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92481CE4955511F1B5FF89D8CE1D38B0.roa
Signing time:             Tue 11 Aug 2026 07:23:39 +0000
ROA not before:           Tue 11 Aug 2026 07:23:35 +0000
ROA not after:            Fri 18 Sep 2026 07:23:35 +0000
asID:                     62563
IP address blocks:        154.94.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 10:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122385 (0x1de11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 11 07:23:35 2026 GMT
            Not After : Sep 18 07:23:35 2026 GMT
        Subject: CN=6a7acdfb-f260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:72:91:08:bf:e9:e5:6e:91:2b:41:c5:4f:31:
                    81:4a:5d:84:11:da:4b:1c:15:1d:fa:a7:33:f1:94:
                    54:8e:e8:a4:d0:b2:d3:4b:88:ab:e4:a9:43:5b:41:
                    a3:0c:18:72:7a:ba:60:d4:82:50:1d:2e:38:8b:b4:
                    c1:bd:82:f9:03:7f:46:17:c2:f0:0d:eb:a7:bb:2d:
                    e9:c9:e2:46:ad:93:10:48:89:e7:5e:d7:78:69:8c:
                    26:99:86:55:0f:63:92:4b:29:60:00:45:01:83:aa:
                    fc:80:37:88:9d:29:c3:6d:0b:9e:46:e0:d5:e0:08:
                    78:8d:b0:ae:c8:6b:78:4c:4c:e3:54:a0:ad:b7:c1:
                    4e:94:0f:57:9c:ea:6b:01:20:f6:c6:95:89:2b:bf:
                    f7:02:c4:a4:f7:43:5e:6b:c2:45:a2:f8:eb:eb:f6:
                    b2:63:6e:8a:51:79:32:c3:60:45:37:1d:0f:d3:b5:
                    24:07:7e:b9:94:8b:c9:9d:95:6c:33:ba:0c:4f:37:
                    67:ac:44:ed:cf:68:ce:ed:90:b0:72:f8:6d:58:74:
                    7e:9d:89:5c:bd:62:d3:67:02:b0:8b:a4:65:d1:8a:
                    ef:cd:de:fc:ca:d3:25:1c:b9:33:dd:72:f1:7f:8f:
                    db:51:d1:ee:b3:4e:5e:b7:cd:08:89:f7:5b:13:b4:
                    48:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AC:7E:FD:B8:91:9F:43:6A:D5:08:6E:C6:2D:6F:45:50:F7:D3:1B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92481CE4955511F1B5FF89D8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:b3:b0:1a:0b:b2:fc:a4:ee:d9:83:1c:d0:22:99:01:f9:16:
         fc:24:51:21:d6:27:87:be:12:42:16:2d:43:a8:0e:5e:e6:2f:
         79:ae:73:78:d5:6b:58:af:9c:db:9a:9d:fb:8f:10:d4:26:32:
         60:9f:1e:6d:53:33:8e:8b:fd:57:ee:b2:06:cc:74:cb:1c:2c:
         6a:b8:1c:3f:01:29:87:d6:72:11:4e:c2:b1:51:ca:67:69:45:
         ac:29:de:ea:e6:c9:10:9a:cd:bd:d0:5d:5d:13:bd:cd:d3:1b:
         4a:e5:77:9f:83:58:fa:b6:7d:83:1d:f0:96:66:c6:f3:d7:b4:
         93:1a:5d:17:42:e5:74:c4:aa:18:0c:93:69:81:df:8d:b8:e0:
         db:f2:f0:58:01:d9:12:bc:f0:86:52:b2:67:98:2f:14:f9:41:
         27:e9:97:82:c1:b7:d3:14:de:8b:54:5f:8b:85:d2:aa:e1:36:
         59:f7:bd:e9:2c:5e:19:c7:bf:26:02:6d:c7:54:4a:5e:54:85:
         df:95:54:c7:49:f7:64:a5:fc:6a:ab:0a:a1:f2:74:a3:bd:f3:
         4c:c4:d7:9c:72:59:bc:9b:ee:ae:b1:24:d8:e6:6a:f1:20:06:
         7d:c6:9b:17:c7:4e:a7:ea:b4:e6:26:13:48:70:5b:e5:a9:79:
         b3:fc:71:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----