Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B0448D89D4F11F1B4D415BBCE1D38B0.roa
File:                     9B0448D89D4F11F1B4D415BBCE1D38B0.roa (raw, json)
Hash identifier:          wk5lmhaz7An8PduggVRNuuZFi6i4Kta4HKvZlZsih0g=
Subject key identifier:   2D:C1:15:36:26:8B:51:7A:31:26:63:AA:2C:88:0B:8F:8D:CE:77:4A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E190
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B0448D89D4F11F1B4D415BBCE1D38B0.roa
Signing time:             Fri 21 Aug 2026 11:01:06 +0000
ROA not before:           Fri 21 Aug 2026 11:01:02 +0000
ROA not after:            Thu 08 Oct 2026 11:01:02 +0000
asID:                     395793
IP address blocks:        154.200.2.0/23 maxlen: 24
                          154.200.4.0/23 maxlen: 24
                          154.200.6.0/23 maxlen: 24
                          154.200.80.0/21 maxlen: 24
                          154.200.104.0/22 maxlen: 24
                          154.223.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123280 (0x1e190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 21 11:01:02 2026 GMT
            Not After : Oct  8 11:01:02 2026 GMT
        Subject: CN=6a882ff2-127f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1e:a7:6f:d1:e5:d4:6b:eb:c7:24:7b:a3:2c:
                    2d:09:d7:4f:06:55:68:96:21:71:98:47:31:87:91:
                    20:a7:a5:2f:dd:f6:ca:d9:7e:f7:01:c6:cc:1f:30:
                    4e:79:3b:eb:6c:67:0c:fd:d8:dc:1f:e7:2e:35:ca:
                    dd:9c:0f:d2:27:48:27:49:1a:d8:a2:80:a8:44:ad:
                    a1:09:bc:eb:ad:c5:9c:70:75:03:78:06:34:75:bb:
                    e4:cb:de:2c:e2:77:ca:31:b6:4f:43:f8:0f:69:56:
                    ad:36:a9:7c:97:45:94:59:32:09:4f:22:e7:f5:8e:
                    b2:47:75:af:f1:7e:4e:4c:3d:18:91:54:84:52:05:
                    08:55:a8:9c:48:35:d1:fa:4d:c8:7e:b7:01:83:b7:
                    f9:3c:79:b0:a8:19:58:9b:d7:8d:5b:5a:75:a7:cb:
                    ef:79:1b:b4:18:5c:fe:8d:2a:bc:98:dc:e4:47:ae:
                    16:00:2d:bf:1a:4f:24:e4:42:91:dd:23:ba:02:53:
                    42:a7:73:43:d4:4f:8c:61:2a:33:cf:eb:42:00:2d:
                    86:84:0c:bd:94:33:02:43:76:52:aa:ba:38:33:4d:
                    90:b0:ca:fd:0c:1c:14:96:bd:8a:5e:cb:87:37:db:
                    20:7b:cc:0f:61:28:df:76:f2:a6:0b:1c:61:21:83:
                    38:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C1:15:36:26:8B:51:7A:31:26:63:AA:2C:88:0B:8F:8D:CE:77:4A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B0448D89D4F11F1B4D415BBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.2.0-154.200.7.255
                  154.200.80.0/21
                  154.200.104.0/22
                  154.223.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         82:1f:d1:9f:a7:62:48:43:19:e3:dd:b7:fa:d7:24:c8:77:c2:
         51:f7:26:aa:f1:47:4e:f9:20:30:3f:46:c2:20:84:a4:c6:d2:
         39:4c:e5:f0:5e:cc:06:aa:d4:dc:85:61:d9:8b:de:52:6f:6f:
         1f:24:d3:a9:49:28:bb:57:00:db:e9:58:0e:2a:e7:d1:8d:8a:
         a3:16:18:32:c3:82:7b:59:99:6b:10:f5:f0:a8:90:61:43:7c:
         28:b8:60:3a:64:8d:ed:7e:4f:e5:00:ed:ab:a7:7d:3f:b6:f2:
         85:2d:d5:a1:e0:32:b5:9a:3b:bd:77:e3:8e:a9:e8:0a:74:09:
         fb:dc:fb:d2:82:f3:c2:83:59:c5:a9:bb:68:d0:79:14:96:31:
         52:3f:12:48:67:00:77:4d:83:b5:db:80:b8:a8:42:6a:4f:c8:
         5d:59:88:bf:4d:40:0d:d6:d2:6d:04:27:75:24:ec:b8:03:e5:
         92:43:c7:01:75:59:8e:80:35:9e:74:45:91:84:89:d3:df:ba:
         19:83:86:9b:e2:56:a1:da:da:d2:d5:b0:d9:36:1d:3d:03:f1:
         78:11:7f:59:e2:91:93:b6:14:0f:77:99:cc:7e:63:f4:c5:9c:
         cb:1c:78:cd:cb:c2:95:f7:da:e4:38:c3:4d:99:6d:70:3f:da:
         09:cb:71:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----