Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A28E5FD8970C11F18C24BCC3CE1D38B0.roa
File:                     A28E5FD8970C11F18C24BCC3CE1D38B0.roa (raw, json)
Hash identifier:          XDT97ZuVG80GqwFCBeTGdXKRYBMNVihraQKGxPkuAqg=
Subject key identifier:   02:AF:4B:E7:C4:C1:04:99:26:4F:78:4A:5E:4E:FA:48:BA:F8:A5:5E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DEFF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A28E5FD8970C11F18C24BCC3CE1D38B0.roa
Signing time:             Thu 13 Aug 2026 11:46:35 +0000
ROA not before:           Thu 13 Aug 2026 11:46:30 +0000
ROA not after:            Thu 24 Sep 2026 11:46:30 +0000
asID:                     395793
IP address blocks:        154.92.205.0/24 maxlen: 24
                          154.92.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122623 (0x1deff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 13 11:46:30 2026 GMT
            Not After : Sep 24 11:46:30 2026 GMT
        Subject: CN=6a7dae9b-14e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:46:94:8a:e7:2d:15:69:52:38:b5:98:5e:9e:
                    45:c3:48:9d:11:27:38:6a:62:ba:59:2a:20:d3:21:
                    4f:16:13:24:a7:2e:d5:0e:43:8b:6e:09:18:e6:b8:
                    60:9a:93:3c:b6:c8:58:9a:86:2f:4a:9b:98:a8:9a:
                    54:e6:d2:92:03:f3:d7:75:b0:e6:73:2f:20:e7:75:
                    6b:80:01:99:48:22:f4:4a:d7:72:ff:4f:54:83:51:
                    0b:7c:f7:f3:b5:9b:68:a5:35:6c:0c:d9:13:82:d6:
                    1b:05:db:d8:6c:9e:5d:da:b8:0f:4e:86:18:f0:d7:
                    86:c5:33:5a:b6:81:f1:82:f0:01:67:8f:15:f2:ca:
                    76:c0:21:2a:68:da:d1:ed:9f:a1:09:94:64:6d:c7:
                    b9:50:e0:a3:f6:27:b5:47:c2:b0:94:e5:60:e1:60:
                    bd:bb:8a:ff:79:43:45:bc:34:54:c9:08:3f:91:f2:
                    9c:31:0e:a2:23:a3:5b:7a:b5:94:3f:0a:67:a0:3e:
                    6a:67:bb:a7:19:5d:70:b4:7b:1a:2b:94:2a:ac:71:
                    81:2e:19:63:03:bb:0f:b6:dc:a1:4e:f8:ab:e6:4b:
                    4b:9a:a6:e2:c9:7e:44:c3:3f:26:5d:24:9c:93:da:
                    5a:99:29:a6:9a:6a:6d:85:e8:7d:4c:fd:b7:dc:61:
                    52:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AF:4B:E7:C4:C1:04:99:26:4F:78:4A:5E:4E:FA:48:BA:F8:A5:5E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A28E5FD8970C11F18C24BCC3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.205.0/24
                  154.92.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:27:d6:9a:8d:cd:7f:36:4b:a2:33:de:fe:8c:2b:d8:f4:4c:
         84:1c:19:a3:ee:90:d0:76:a8:70:0f:ae:6f:3d:f0:84:58:82:
         ea:54:f5:47:e4:fe:3a:d8:9d:e4:bc:6d:5d:3c:dd:80:d1:00:
         4e:66:e5:a7:01:5c:37:03:ea:56:aa:1d:ab:83:50:98:89:88:
         27:44:87:ba:e8:57:21:35:ee:eb:e7:97:d0:ae:ec:11:f9:77:
         f7:ba:17:9c:c6:2f:70:61:24:2f:9d:15:4d:f4:03:b6:ed:ff:
         ee:f6:ff:d3:4e:52:c0:98:ae:ee:88:27:e2:b0:2c:2a:f0:19:
         2c:a7:06:a6:d4:4b:9a:f2:bb:9c:39:39:37:18:e7:b0:85:c6:
         52:ce:ec:0f:df:d9:6a:61:8b:ae:67:15:d9:ce:9f:ab:c7:b4:
         bd:54:73:47:02:e3:7a:7b:0a:a7:3d:62:b1:97:c5:68:83:6c:
         d5:cc:56:86:2a:20:a5:ff:fc:31:60:a4:36:88:39:f2:c4:82:
         a8:48:50:f4:9a:1e:e9:26:6a:51:d8:a2:e1:73:2e:d0:e5:81:
         b7:3c:50:35:df:f0:47:b0:e5:38:42:31:64:3b:22:4e:39:89:
         f5:a5:8f:f5:76:ef:5a:9b:70:6a:94:55:8f:7e:ec:ba:be:62:
         e3:3a:35:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----