Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3ACF4F0A4FA11F1A04FD7F0CE1D38B0.roa
File:                     A3ACF4F0A4FA11F1A04FD7F0CE1D38B0.roa (raw, json)
Hash identifier:          KpumfDfKq+DS1qigC+l7oNSTICP1dGz2RqCdSDi9kSI=
Subject key identifier:   31:AC:C2:9B:2C:60:6B:6A:57:E0:04:4D:BB:E1:C4:67:83:FE:B9:97
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E43D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3ACF4F0A4FA11F1A04FD7F0CE1D38B0.roa
Signing time:             Mon 31 Aug 2026 05:13:02 +0000
ROA not before:           Mon 31 Aug 2026 05:12:58 +0000
ROA not after:            Mon 14 Sep 2026 05:12:58 +0000
asID:                     136897
IP address blocks:        154.86.156.0/24 maxlen: 24
                          154.86.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 14:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123965 (0x1e43d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 31 05:12:58 2026 GMT
            Not After : Sep 14 05:12:58 2026 GMT
        Subject: CN=6a950d5e-a495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:a6:40:b8:de:18:c0:c3:6f:32:84:fa:2e:b5:
                    ff:2c:c2:f3:1b:17:20:bd:9d:e7:06:0c:89:e8:b4:
                    f2:d1:23:82:8d:1d:7b:d8:2f:1b:26:a9:48:fe:e7:
                    0e:35:46:56:4f:c5:ae:af:df:cb:6c:0c:39:b7:0f:
                    86:b4:ab:91:24:d6:89:b1:ce:c8:b1:87:1c:0d:5f:
                    02:be:94:1a:ee:a0:06:03:d5:e7:62:47:95:d3:10:
                    79:50:a9:69:35:7d:29:96:d3:3e:1a:31:4c:78:74:
                    d4:81:6a:e1:2d:55:0c:d8:f8:a1:72:1c:c8:2d:04:
                    37:d9:f4:05:68:01:4a:84:93:cd:47:e4:4f:12:06:
                    7e:1b:be:c8:c6:fd:22:23:46:85:dd:ce:b6:bf:c2:
                    e2:9d:9f:82:c6:48:5a:c6:05:2f:ec:c9:67:1f:0e:
                    c5:2b:8e:65:74:ae:5f:ad:fa:2b:db:00:65:36:44:
                    88:70:d9:c3:9c:44:82:be:55:6c:78:52:03:27:06:
                    aa:0b:bb:7d:59:b4:7c:7a:8e:bb:ba:38:16:d0:5d:
                    02:53:c6:72:d8:85:b8:ca:45:21:6c:ba:4e:ab:ad:
                    e2:07:3e:59:48:98:d0:7a:24:6a:d6:8d:db:1d:e9:
                    2c:9e:ce:6f:fb:9a:85:e2:f6:d2:ed:98:f9:79:6c:
                    7f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:AC:C2:9B:2C:60:6B:6A:57:E0:04:4D:BB:E1:C4:67:83:FE:B9:97
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3ACF4F0A4FA11F1A04FD7F0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:00:e6:65:dd:22:d9:a7:9d:46:d1:f3:40:2b:4b:7f:7d:7e:
         2f:f1:dd:6e:7c:59:27:cd:2d:54:32:75:46:ff:c4:b4:e1:6d:
         46:ac:b3:ab:82:1d:b8:47:d6:d3:b5:d4:a6:10:d6:13:48:77:
         3e:69:7f:39:19:4a:04:d1:d8:69:50:8d:e0:ba:e3:22:13:da:
         37:d2:69:62:6d:0d:90:ef:7d:86:c5:c6:21:29:cf:c6:44:41:
         e7:e7:c6:c2:e5:d0:8d:f1:bc:56:30:fe:11:a0:1c:c3:d7:ac:
         66:7c:d1:62:37:a9:54:07:e0:5c:52:b0:85:a7:09:c3:2d:8f:
         2e:7f:6a:50:e3:63:7f:0f:03:c7:ac:22:e7:ef:85:c0:9e:64:
         13:5e:e6:34:3f:2a:9c:66:dc:0a:6e:08:e1:58:ce:37:33:04:
         1f:a5:01:67:f1:8c:b7:b0:fd:7f:3f:0d:5d:da:7f:e3:c9:36:
         48:00:17:40:a5:d5:b6:5b:eb:da:0a:7d:f7:7c:d7:f6:bb:65:
         9b:cb:54:76:69:51:da:14:41:1a:91:3e:bc:52:17:1c:9e:3d:
         de:ae:67:83:a4:ce:18:01:ce:e0:bb:20:1d:d3:33:74:3f:79:
         39:82:50:28:55:08:4b:da:b1:e2:de:d4:fc:b7:a8:19:de:22:
         75:45:3c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----