Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5511A5C9BA411F1B997931DCF1D38B0.roa
File:                     A5511A5C9BA411F1B997931DCF1D38B0.roa (raw, json)
Hash identifier:          A8LIqDuEZZboI4r4b1DJpZMZdcTpMAqDQB1QO4MtrbU=
Subject key identifier:   DB:EF:5A:B4:28:33:8A:03:C4:A8:37:AA:F4:B0:6E:8B:5B:8B:BE:2C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DFE9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5511A5C9BA411F1B997931DCF1D38B0.roa
Signing time:             Wed 19 Aug 2026 08:04:48 +0000
ROA not before:           Wed 19 Aug 2026 08:04:44 +0000
ROA not after:            Thu 19 Nov 2026 08:04:44 +0000
asID:                     204721
IP address blocks:        154.215.2.0/23 maxlen: 24
                          154.215.2.0/24 maxlen: 24
                          154.215.3.0/24 maxlen: 24
                          154.221.2.0/23 maxlen: 24
                          154.221.2.0/24 maxlen: 24
                          154.221.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Sep 2026 15:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122857 (0x1dfe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 19 08:04:44 2026 GMT
            Not After : Nov 19 08:04:44 2026 GMT
        Subject: CN=6a8563a0-936c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:88:8e:8d:44:07:37:69:ef:f6:b9:6e:f5:20:
                    5c:68:2a:bd:ab:99:45:64:f9:34:44:fb:1e:e2:f3:
                    84:8d:e6:fa:7a:1f:b3:31:8b:3f:c5:84:c6:7a:62:
                    05:fd:b8:3d:04:36:11:14:b2:80:c9:5b:38:95:d5:
                    af:d5:47:9b:3c:56:78:40:54:ff:82:86:c6:ee:c6:
                    ee:8d:41:a6:e9:c0:c6:88:44:37:fe:82:5a:0f:d2:
                    a3:06:8b:81:c1:90:a6:c5:cd:53:b5:ce:2f:fa:45:
                    f4:7d:8e:79:0c:c6:1f:94:3e:2b:58:60:ef:81:17:
                    6f:30:63:52:51:76:db:c3:a3:0a:62:9d:64:10:d9:
                    1e:03:c1:58:14:bf:be:eb:3b:a6:31:b5:ef:ab:10:
                    33:a8:85:27:50:ad:06:e1:c8:9f:05:6a:1f:e7:4b:
                    13:e6:f9:22:af:d2:ad:fc:69:bb:59:96:26:8f:05:
                    8a:43:28:0c:57:ea:21:f8:85:c9:d5:78:90:e1:dc:
                    cd:08:ad:da:64:6a:c0:9c:72:47:71:e7:e9:cb:88:
                    fe:d7:26:56:0d:66:e4:12:66:10:2b:34:3c:87:84:
                    03:5b:3e:7d:e3:2e:43:e5:a6:12:40:bd:32:d7:1f:
                    ad:80:6b:41:95:b0:9f:ae:2a:46:7f:c8:a2:55:3c:
                    27:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:EF:5A:B4:28:33:8A:03:C4:A8:37:AA:F4:B0:6E:8B:5B:8B:BE:2C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5511A5C9BA411F1B997931DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.215.2.0/23
                  154.221.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:76:54:7e:bb:44:e3:e2:44:ee:21:6f:a4:ae:97:69:cb:30:
         ac:67:99:e7:0e:e9:2b:c9:e7:e0:61:ab:fb:3b:ee:f4:b5:38:
         a8:f6:3f:41:0c:92:0a:69:d0:5f:a0:61:fe:93:d6:0d:46:de:
         65:dc:20:cd:e2:6d:62:e8:99:91:04:94:e5:e8:23:31:44:67:
         2d:3d:e7:28:aa:95:33:6d:49:6b:5c:e6:20:1c:c3:d4:1d:ec:
         9d:f8:57:95:2c:dc:65:ee:66:12:68:a5:07:66:8b:a2:05:9a:
         82:50:5d:9f:9f:8d:3d:3a:cf:6c:7d:6b:29:d9:bf:1c:9d:fb:
         ca:5b:6e:94:01:05:ae:e4:d8:42:0a:61:da:90:48:80:fe:b5:
         47:54:b3:1e:97:53:89:bc:50:8b:5e:8a:99:2b:27:61:c3:e2:
         6b:9d:d9:ae:ff:b3:e8:b9:16:d6:35:98:38:26:fc:ac:59:d4:
         c7:df:4b:c9:f7:00:35:4d:3e:c5:4d:17:f4:77:fb:e4:56:2a:
         b7:23:fe:1a:1d:6f:a7:4a:4c:30:c8:97:3f:8c:f2:03:5c:7b:
         7a:43:f1:6b:72:96:5f:25:06:40:a2:b0:d6:4e:df:a0:6e:62:
         d5:dd:a3:e2:98:25:14:87:25:1e:e2:79:00:d5:df:af:72:01:
         b7:7c:67:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----