Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2BAEB129C6E11F1BFA961E5CE1D38B0.roa
File:                     B2BAEB129C6E11F1BFA961E5CE1D38B0.roa (raw, json)
Hash identifier:          aH2WtE+OpFDT9u55ziDMd/bEm0pLtdVU6Wa8/RWMG4c=
Subject key identifier:   C4:60:4C:1C:9D:FC:EB:7F:2A:B9:0E:1B:65:0A:77:49:2F:9E:24:77
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E049
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2BAEB129C6E11F1BFA961E5CE1D38B0.roa
Signing time:             Thu 20 Aug 2026 08:11:09 +0000
ROA not before:           Thu 20 Aug 2026 08:11:05 +0000
ROA not after:            Thu 24 Sep 2026 08:11:05 +0000
asID:                     54600
IP address blocks:        154.202.117.0/24 maxlen: 24
                          154.202.120.0/21 maxlen: 24
                          154.217.234.0/23 maxlen: 24
                          154.217.236.0/22 maxlen: 24
                          154.217.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 10:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122953 (0x1e049)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 08:11:05 2026 GMT
            Not After : Sep 24 08:11:05 2026 GMT
        Subject: CN=6a86b69d-1472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b7:c7:1c:d7:01:c3:ef:b5:d0:ff:2a:55:3f:
                    91:4b:c2:7d:c6:c5:db:5a:f9:7c:c6:13:c1:31:73:
                    ae:98:30:62:a6:9b:09:1e:94:32:77:97:f6:70:af:
                    9c:a8:76:20:ce:f0:a8:e5:37:fe:c1:4e:5b:1b:1c:
                    a0:d2:a5:6b:fe:0d:8a:09:8f:2f:e4:9e:57:a3:db:
                    85:cd:4d:19:eb:7a:c1:fe:7c:f0:8c:d1:2c:43:aa:
                    77:3a:d9:17:1a:4e:64:47:76:eb:3a:0f:73:17:53:
                    05:ca:c1:1c:49:1a:aa:5f:3c:d3:03:50:0c:c6:16:
                    75:a3:76:92:f9:6e:5b:ee:a2:b1:f6:cd:94:48:dd:
                    fd:ea:97:dd:52:92:d1:0c:b8:32:e7:98:25:7b:4e:
                    31:b1:76:f7:08:82:7b:d1:28:76:9a:1e:d3:c9:4e:
                    45:43:eb:e3:3a:ec:8c:bd:6d:2c:4f:bb:b4:be:3f:
                    48:8c:40:8f:6d:29:a3:e3:6c:2d:e7:16:c4:96:84:
                    ab:35:95:66:01:f4:95:c1:72:9a:44:ff:5b:c4:15:
                    1e:3e:3c:98:cf:88:b6:48:ee:60:c6:c8:54:2a:71:
                    47:ff:d3:9c:01:1d:a3:a3:47:08:75:d8:4d:43:51:
                    a8:2b:52:c7:d2:f7:16:cc:0a:ce:78:b5:b0:9f:9c:
                    1c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:60:4C:1C:9D:FC:EB:7F:2A:B9:0E:1B:65:0A:77:49:2F:9E:24:77
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2BAEB129C6E11F1BFA961E5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.117.0/24
                  154.202.120.0/21
                  154.217.234.0-154.217.255.255

    Signature Algorithm: sha256WithRSAEncryption
         10:96:91:32:7b:9e:5f:8e:82:91:18:e1:c9:69:14:95:5d:dd:
         c0:43:d5:64:78:31:94:f0:6e:62:00:a1:45:f9:07:06:ac:cd:
         24:10:38:a7:9d:8f:15:c8:50:64:74:ec:92:24:52:5b:e0:f8:
         d9:4a:ef:cd:49:ec:e4:eb:1c:83:3b:59:0a:af:60:3b:5d:92:
         02:7d:6b:86:06:a8:c8:82:3a:b0:55:21:5d:4c:f5:13:d8:c7:
         a8:ce:25:2c:67:b6:8d:f9:42:bf:89:62:9f:89:c7:56:4f:ce:
         43:8f:6c:d3:e0:12:c5:61:76:2a:9a:26:58:df:fd:85:87:ca:
         aa:3f:40:26:0c:9e:35:2a:8b:fb:c9:54:b0:ab:97:a8:44:96:
         f3:bd:a8:43:06:ad:ac:67:1b:a0:0e:fd:47:1b:8f:77:c8:5b:
         5a:12:d8:d3:71:2f:21:5c:99:68:1b:4c:cc:a4:17:26:66:07:
         c8:4c:77:e0:70:fc:4c:8a:66:a7:ed:6c:c5:34:8b:78:ed:4f:
         97:c3:21:a0:e9:8d:d9:8a:ad:59:f7:d8:c8:e7:45:1d:3e:7d:
         29:bc:9e:3e:8b:0f:c0:19:0c:21:be:bf:80:e2:57:07:db:c0:
         89:21:5e:99:77:c3:3c:8e:7b:14:99:8e:49:f5:96:4e:54:10:
         b1:28:e2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----