Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2CE9BA496F511F1ABC4D0B8CE1D38B0.roa
File:                     B2CE9BA496F511F1ABC4D0B8CE1D38B0.roa (raw, json)
Hash identifier:          ufQ9cvmMb4bb+iKcLjpI6KG5aonhVrONiGT6eHiHz4g=
Subject key identifier:   85:2B:BE:65:C6:AB:9D:FF:E1:00:29:5C:64:B1:44:CC:9C:96:FB:1A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DEE5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2CE9BA496F511F1ABC4D0B8CE1D38B0.roa
Signing time:             Thu 13 Aug 2026 09:02:24 +0000
ROA not before:           Thu 13 Aug 2026 09:02:20 +0000
ROA not after:            Mon 21 Sep 2026 09:02:20 +0000
asID:                     2914
IP address blocks:        154.197.12.0/22 maxlen: 24
                          154.216.132.0/24 maxlen: 24
                          154.216.133.0/24 maxlen: 24
                          154.216.134.0/24 maxlen: 24
                          154.216.135.0/24 maxlen: 24
                          154.216.136.0/24 maxlen: 24
                          154.216.137.0/24 maxlen: 24
                          154.222.74.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 23 Aug 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122597 (0x1dee5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 13 09:02:20 2026 GMT
            Not After : Sep 21 09:02:20 2026 GMT
        Subject: CN=6a7d8820-fe78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8a:20:12:35:b2:50:bf:67:79:f8:8a:e1:20:
                    d1:37:21:b8:4e:1d:db:72:77:ad:0b:3f:14:28:17:
                    5f:c2:f8:68:f1:ee:38:d2:14:29:3d:f9:cc:07:3b:
                    a9:38:ce:ca:05:7e:a7:f6:0e:fa:38:6f:ab:71:a3:
                    f1:8b:6d:24:d2:81:3a:00:e4:d1:e0:ba:2b:85:05:
                    71:65:8a:50:3d:c9:bc:84:2c:40:94:15:f8:8b:ba:
                    90:43:33:3d:fa:62:29:f5:ef:56:78:a8:97:b8:b5:
                    0f:d3:e4:11:97:33:75:dc:fd:22:f1:b0:8d:66:5c:
                    08:71:5b:2e:07:fc:3a:ea:0d:6b:50:c6:e2:69:43:
                    99:3d:80:2d:43:6f:00:10:c3:9b:50:be:82:b9:2e:
                    d3:4e:84:1a:5e:86:56:b5:23:f1:67:06:3e:92:ce:
                    78:8d:7b:32:3d:e9:3c:e0:4e:1e:91:c2:4f:f0:49:
                    38:0e:a1:85:78:c6:95:7e:1a:79:ca:ce:7c:32:17:
                    cf:d9:3f:f6:a1:5c:95:aa:e9:86:02:ff:60:bb:d3:
                    9a:28:42:05:ab:b0:4e:95:26:ba:96:01:47:92:62:
                    1a:c3:79:cd:8c:21:fd:13:35:d4:83:50:55:55:0d:
                    18:36:54:19:22:f6:e5:85:93:43:46:17:a2:8a:48:
                    e1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2B:BE:65:C6:AB:9D:FF:E1:00:29:5C:64:B1:44:CC:9C:96:FB:1A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2CE9BA496F511F1ABC4D0B8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.12.0/22
                  154.216.132.0-154.216.137.255
                  154.222.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:94:c9:48:2c:af:81:63:b1:5f:5d:2f:ea:8c:ff:59:59:15:
         eb:46:e3:3e:91:fc:12:3a:6e:81:6e:34:b4:a2:28:a9:af:4a:
         52:7e:bd:75:8e:17:22:68:c3:5c:9f:df:06:79:e0:ae:c4:07:
         7f:cf:25:ad:1d:09:88:53:a3:dd:08:35:69:67:2f:ab:ea:51:
         ad:5e:ef:3f:7b:40:5b:38:71:99:3d:c5:22:67:ad:89:1d:d3:
         68:d3:31:ed:b5:ac:32:71:0c:8e:14:53:9f:d1:3b:38:b3:e1:
         27:9f:cd:fd:21:2a:41:24:53:ce:15:db:ac:2a:f3:9e:41:d4:
         f9:35:23:4b:ba:96:92:61:a1:60:ef:ad:20:b9:18:7a:f1:64:
         be:92:a4:43:2b:44:01:90:9c:3b:f3:e8:42:58:4d:be:16:a6:
         45:07:b5:4e:34:67:89:17:45:c5:5e:dc:95:4f:cd:f0:73:35:
         97:38:8c:a6:8e:74:63:5f:5c:43:d1:34:8c:ae:33:83:a9:dc:
         3e:98:37:76:dd:77:05:db:1e:d3:17:c7:be:4b:c9:2a:39:04:
         40:4a:88:33:9c:9c:3c:e2:fc:1c:1d:cc:62:35:b2:34:1e:95:
         5e:65:b7:58:88:5e:f1:50:56:bf:2d:e3:ec:b7:b9:a6:8a:f3:
         46:73:36:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----