Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5FDA7AE9D2911F1A67C06D9CE1D38B0.roa
File:                     B5FDA7AE9D2911F1A67C06D9CE1D38B0.roa (raw, json)
Hash identifier:          FhSo88xKH4QIOD9xv92Vc7YlRocV4CNIQ2jADRnYIP4=
Subject key identifier:   4C:E5:0B:CF:99:0A:F3:74:2C:47:5D:D5:24:DD:94:E9:A9:30:AF:03
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E134
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5FDA7AE9D2911F1A67C06D9CE1D38B0.roa
Signing time:             Fri 21 Aug 2026 06:29:50 +0000
ROA not before:           Fri 21 Aug 2026 06:29:46 +0000
ROA not after:            Sat 19 Sep 2026 06:29:46 +0000
asID:                     329611
IP address blocks:        154.211.4.0/22 maxlen: 24
                          154.211.4.0/23 maxlen: 24
                          154.211.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Sep 2026 00:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123188 (0x1e134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 21 06:29:46 2026 GMT
            Not After : Sep 19 06:29:46 2026 GMT
        Subject: CN=6a87f05e-44ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bc:a9:17:94:3b:98:93:84:a1:38:21:30:4e:
                    4c:04:b3:8d:64:3d:6b:37:5f:7b:f8:d4:00:ae:38:
                    8b:14:20:a7:5e:ba:aa:4d:3a:68:3d:64:e6:18:bc:
                    8c:48:c1:7b:75:af:11:a3:9a:1a:4e:4a:b8:13:41:
                    48:ee:22:80:f2:5c:11:25:77:49:f9:be:56:1b:1a:
                    c4:74:1a:a2:88:99:9b:3f:19:a9:85:73:ea:84:20:
                    89:20:21:61:9f:e6:70:9d:83:39:91:09:68:a9:25:
                    8e:18:f9:d1:77:3b:4f:bd:8a:f3:41:30:3d:2f:2d:
                    12:7f:8f:c8:ef:c9:40:8a:7d:29:fc:ad:ea:41:fe:
                    e2:79:df:55:58:1b:44:78:be:ee:bc:89:da:4c:c0:
                    18:50:1d:5e:c9:41:bb:1e:3c:c6:5d:c1:79:bd:86:
                    28:3b:d2:db:ba:50:19:b0:b4:fd:e2:6e:08:84:7d:
                    de:20:11:b5:e3:dc:00:12:d2:c8:63:23:de:27:c0:
                    4b:5b:cd:63:81:ad:7f:ad:2c:c9:31:16:0a:57:15:
                    4d:30:27:a5:1a:1b:5e:57:fa:e6:03:20:1e:e5:ed:
                    3e:51:c7:5f:c4:aa:22:51:ab:2f:7e:b9:c0:a6:67:
                    71:b7:39:06:fe:f3:50:5b:68:f4:74:62:fc:46:50:
                    e5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E5:0B:CF:99:0A:F3:74:2C:47:5D:D5:24:DD:94:E9:A9:30:AF:03
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5FDA7AE9D2911F1A67C06D9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.211.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:34:03:fa:9b:66:48:df:fa:4b:77:3d:a9:44:80:36:3e:77:
         8a:5b:6b:d3:6f:61:f8:bc:96:b8:32:2d:d6:62:e3:e7:a6:bb:
         96:5f:c0:8a:8c:17:41:f2:a4:6e:db:9f:27:8e:89:b5:41:f3:
         8e:12:41:df:d2:ac:ba:5a:2b:f4:54:a6:33:77:88:65:06:02:
         d3:20:88:b2:7b:65:1a:12:bf:14:92:45:26:7f:60:13:3e:4b:
         58:b1:6b:af:5e:3b:91:4d:3a:0e:15:66:ba:1e:22:bc:ff:89:
         7f:24:fb:2b:75:51:0d:70:21:6e:85:bd:ac:50:64:d8:11:78:
         bb:70:d6:30:f9:65:65:c6:68:98:82:42:21:7b:5b:7c:1f:3d:
         14:11:94:55:d8:d3:0a:ea:4e:30:2f:d2:45:e0:17:55:5e:0e:
         d5:f3:a9:b5:22:a0:24:a7:55:3d:58:7e:09:1c:ac:f5:bd:f4:
         6f:05:6d:00:01:9a:85:c6:65:e0:d5:c9:55:16:e9:f0:6d:be:
         78:f0:76:0a:3e:22:38:c2:b5:9c:94:0c:f5:59:41:31:3f:89:
         88:1c:3c:60:3c:06:90:b3:18:64:eb:02:d4:ce:58:15:59:02:
         7d:db:75:31:7b:1f:16:d4:99:4a:47:01:a1:4c:bc:29:ed:32:
         b4:1d:ec:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----