Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA5680D8A43A11F19F1CB0EACE1D38B0.roa
File:                     BA5680D8A43A11F19F1CB0EACE1D38B0.roa (raw, json)
Hash identifier:          dYzgxE4oNNpPb2tHBmA11F+xWLpxz0cbxjj2R03nNuY=
Subject key identifier:   82:A8:3C:C9:B8:A8:F8:2F:E2:87:34:F4:A8:76:54:76:05:76:0A:2F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E404
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA5680D8A43A11F19F1CB0EACE1D38B0.roa
Signing time:             Sun 30 Aug 2026 06:19:17 +0000
ROA not before:           Sun 30 Aug 2026 06:19:13 +0000
ROA not after:            Fri 06 Nov 2026 06:19:13 +0000
asID:                     9294
IP address blocks:        154.88.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 10:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123908 (0x1e404)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 30 06:19:13 2026 GMT
            Not After : Nov  6 06:19:13 2026 GMT
        Subject: CN=6a93cb65-bf14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a4:fa:43:63:bd:f9:62:80:53:56:cf:ca:a6:
                    b0:32:73:52:77:50:34:72:d4:a1:58:a4:e0:4d:cf:
                    e4:d9:99:49:52:36:09:21:f3:eb:d2:c4:b2:5b:8d:
                    43:b4:7b:29:2c:59:a6:90:37:bc:2c:99:c8:88:fb:
                    59:7c:b3:2a:c3:26:77:42:7b:c1:09:f6:1a:e4:ce:
                    7c:d6:91:78:87:08:82:6e:4d:12:82:f5:e5:aa:d4:
                    f8:97:78:d6:ec:b2:ad:81:5c:8c:ef:74:70:3c:aa:
                    d6:ce:a8:eb:4a:51:ce:e0:fa:f4:01:00:2a:12:83:
                    d7:13:b7:30:9b:8c:95:93:90:75:f6:21:05:c3:7c:
                    4b:9f:b6:f4:7b:06:16:f6:6f:07:c5:3b:ce:6f:50:
                    60:80:49:3f:e1:e6:ae:b2:54:45:e5:8b:01:15:af:
                    e3:52:73:21:f5:a1:fd:84:2a:6d:05:a1:82:9a:18:
                    ee:d8:39:52:45:9b:30:1a:10:f8:c5:a8:7e:6f:15:
                    26:4a:19:e1:e4:c4:93:90:ec:67:ac:67:f7:c8:fb:
                    3e:10:c0:40:65:cd:da:10:6f:43:1c:d9:7e:36:95:
                    2b:c8:df:c6:10:69:f6:24:af:56:9c:b3:30:4f:8a:
                    b8:c9:6c:a9:ef:30:0c:94:57:2d:70:da:3a:2a:0f:
                    3e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A8:3C:C9:B8:A8:F8:2F:E2:87:34:F4:A8:76:54:76:05:76:0A:2F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA5680D8A43A11F19F1CB0EACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0c:86:eb:27:20:12:a8:85:69:4b:b6:5a:27:31:f3:e1:29:e9:
         a5:d6:7c:9c:82:8d:28:d9:6e:f3:99:06:29:a5:bd:b1:33:a9:
         05:22:a4:f4:f0:d3:37:e8:24:ac:d1:83:20:d1:7d:31:39:cb:
         3f:b5:74:b6:f0:3d:e7:b5:e6:f2:b1:21:a2:54:c7:ac:62:16:
         4d:0d:2a:94:99:b9:30:f2:a8:d3:bc:68:2d:a0:3f:e0:60:f2:
         09:69:b9:ab:11:d3:78:a3:c8:e4:05:eb:22:f0:5f:d3:42:23:
         74:01:12:bc:55:88:76:92:81:d9:84:f0:8e:a7:9f:ef:38:92:
         22:d3:45:25:5f:9c:a0:fd:40:ee:fd:3e:ce:23:32:05:5a:21:
         f5:72:09:2a:1b:9b:b0:bb:a5:8f:7e:0a:ff:be:01:84:bc:d1:
         59:3f:de:27:3d:f3:e8:0f:62:e3:e9:0c:46:47:e9:86:34:9b:
         04:6d:e5:4a:3d:8e:62:55:0b:98:b8:1b:41:71:f5:85:d7:cc:
         34:1d:c7:8a:af:1c:70:91:7e:f6:d2:6d:0c:58:2c:b2:72:4c:
         1a:93:85:b0:50:8b:d8:c1:d8:12:5e:ae:c2:49:0a:6d:69:21:
         d8:b4:9a:37:e0:6e:ca:74:2f:36:12:77:85:fe:be:5d:2b:55:
         0a:2c:95:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----