Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6C7CC72A37811F1B6C0EAD3CE1D38B0.roa
File:                     C6C7CC72A37811F1B6C0EAD3CE1D38B0.roa (raw, json)
Hash identifier:          vHW6zE0gdR2X04TqGtWTFueKvyCYBTo1OizsHtjuiQs=
Subject key identifier:   09:91:5B:E6:BC:ED:B5:6D:BB:15:D6:D2:E1:C4:A2:10:00:01:BA:35
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E3E9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6C7CC72A37811F1B6C0EAD3CE1D38B0.roa
Signing time:             Sat 29 Aug 2026 07:10:55 +0000
ROA not before:           Sat 29 Aug 2026 07:10:51 +0000
ROA not after:            Fri 09 Jul 2027 07:10:51 +0000
asID:                     137263
IP address blocks:        154.80.0.0/24 maxlen: 24
                          154.86.4.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 10:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123881 (0x1e3e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 29 07:10:51 2026 GMT
            Not After : Jul  9 07:10:51 2027 GMT
        Subject: CN=6a9285ff-5b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:32:54:21:de:a5:0b:b4:b1:a3:e2:37:56:94:
                    f8:b0:0f:1b:e1:ae:d9:ef:35:a6:e4:eb:6c:59:09:
                    43:6b:87:2e:2c:fb:20:97:ce:22:2b:26:df:a9:8c:
                    cd:55:96:4b:56:0d:f5:7c:60:4f:6c:cd:89:a5:02:
                    37:7e:5a:05:0c:e7:02:ce:eb:90:a2:d8:0b:11:b7:
                    eb:90:c6:d1:7c:a0:74:e4:6e:11:86:5d:18:cd:58:
                    a9:7a:53:cb:68:36:b8:75:3c:42:d3:c6:7a:a0:77:
                    ae:9e:d9:5b:52:5e:2f:fc:51:ff:a2:7d:95:6f:ae:
                    3d:7f:2f:08:da:c5:25:af:39:63:6b:fc:d0:20:10:
                    60:a7:7d:31:b1:8a:02:ff:e5:f7:97:4f:5d:fd:6e:
                    20:a0:47:53:4a:7a:1e:dd:fc:43:ad:71:34:62:8a:
                    fe:af:83:5f:87:85:0c:bc:0f:ab:14:38:b2:59:bd:
                    13:13:f1:b5:11:cf:2d:d6:1b:27:1a:43:6c:a5:cb:
                    72:4e:29:d8:50:13:50:fe:32:c7:94:6a:d7:26:e9:
                    73:fe:e1:6a:3c:46:67:d3:81:e8:bc:63:4e:dc:95:
                    5b:d3:d6:7b:63:ec:19:2b:95:5c:09:7c:1a:bb:6c:
                    e3:f4:74:41:4f:68:33:1b:c0:11:46:8e:da:b6:06:
                    40:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:91:5B:E6:BC:ED:B5:6D:BB:15:D6:D2:E1:C4:A2:10:00:01:BA:35
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6C7CC72A37811F1B6C0EAD3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.80.0.0/24
                  154.86.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:e2:6c:39:06:3d:d6:92:d9:98:ed:9b:4c:76:2a:b2:aa:60:
         f8:60:cd:71:b6:02:6d:0b:62:49:31:9a:25:af:ae:4b:23:10:
         fa:2a:6c:c9:d7:07:0b:c6:ea:0f:06:b5:f0:a7:89:ed:fa:38:
         60:07:66:09:fa:60:e1:44:63:4f:04:d1:5b:e1:4f:f0:e2:08:
         a4:64:8a:94:ef:e8:f0:c9:09:58:6a:12:44:a7:19:77:95:b7:
         77:72:0e:4b:94:f2:99:98:e9:38:6d:ad:ee:08:11:a3:a4:04:
         9b:4f:bc:67:6d:01:50:82:72:0c:90:a6:e0:b7:f3:68:3b:f9:
         44:98:14:e2:8e:ed:0e:5d:68:ef:4f:a2:b6:79:1a:4f:0c:37:
         0b:6a:e9:5b:cc:3b:05:61:74:ed:d0:79:8d:31:f0:ca:05:1f:
         b2:39:9b:91:a5:a8:cd:fb:e2:ba:a6:c8:83:f9:2f:42:ac:97:
         08:bc:f7:26:24:e4:9a:9e:b5:9e:a3:20:94:94:df:72:ef:98:
         ad:49:a8:fa:56:e4:dc:26:fb:ce:46:d1:88:91:b4:e1:3c:01:
         e5:fb:7d:38:82:4c:47:a6:a4:c0:fb:81:0c:2b:66:2e:14:90:
         e4:51:d0:ac:b2:6b:34:bc:73:aa:ef:d2:97:d0:04:a8:9f:64:
         5a:40:7b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----