Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF9AED8C9CCC11F197741813CF1D38B0.roa
File:                     CF9AED8C9CCC11F197741813CF1D38B0.roa (raw, json)
Hash identifier:          pbspS6U5LnT2zJIBwgGq4rY8lBjvFC4Jxy8khU/ZjNM=
Subject key identifier:   2F:F4:7A:B1:8A:DE:DF:0E:89:02:06:07:99:FA:8B:F5:5F:85:10:92
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E0EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF9AED8C9CCC11F197741813CF1D38B0.roa
Signing time:             Thu 20 Aug 2026 19:24:50 +0000
ROA not before:           Thu 20 Aug 2026 19:24:46 +0000
ROA not after:            Tue 22 Sep 2026 19:24:46 +0000
asID:                     22516
IP address blocks:        154.86.192.0/18 maxlen: 24
                          154.90.224.0/19 maxlen: 24
                          154.91.224.0/19 maxlen: 24
                          154.93.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 12:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123116 (0x1e0ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 19:24:46 2026 GMT
            Not After : Sep 22 19:24:46 2026 GMT
        Subject: CN=6a875482-346d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cc:4a:e1:8e:d9:c1:86:e0:7f:31:43:1f:f0:
                    84:94:3c:4e:5b:5e:7f:de:fa:d4:38:da:f3:e7:83:
                    f3:b3:1d:05:c9:97:a9:cf:67:d3:7d:f5:b5:77:c0:
                    d8:57:2e:61:80:49:c8:ae:62:3e:c2:bf:87:9d:bd:
                    02:b7:5b:41:3a:be:b8:cc:c2:51:32:05:2f:8e:44:
                    d7:fa:03:06:10:9d:d6:5d:cf:df:3f:64:d7:ed:5d:
                    6b:83:95:bd:31:4a:5e:32:14:4c:31:ca:b6:c3:b9:
                    05:e9:ea:ad:c8:16:44:cf:50:da:6a:7f:0e:d8:3e:
                    c0:db:fe:dc:f7:57:a7:ff:a9:b2:4a:79:3c:41:0b:
                    f2:ff:3d:26:de:ec:1d:a7:9f:3a:0c:1c:4a:5f:bb:
                    71:7c:f0:9a:be:14:53:37:da:19:c5:59:49:37:da:
                    fb:5a:1a:91:0d:cb:0b:d5:54:73:23:7e:b2:50:9b:
                    66:f2:4d:22:4e:ab:cd:36:b3:71:2a:99:ab:13:f0:
                    7f:7d:a8:cf:dc:b9:00:fe:c2:f6:ff:82:46:18:7f:
                    47:22:43:4c:9e:61:44:49:45:64:08:50:dd:c4:f7:
                    a4:3b:50:d8:b3:b4:bf:83:85:4f:34:ce:8d:63:61:
                    52:c3:29:f0:11:4e:e5:88:93:15:91:78:d6:25:d9:
                    51:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F4:7A:B1:8A:DE:DF:0E:89:02:06:07:99:FA:8B:F5:5F:85:10:92
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF9AED8C9CCC11F197741813CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.192.0/18
                  154.90.224.0/19
                  154.91.224.0/19
                  154.93.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         67:2d:38:56:bf:26:16:71:21:4a:89:61:67:23:b8:00:e6:dc:
         d6:72:76:f0:da:34:17:49:d4:cd:76:13:33:da:03:dc:37:f0:
         77:d8:15:55:d8:61:d0:d0:fa:40:66:64:e4:14:2d:53:3b:30:
         ae:12:4b:a1:d4:8d:92:d7:a1:f8:9c:14:92:c2:53:25:69:ce:
         68:07:43:2d:d6:60:1c:d8:1c:a3:d7:c7:26:81:99:66:64:ba:
         ef:30:f8:6a:41:a0:2f:cb:18:a1:ab:6f:cd:fc:db:af:4b:97:
         47:32:09:40:65:0e:81:29:8f:93:32:e4:d8:06:30:66:79:96:
         b2:d8:e4:93:c4:78:d5:8a:c8:df:19:a1:03:65:6b:55:31:99:
         8d:0f:43:03:3e:94:e1:77:de:7a:d3:bc:6c:0c:ab:12:ae:7d:
         ed:f2:7d:90:c6:87:12:0f:40:9d:23:f2:83:8c:2c:52:9f:2e:
         a4:b5:7b:3c:7b:b6:67:ed:ea:c5:f0:19:f0:7a:b7:93:36:e4:
         c7:76:cc:5f:8e:86:eb:b5:90:79:d0:73:11:65:c2:3a:cd:c6:
         81:bc:8b:bf:d2:b8:24:ba:fc:31:b7:17:6a:ac:01:6a:2e:8c:
         08:a4:ea:d7:fe:a4:c1:a2:71:2d:67:89:21:3f:8e:7b:33:60:
         18:4a:99:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----