Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6A947BAABFA11F1B9B2CDC4CE1D38B0.roa
File:                     F6A947BAABFA11F1B9B2CDC4CE1D38B0.roa (raw, json)
Hash identifier:          yCYuhmm/LVYHGXQ+KMXmV5XxsAY/lCFuUk6j8S6G+08=
Subject key identifier:   F7:ED:B0:BB:2C:96:BC:9E:8B:A7:E9:21:E7:30:54:24:91:29:E4:E7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E694
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6A947BAABFA11F1B9B2CDC4CE1D38B0.roa
Signing time:             Wed 09 Sep 2026 03:03:00 +0000
ROA not before:           Wed 09 Sep 2026 03:02:56 +0000
ROA not after:            Thu 17 Sep 2026 03:02:56 +0000
asID:                     17497
IP address blocks:        154.193.16.0/24 maxlen: 24
                          154.193.162.0/24 maxlen: 24
                          154.211.168.0/24 maxlen: 24
                          154.211.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 11 Sep 2026 10:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124564 (0x1e694)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  9 03:02:56 2026 GMT
            Not After : Sep 17 03:02:56 2026 GMT
        Subject: CN=6aa0cc64-ad39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e1:4e:a9:81:c3:89:19:9c:41:62:fb:0d:30:
                    23:3a:47:84:3c:06:a1:ac:cc:ce:4a:ac:4c:0c:ff:
                    ef:bc:88:d6:0b:30:59:a3:77:a2:41:c6:ee:1a:92:
                    5d:e3:11:fd:92:7a:8d:2f:c6:22:30:1d:b3:1a:28:
                    06:cb:b7:c7:74:d3:73:3e:c1:25:2e:80:94:5e:17:
                    a5:bd:36:41:23:2c:bb:55:38:c4:5d:f1:35:1b:2d:
                    bd:c9:7a:c8:70:0f:08:e7:ce:99:0d:c6:74:d3:82:
                    9c:e0:89:60:83:f5:d9:07:94:38:be:cb:bf:a4:b0:
                    fb:e9:78:2f:2b:b4:97:88:a6:75:72:09:56:91:1f:
                    64:d0:cd:51:28:1b:df:a7:f2:14:a7:93:25:40:a2:
                    10:88:72:60:01:2e:f3:7e:75:a6:12:48:0a:ea:98:
                    f5:8b:68:af:28:59:75:6c:1d:d4:80:1f:00:7b:99:
                    30:7a:ea:a2:35:ff:6f:24:25:ef:08:cc:92:58:fe:
                    2a:2d:2b:47:a6:8b:fe:c2:ec:03:47:40:39:af:6a:
                    63:7e:5a:a6:d2:b5:08:54:ce:dd:25:f2:20:22:90:
                    e2:57:b7:11:9e:13:1b:60:54:3b:51:15:4b:4d:9b:
                    4c:0f:d7:45:d4:39:fc:75:8e:bf:64:4c:7a:50:da:
                    0e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:ED:B0:BB:2C:96:BC:9E:8B:A7:E9:21:E7:30:54:24:91:29:E4:E7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6A947BAABFA11F1B9B2CDC4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.16.0/24
                  154.193.162.0/24
                  154.211.168.0/24
                  154.211.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:40:85:dd:6d:6b:8f:4a:1c:8f:35:ab:fc:8e:ea:ff:bd:bc:
         bd:d7:16:8c:60:59:b7:ec:43:19:bf:b3:51:2e:9d:0d:dc:0d:
         84:75:fb:14:a1:9e:20:fd:cb:2c:ef:a1:9c:ae:e1:d5:9a:34:
         f3:86:dc:d2:6a:6a:c9:65:a9:33:8b:94:58:f6:56:f2:5e:9d:
         18:da:7f:36:71:38:d0:f1:57:de:07:00:ee:a5:fd:03:11:37:
         c2:d7:60:f4:7c:fa:34:66:99:4e:cc:61:83:6c:c8:23:0a:d5:
         13:6a:24:29:e6:ac:64:4f:b7:39:9d:57:92:6a:5c:35:e2:ad:
         30:96:b2:94:a5:46:c1:35:4e:57:d4:b8:e0:a0:d0:25:cc:b4:
         08:3b:54:72:04:fa:83:c4:c6:06:a4:7f:d8:e6:d1:49:37:1d:
         85:b3:f8:a1:14:e5:ee:6e:0e:cc:e9:dd:8d:28:18:79:7d:b2:
         04:49:75:14:69:0b:93:6c:e3:93:77:40:68:8a:78:21:53:50:
         d2:7d:8a:0b:4e:e9:24:25:90:43:7e:6d:61:1e:67:53:53:3e:
         c0:40:0a:af:ba:0e:fd:14:b7:96:fc:c3:cd:35:82:3a:4c:d4:
         af:65:a6:5f:34:d3:ea:c6:a7:9f:3a:22:b3:60:0d:db:53:22:
         6b:21:5a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----