Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3091A188B50711F1A8F30805CF1D38B0.roa
File:                     3091A188B50711F1A8F30805CF1D38B0.roa (raw, json)
Hash identifier:          HnmHM6WopcaoXztVMaJ2ArkH8vDMcRGzzRBtUQsc1Vc=
Subject key identifier:   E3:A3:54:F9:74:A2:C5:A5:45:7C:86:39:89:31:DB:64:11:B4:12:47
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E95B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3091A188B50711F1A8F30805CF1D38B0.roa
Signing time:             Sun 20 Sep 2026 15:23:11 +0000
ROA not before:           Sun 20 Sep 2026 15:23:06 +0000
ROA not after:            Sat 24 Oct 2026 15:23:06 +0000
asID:                     55933
IP address blocks:        154.89.144.0/20 maxlen: 24
                          154.89.148.0/23 maxlen: 24
                          154.89.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 10:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125275 (0x1e95b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 20 15:23:06 2026 GMT
            Not After : Oct 24 15:23:06 2026 GMT
        Subject: CN=6aaffa5f-5cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ae:9c:06:81:4c:c4:2c:95:92:f6:dc:4f:86:
                    f9:47:15:de:8b:5b:53:98:76:5f:49:f5:fe:a9:ab:
                    d7:4c:d6:78:52:ec:37:a7:7e:7c:ba:5a:d9:ff:c7:
                    d3:2c:4f:3b:61:04:00:f7:35:d3:27:85:29:4c:27:
                    f4:e8:93:fa:1f:17:7b:04:1d:d2:aa:36:ae:bb:19:
                    0a:ec:cb:0e:93:b5:97:7b:bc:16:9a:fd:60:56:44:
                    3f:7e:08:49:0e:64:4f:04:12:3e:f6:9b:9e:5e:25:
                    13:26:f3:c3:54:5b:4b:d7:6d:43:e8:83:61:ca:8a:
                    8b:82:a6:91:4a:55:0d:e1:08:34:a4:e7:9c:93:c5:
                    ba:8b:fd:29:f1:c3:90:af:7f:65:19:ee:73:51:9c:
                    5e:9c:83:db:f0:e8:bb:7e:7a:c6:4e:48:b1:29:bc:
                    2c:88:04:27:6a:70:dd:84:75:48:f4:da:4d:f6:71:
                    eb:c0:5d:a7:e4:14:55:a0:25:63:8b:16:70:dc:c6:
                    4d:0a:5d:eb:ae:4e:3f:73:01:0c:40:4f:aa:9a:97:
                    35:4b:f1:e1:b3:c7:d4:90:3e:dc:03:ec:8a:ec:3e:
                    d2:77:fa:61:b9:e9:08:d0:92:ad:1e:8c:37:09:8c:
                    d1:15:24:1c:6b:f3:ba:dd:71:7d:e1:f3:6e:1f:7f:
                    92:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A3:54:F9:74:A2:C5:A5:45:7C:86:39:89:31:DB:64:11:B4:12:47
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3091A188B50711F1A8F30805CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1e:5c:b9:c2:ee:97:2c:75:5d:58:ec:d9:89:44:e4:b3:7d:1e:
         61:1c:70:9f:76:41:e3:00:e1:09:8e:f3:47:51:be:b3:bd:81:
         8e:69:60:3c:b2:51:11:7a:1c:e4:e0:5e:48:31:a5:4b:b2:dd:
         a3:ca:00:df:5e:b4:ec:aa:93:5d:87:43:46:c8:5c:f6:4f:e4:
         d6:ba:87:5f:c7:6e:13:c8:45:c8:9e:7c:2b:61:fa:ff:13:63:
         2e:f1:97:70:9d:c2:39:b4:4b:c0:a3:56:48:ca:ed:a8:2f:80:
         2e:01:13:53:60:1f:01:a4:e6:3b:d8:a5:70:aa:6c:29:32:be:
         d1:0c:86:dc:04:67:c0:ab:a3:c0:77:bc:66:ac:3f:0e:02:5c:
         1b:a3:6c:33:8a:4e:ea:8d:59:23:71:39:25:8e:70:88:eb:b1:
         ea:1d:0b:d2:df:94:73:4a:59:0e:2b:7f:04:bd:d9:8b:de:03:
         24:8f:a1:ec:39:76:b3:ac:7f:b7:95:ba:db:54:de:d4:6b:7d:
         45:23:fd:31:4d:75:c0:87:5d:0c:da:0e:a5:63:d0:2d:1f:e4:
         bf:58:8b:6a:2e:45:c2:ea:4f:8e:f0:77:93:13:de:21:7c:6c:
         d9:61:b1:ce:1c:01:0d:1d:f5:8c:29:4e:53:bc:79:2c:5c:56:
         b4:b7:01:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----