Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41D321B8B4E611F1BE9DB8B4CE1D38B0.roa
File:                     41D321B8B4E611F1BE9DB8B4CE1D38B0.roa (raw, json)
Hash identifier:          3YB8T3x62dbI4X7PCLyuLeY8x7/jj88UhCdLg4ADYpU=
Subject key identifier:   D4:E5:59:D0:15:07:A2:84:E2:21:D2:51:84:51:A2:67:58:F2:E4:27
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E921
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41D321B8B4E611F1BE9DB8B4CE1D38B0.roa
Signing time:             Sun 20 Sep 2026 11:27:27 +0000
ROA not before:           Sun 20 Sep 2026 11:27:22 +0000
ROA not after:            Tue 27 Oct 2026 11:27:22 +0000
asID:                     140666
IP address blocks:        154.93.87.0/24 maxlen: 24
                          154.93.88.0/22 maxlen: 24
                          154.93.94.0/24 maxlen: 24
                          154.93.100.0/23 maxlen: 24
                          154.93.104.0/23 maxlen: 24
                          154.94.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125217 (0x1e921)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 20 11:27:22 2026 GMT
            Not After : Oct 27 11:27:22 2026 GMT
        Subject: CN=6aafc31f-8cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:40:51:86:2e:53:58:c2:85:a6:5f:49:1a:3f:
                    73:16:be:54:79:c1:32:7b:1b:fa:54:60:51:c9:7b:
                    b9:35:cb:93:ac:49:f2:5a:86:c3:70:8e:1f:da:7c:
                    38:52:17:52:29:c1:e5:94:62:fa:24:32:a3:11:95:
                    2f:25:a4:b6:e9:c1:19:82:23:a8:d0:e4:cb:47:f4:
                    42:58:b4:56:50:2d:d5:8b:c0:b2:3f:67:39:b3:fa:
                    a2:cf:13:4a:ac:11:23:67:46:21:a0:23:f4:39:b3:
                    83:68:aa:fb:e9:e2:3f:01:4a:e5:ab:2b:f7:76:d4:
                    0b:ad:cb:5c:a7:8b:03:54:75:10:6c:3a:b3:b4:3e:
                    b6:69:87:f3:c0:10:4e:90:18:d7:3c:77:9c:9c:c7:
                    ab:f6:49:a9:55:58:a6:de:fa:17:84:33:75:87:58:
                    c7:f3:d7:03:60:0e:d6:89:d2:50:91:be:5a:a0:60:
                    97:e6:2c:e1:5c:5d:58:c3:2d:77:bf:57:84:2b:ac:
                    1b:f8:da:b2:bc:f1:9e:a5:27:05:90:22:24:c8:d8:
                    61:83:41:32:56:ee:b1:21:80:d4:09:fc:79:70:2c:
                    e3:39:02:48:32:2c:92:e2:69:b9:28:e1:59:47:24:
                    e9:7e:64:d3:cf:c3:7f:0b:62:24:62:c8:f9:65:72:
                    99:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E5:59:D0:15:07:A2:84:E2:21:D2:51:84:51:A2:67:58:F2:E4:27
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41D321B8B4E611F1BE9DB8B4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.93.87.0-154.93.91.255
                  154.93.94.0/24
                  154.93.100.0/23
                  154.93.104.0/23
                  154.94.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:c1:4b:60:bd:5f:65:69:a1:27:fb:0e:d9:35:29:3b:16:f4:
         75:c5:c3:3b:e9:1c:a0:40:70:4c:0c:bc:60:cd:51:3d:10:df:
         8f:7e:3e:47:b6:76:cf:af:cb:34:6a:22:62:95:48:33:34:08:
         d4:a8:f6:d3:cc:c1:93:79:92:35:7c:6f:fd:f7:c4:9b:5a:58:
         d5:5f:78:cc:be:ea:21:25:4e:24:be:94:81:57:ee:92:2e:2e:
         87:42:a8:6d:b1:70:de:4b:e3:a5:32:6e:8c:29:46:e2:45:f8:
         a7:c9:9f:cb:e9:6d:47:b1:d0:1e:53:88:7f:0c:dc:01:7b:e4:
         d3:18:1b:53:f7:29:25:2b:cf:6b:41:33:b9:78:bb:b1:78:20:
         3a:4d:30:9b:ae:17:13:2d:46:ed:19:56:22:b9:f1:99:e7:82:
         dc:d1:8b:62:f6:17:e9:cb:38:a8:fe:50:f7:2d:a2:b1:e9:8f:
         d6:c2:c8:e5:60:e9:d3:85:87:5c:03:77:13:4a:67:93:c1:5b:
         1e:72:87:73:dd:50:ac:bd:44:89:03:dc:19:60:a1:e7:70:6c:
         69:52:96:71:19:2f:99:7b:2a:8a:ee:84:c2:d2:56:3c:59:e6:
         24:3e:b8:1a:82:c5:fc:46:c4:77:46:fc:2d:ad:1d:a5:2c:f8:
         ff:28:d6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----