Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76E5ABA8B50611F1909EAD00CF1D38B0.roa
File:                     76E5ABA8B50611F1909EAD00CF1D38B0.roa (raw, json)
Hash identifier:          ZMgIuO0j1ZvY8lrb4H1FbTfgppTIl7wpvnAeOQbcLoE=
Subject key identifier:   27:0A:90:11:C6:A4:D6:54:66:FC:A7:BC:88:85:84:58:86:F6:BD:0A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E959
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76E5ABA8B50611F1909EAD00CF1D38B0.roa
Signing time:             Sun 20 Sep 2026 15:18:00 +0000
ROA not before:           Sun 20 Sep 2026 15:17:56 +0000
ROA not after:            Sat 24 Oct 2026 15:17:56 +0000
asID:                     395886
IP address blocks:        154.89.144.0/20 maxlen: 24
                          154.89.160.0/19 maxlen: 24
                          154.89.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125273 (0x1e959)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 20 15:17:56 2026 GMT
            Not After : Oct 24 15:17:56 2026 GMT
        Subject: CN=6aaff928-4249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:74:ac:c3:7f:82:86:2f:72:7b:6c:32:04:de:
                    4c:a2:0d:7f:f5:c2:3d:b0:89:7b:2a:53:d2:48:6a:
                    4e:bf:f7:91:43:f8:5a:a9:e8:75:09:7a:c5:7d:69:
                    cc:d5:da:17:c8:10:cd:34:92:a6:39:b7:ba:39:3b:
                    c6:c5:59:9b:2e:0c:7a:d1:d9:9d:e6:fe:69:1b:0f:
                    53:0f:86:9e:ac:33:0f:b8:58:22:70:9c:c3:12:6b:
                    e6:52:ca:85:6a:bf:02:11:d4:fc:4c:6b:d6:64:8c:
                    ce:e6:c8:ca:38:cd:92:db:d1:50:6f:6c:b5:d3:4a:
                    35:a1:66:26:ff:46:bb:9a:10:42:31:a0:5a:31:90:
                    10:1a:db:3f:9f:3e:78:45:84:5d:85:7f:b6:79:24:
                    19:7b:0d:a8:4c:26:78:62:e1:55:df:93:07:5d:ec:
                    9b:26:39:63:57:05:74:5d:b5:dc:71:f8:23:2f:81:
                    72:d3:65:20:ad:f8:81:30:58:91:48:10:29:aa:6f:
                    97:50:9c:60:b6:2d:22:95:a8:ba:db:cc:43:7e:3d:
                    37:82:88:bc:40:50:cf:f4:fe:e5:cf:be:ec:b0:47:
                    73:b9:f4:1e:d6:c7:38:26:1f:c2:6c:40:41:fa:54:
                    7f:6d:c3:a0:37:a7:b4:85:fb:6a:0f:c7:a6:af:f1:
                    a3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0A:90:11:C6:A4:D6:54:66:FC:A7:BC:88:85:84:58:86:F6:BD:0A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76E5ABA8B50611F1909EAD00CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.144.0-154.89.207.255

    Signature Algorithm: sha256WithRSAEncryption
         93:d7:ca:40:c6:b7:21:e1:e2:49:b5:af:36:24:88:70:a6:b1:
         48:5b:3e:df:86:06:67:4d:65:19:57:52:57:36:9e:8d:24:b1:
         60:0d:ed:a6:39:ef:7d:db:da:ae:d9:e9:8f:b5:8f:10:a0:5a:
         37:d9:ac:e4:c7:f7:60:a9:ad:a6:f7:1d:c7:ce:0d:ee:7c:83:
         5f:80:53:3d:fc:28:31:84:4f:53:2f:97:e8:f9:2f:3c:9e:3e:
         8b:80:a6:ed:ca:56:ac:14:56:bc:33:b8:2f:77:f6:d5:4d:a4:
         00:98:1a:45:d6:51:65:27:f1:97:cc:fa:36:b0:fc:52:36:d5:
         15:71:5b:4b:5f:8b:2d:93:e8:64:ee:1a:9e:fb:ff:74:5b:ae:
         33:d8:fe:fd:00:88:50:f0:2d:ad:df:59:a5:19:21:36:00:b2:
         51:2d:14:40:c5:bb:38:c7:5a:f3:ff:c3:3f:92:21:11:15:d8:
         71:08:b2:93:fa:df:99:b4:ff:18:d6:6c:5d:28:85:bd:7b:23:
         b9:96:4e:d5:3d:b3:f6:cf:e0:f2:41:96:c4:f1:f7:58:f1:c3:
         33:eb:05:c1:67:3f:ac:d3:cb:2a:59:a9:1a:bc:a3:bb:e6:79:
         b1:7c:02:9e:0c:e6:22:eb:7f:39:f5:1d:86:5a:03:0a:7a:07:
         b5:1a:44:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----