Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8886CA50ADB211F19A8D1ABBCE1D38B0.roa
File:                     8886CA50ADB211F19A8D1ABBCE1D38B0.roa (raw, json)
Hash identifier:          uZnwLrNb5NzNipmTf/urGmqo2hoUQea8RH38mgmcMi0=
Subject key identifier:   67:45:E5:7F:9E:B0:7A:5A:A5:93:F9:BB:D8:C0:C8:B6:48:58:7A:12
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E761
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8886CA50ADB211F19A8D1ABBCE1D38B0.roa
Signing time:             Fri 11 Sep 2026 07:29:33 +0000
ROA not before:           Fri 11 Sep 2026 07:29:29 +0000
ROA not after:            Sat 10 Oct 2026 07:29:29 +0000
asID:                     61112
IP address blocks:        154.83.83.0/24 maxlen: 24
                          154.83.84.0/22 maxlen: 24
                          154.83.88.0/21 maxlen: 24
                          154.83.90.0/24 maxlen: 24
                          154.83.91.0/24 maxlen: 24
                          154.83.92.0/22 maxlen: 24
                          154.83.96.0/23 maxlen: 24
                          154.83.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 12:53:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124769 (0x1e761)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 11 07:29:29 2026 GMT
            Not After : Oct 10 07:29:29 2026 GMT
        Subject: CN=6aa3addd-3533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:49:37:ff:20:5b:42:52:5d:9d:be:59:d6:bc:
                    06:20:9e:5d:e3:58:e2:d5:66:7c:e0:b7:f8:b6:ab:
                    df:4e:a6:84:30:95:fa:96:a1:b3:3b:29:49:1e:63:
                    da:29:79:8c:93:3d:16:17:20:06:9e:a1:45:e3:82:
                    a0:73:44:4e:00:96:e0:5e:22:da:8b:64:9c:a2:d0:
                    03:22:7e:40:2c:23:7d:69:1d:21:fc:62:ec:b6:d9:
                    ce:69:dd:58:97:be:a9:a9:c6:f4:75:53:6e:bb:ce:
                    62:09:d8:fd:8e:1a:01:b0:cf:fa:86:a3:b1:d1:01:
                    90:45:c9:78:11:7e:75:72:6d:de:31:1f:0f:81:46:
                    c0:73:7e:7e:0e:a3:87:b3:05:fe:80:6f:96:44:e8:
                    d5:6d:93:4e:6b:83:f4:36:1f:19:e9:c3:5f:be:ec:
                    5c:5d:51:41:92:28:16:ab:e9:e0:b3:64:dc:ae:41:
                    a9:88:43:3c:a8:aa:16:e3:1f:f7:6d:78:34:7e:86:
                    b7:cd:08:84:0e:be:08:a1:5f:36:95:75:76:c8:bf:
                    9c:63:09:52:dd:c6:89:09:4a:0b:2f:ed:34:e4:54:
                    0f:15:6b:44:0e:4c:f9:6d:1d:aa:31:31:41:e5:54:
                    66:f7:ad:ea:46:5b:cb:97:9b:b5:c0:7d:7c:15:b1:
                    3a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:45:E5:7F:9E:B0:7A:5A:A5:93:F9:BB:D8:C0:C8:B6:48:58:7A:12
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8886CA50ADB211F19A8D1ABBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.83.0-154.83.98.255

    Signature Algorithm: sha256WithRSAEncryption
         9f:7a:88:4f:1b:27:35:f9:ad:3b:96:6b:54:cc:01:f9:d8:ff:
         87:8b:a1:74:2c:4b:d7:41:94:f0:c2:1a:65:d2:ea:24:77:45:
         3e:b1:9b:54:64:5f:3f:cb:d5:27:00:20:52:61:32:db:cd:d7:
         e0:a0:bd:bb:b1:4c:d4:c7:91:e1:2a:86:83:46:30:55:f3:c5:
         65:28:4e:7c:70:67:d3:a7:ea:8a:ba:7e:d9:f7:66:c5:27:d8:
         82:ee:b2:4d:32:2a:8a:e7:4b:b8:c8:94:71:03:de:87:de:e7:
         3f:4c:74:ec:2f:da:da:ab:ad:8d:52:da:22:86:86:a7:20:43:
         29:09:a6:1b:ca:1e:47:a7:74:e5:44:0f:c3:a8:b3:09:cd:97:
         52:be:7e:cb:1b:f6:97:dc:c4:08:48:6b:a7:8b:b7:b3:7d:08:
         6b:a3:98:fe:1d:60:50:2e:4a:d5:e1:db:0e:26:d6:51:fc:02:
         1c:db:c5:0f:99:96:ff:02:9b:94:b8:76:0b:69:66:14:7c:f6:
         00:d1:7a:df:64:25:08:93:b4:97:f4:4e:ad:73:1a:bb:22:52:
         74:8f:94:68:a7:1b:fe:35:9f:32:10:50:4c:c5:db:f0:3f:47:
         d6:6c:62:6c:d9:fb:38:72:8b:2f:25:aa:89:f6:10:91:39:b4:
         1c:c4:f9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----