Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/911745FEB4CF11F1B581E5A1CE1D38B0.roa
File:                     911745FEB4CF11F1B581E5A1CE1D38B0.roa (raw, json)
Hash identifier:          eijoXm0xSpXjG6M8rbKeldw7HMQ1m+B66SHLDVPTdD4=
Subject key identifier:   9F:77:9B:EA:C8:A7:8F:9A:DC:7E:AF:24:8C:71:76:CF:EA:28:A6:44
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E8F5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/911745FEB4CF11F1B581E5A1CE1D38B0.roa
Signing time:             Sun 20 Sep 2026 08:45:02 +0000
ROA not before:           Sun 20 Sep 2026 08:44:57 +0000
ROA not after:            Sat 24 Oct 2026 08:44:57 +0000
asID:                     40065
IP address blocks:        154.89.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125173 (0x1e8f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 20 08:44:57 2026 GMT
            Not After : Oct 24 08:44:57 2026 GMT
        Subject: CN=6aaf9d0d-f490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:84:7c:9b:b4:01:98:c9:45:ad:0e:f0:ec:f0:
                    43:66:50:52:9c:18:be:c3:22:85:17:f9:86:3c:45:
                    2f:7e:2c:7c:7b:93:4b:52:f3:96:64:cd:5a:6e:7e:
                    e4:4f:d6:98:44:c1:9e:82:65:48:dc:27:b2:25:aa:
                    07:d0:d1:61:d8:ca:c9:0e:c4:5d:33:a3:8d:35:36:
                    eb:81:4c:72:56:51:59:5b:54:c1:88:a8:75:bd:3a:
                    d8:e8:70:72:eb:b6:34:64:f6:40:f8:6d:8f:d7:f4:
                    7c:5a:4d:b2:89:d5:34:ba:c0:4b:5f:7f:c6:96:e1:
                    44:04:6f:34:a0:59:92:3e:8f:fa:6f:5a:32:c3:37:
                    2b:44:ea:7f:d9:fd:91:20:17:21:0f:d0:43:e4:6c:
                    ec:f2:8b:17:57:88:2d:f6:70:22:53:fc:5d:f9:25:
                    e4:42:4f:41:22:ec:41:d0:3c:4b:9e:40:2c:ad:81:
                    47:27:fa:3d:8a:30:96:03:4c:a8:a4:6d:27:16:ee:
                    af:ff:f4:04:d1:71:51:18:8b:f0:ad:96:d0:31:70:
                    ae:31:e2:ed:9b:32:1a:55:3b:65:bf:6c:53:41:1e:
                    60:29:ff:15:56:21:fc:c8:c4:9c:62:fa:c2:46:3b:
                    8e:d0:b6:43:41:2c:5b:33:1c:6d:10:78:84:cc:4a:
                    d7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:77:9B:EA:C8:A7:8F:9A:DC:7E:AF:24:8C:71:76:CF:EA:28:A6:44
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/911745FEB4CF11F1B581E5A1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         53:d3:04:b2:70:ea:59:9f:b1:0d:24:95:af:01:d2:4b:5f:21:
         e2:ab:25:7b:f5:48:0f:3c:2c:b6:87:cd:7e:e8:36:df:ef:0b:
         70:88:ca:71:54:93:df:8e:2c:95:7f:70:93:7d:6e:f5:e2:fa:
         3f:ea:49:a8:60:a4:b1:1f:44:31:b6:75:18:27:e2:20:59:ed:
         48:1c:c7:37:fe:02:0b:e7:7e:cf:a3:3e:3f:63:a8:3d:47:ef:
         7e:b0:13:44:91:4c:61:d8:16:97:9c:f1:17:88:a1:df:2f:e5:
         0c:c7:c5:e4:f8:4a:c3:b3:71:22:9d:34:d2:ad:4c:28:f3:ee:
         43:7a:ae:64:40:85:3d:57:f2:95:f9:da:dc:35:e9:75:61:41:
         1f:07:ea:10:be:4a:d7:fb:94:0e:72:b2:dc:8d:62:b9:9c:d2:
         f0:cd:06:cc:af:c2:f7:38:a1:68:0f:3f:3c:ee:96:98:da:a2:
         77:14:26:1b:4f:ca:05:0d:fe:65:62:04:36:3b:b1:18:c9:a8:
         57:42:5f:2c:42:68:0f:13:a9:86:49:41:c5:b1:1f:b7:f7:46:
         00:8c:a1:ba:da:97:d8:1b:c8:a1:38:e3:f7:08:4c:b6:6b:27:
         8b:a5:9c:8e:d6:ab:1f:9d:b9:c5:94:b7:9f:90:cf:24:f4:ba:
         fa:f4:d2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----