Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8D24562A9BB11F19DEB62B7CE1D38B0.roa
File:                     C8D24562A9BB11F19DEB62B7CE1D38B0.roa (raw, json)
Hash identifier:          nGBl9ila1qAQ7+8pbcTfGxwx6J/AV8nOX60l4riBK6o=
Subject key identifier:   1B:D0:8B:01:07:A5:F6:93:0E:27:CA:41:18:94:89:E9:15:31:B1:3A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E5BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8D24562A9BB11F19DEB62B7CE1D38B0.roa
Signing time:             Sun 06 Sep 2026 06:25:42 +0000
ROA not before:           Sun 06 Sep 2026 06:25:38 +0000
ROA not after:            Sat 05 Dec 2026 06:25:38 +0000
asID:                     142403
IP address blocks:        154.92.18.0/24 maxlen: 24
                          154.92.19.0/24 maxlen: 24
                          154.94.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124350 (0x1e5be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  6 06:25:38 2026 GMT
            Not After : Dec  5 06:25:38 2026 GMT
        Subject: CN=6a9d0766-1a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cf:8f:05:c7:a4:15:a9:a2:1e:1e:7d:c2:25:
                    fe:f7:c7:af:23:94:93:a5:b5:7a:45:54:c6:cc:65:
                    e4:3f:11:4a:3d:3d:70:ef:63:5d:89:7e:24:94:28:
                    be:5b:4b:86:63:eb:a5:90:6b:c0:d8:cf:01:18:be:
                    6f:49:d8:a3:d0:a9:6b:61:28:5b:0b:8c:3e:10:75:
                    3b:95:5a:76:d4:a0:02:87:94:2b:85:df:95:8b:0a:
                    f6:70:a9:1c:46:78:19:74:c8:1b:17:e1:2a:80:33:
                    ea:d2:cd:35:86:4d:04:75:25:c7:11:af:f9:e5:91:
                    c9:75:9c:60:0d:92:66:9a:84:16:0d:65:1f:4a:f0:
                    8f:2a:ea:9e:28:10:e2:bf:43:00:70:f2:2d:b7:06:
                    7a:70:cb:1d:62:1c:c3:84:b7:36:46:59:51:37:05:
                    52:87:25:a1:cc:4e:4f:d4:9c:fc:91:d2:2f:f8:d1:
                    d6:a8:ba:39:01:0b:b8:fe:a0:3f:2f:81:74:62:02:
                    aa:4f:9b:65:a9:84:2f:a8:21:c0:f9:7a:92:1f:c8:
                    24:96:fa:9c:d0:00:fb:ef:80:5d:e8:6c:98:27:0f:
                    9d:9c:66:4e:64:11:6c:b9:82:89:cc:84:fd:65:c9:
                    5d:b2:fb:f4:1a:20:64:40:f1:ea:88:4d:fa:e8:73:
                    6b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D0:8B:01:07:A5:F6:93:0E:27:CA:41:18:94:89:E9:15:31:B1:3A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8D24562A9BB11F19DEB62B7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.18.0/23
                  154.94.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:e4:8f:d5:27:27:ea:92:80:52:0d:0a:a7:53:0f:90:a7:ed:
         56:84:15:98:2c:3a:af:cc:41:c3:f8:b3:82:c8:94:da:bb:57:
         e8:09:1f:57:2b:5b:fb:22:ad:d8:05:70:80:00:41:fc:2c:a0:
         fd:4a:e6:fc:c7:c2:40:91:b2:5d:cf:7c:eb:44:f9:95:7d:b1:
         0d:24:d7:a0:e1:c2:32:48:2f:b3:36:9f:3f:65:f5:c5:ce:73:
         39:94:4c:19:27:89:5c:07:ca:6f:63:c5:be:03:70:71:f9:ee:
         a2:6e:73:5a:f6:0c:86:b6:94:1a:81:a6:29:96:22:93:69:61:
         c0:22:72:3f:9f:1b:c1:e4:4a:8f:d0:65:ab:29:f3:56:06:17:
         e4:c1:76:15:bd:db:67:96:25:50:81:b2:a5:55:c5:43:33:cb:
         7c:d2:3a:d2:bc:05:db:95:0a:03:a7:3c:07:a7:48:9c:cc:51:
         5f:ca:ef:54:74:de:84:32:97:08:5d:02:58:c5:0b:55:d6:9d:
         25:66:92:2e:3d:79:39:53:04:26:4b:e0:73:ce:db:ac:33:ae:
         5f:63:89:8e:98:c1:ca:75:df:71:56:3e:29:91:b3:11:2d:a1:
         2b:63:ff:38:78:2f:8c:c1:81:75:74:f2:17:61:91:4c:a1:ce:
         1b:38:0d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----