Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4AA20EAB4C311F18A4E8AD7CE1D38B0.roa
File:                     D4AA20EAB4C311F18A4E8AD7CE1D38B0.roa (raw, json)
Hash identifier:          qZ8wd3SpL2T5txoZYxk5+h7RLoCJULGd7mxDP0gH95U=
Subject key identifier:   C5:73:70:30:A9:D8:18:98:C7:7F:AC:4B:EF:2D:DA:22:7A:BF:E7:35
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E8E1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4AA20EAB4C311F18A4E8AD7CE1D38B0.roa
Signing time:             Sun 20 Sep 2026 07:21:01 +0000
ROA not before:           Sun 20 Sep 2026 07:20:57 +0000
ROA not after:            Sat 24 Oct 2026 07:20:57 +0000
asID:                     8796
IP address blocks:        154.89.144.0/20 maxlen: 24
                          154.89.160.0/19 maxlen: 24
                          154.89.192.0/20 maxlen: 24
                          154.95.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125153 (0x1e8e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 20 07:20:57 2026 GMT
            Not After : Oct 24 07:20:57 2026 GMT
        Subject: CN=6aaf895d-a979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:56:34:00:51:d6:62:6e:ad:7e:e1:ee:83:b5:
                    0f:45:1e:80:f9:fe:9a:c1:6d:2f:de:20:bb:77:74:
                    e5:9d:d4:2e:ea:06:4c:3b:88:e5:98:19:a4:16:36:
                    b9:89:ed:f8:e0:71:92:56:46:7d:9c:33:b2:90:ec:
                    1c:89:be:80:a0:68:2c:c2:f8:89:e9:b1:74:ca:e0:
                    f1:ec:d1:42:0a:dc:30:2e:a4:5b:53:8b:78:37:ee:
                    f3:5b:29:f5:b6:5c:0f:78:90:aa:da:f2:35:f4:e7:
                    b1:d9:60:4b:21:c9:61:6a:37:9e:0f:2a:4c:4a:95:
                    c1:4b:10:f9:86:3b:de:cd:ea:79:67:7b:3a:52:13:
                    ca:23:57:fb:0d:78:80:a7:8e:ef:ed:ef:44:b2:a8:
                    7d:69:71:e0:20:9b:76:c8:2d:e3:35:e2:02:b9:a8:
                    55:11:0a:5e:e7:27:9a:04:4e:69:0a:27:4c:e1:bf:
                    8a:d4:59:00:d6:db:29:ad:e1:4e:bf:5e:60:dd:e2:
                    6b:96:25:c8:9b:ac:07:fe:3a:41:09:e5:50:07:48:
                    07:27:d8:59:38:cb:64:d5:93:4b:9b:05:54:b5:c0:
                    1f:a5:4b:c2:19:b6:57:ae:c0:8f:68:94:a9:02:0a:
                    a8:97:79:ad:9d:b0:1d:54:2b:63:2e:bb:7c:0e:6b:
                    17:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:73:70:30:A9:D8:18:98:C7:7F:AC:4B:EF:2D:DA:22:7A:BF:E7:35
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4AA20EAB4C311F18A4E8AD7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.144.0-154.89.207.255
                  154.95.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:16:c1:4d:0a:db:7b:6e:ab:2d:01:78:45:46:74:9c:42:61:
         b4:98:8a:a8:76:92:fd:c4:ee:a4:b3:17:da:7c:83:83:70:c5:
         6b:84:70:da:70:a0:ac:d6:3d:31:79:95:d0:4b:11:67:77:5b:
         08:ba:19:a8:26:fd:07:4e:24:68:2b:ca:0e:6c:b3:e9:02:31:
         83:e9:42:62:c1:19:23:b2:85:0b:8d:e9:3d:47:d2:35:00:8b:
         a9:2d:2a:7f:ca:eb:1d:a7:61:c3:a8:c4:50:03:11:78:c1:f4:
         7a:78:92:d8:69:ca:a4:9d:4f:03:a8:8c:1b:84:11:13:48:8a:
         70:17:9e:af:8b:24:7d:b2:c1:e4:1a:52:3f:f6:0c:57:ab:73:
         0d:25:18:f1:60:17:12:3f:32:d4:72:59:7d:17:b2:67:d1:87:
         c6:c5:08:62:20:c9:0c:03:e3:91:71:99:74:51:13:14:96:b7:
         22:09:39:5d:96:b3:c4:69:55:24:d3:02:9b:dd:50:5c:4e:8f:
         80:e9:08:14:bf:23:eb:50:ad:ff:58:d1:e2:6a:4f:61:7f:f9:
         1f:9c:ae:b0:d0:33:90:10:a4:23:dc:f6:0a:90:1b:5d:34:d0:
         2e:6d:b7:ed:3f:7f:a2:38:fa:49:ff:db:7a:64:52:a3:d3:2d:
         f5:98:f9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----