Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3F0F1E89B9911F1834693DECE1D38B0.roa
File:                     E3F0F1E89B9911F1834693DECE1D38B0.roa (raw, json)
Hash identifier:          aqBszKw+cYqyqu3WvdFdU7uH+i4cHAgFJlOUCRcnYZQ=
Subject key identifier:   1B:E4:FC:6A:1D:D9:E1:66:FB:1B:FD:F0:6B:E6:69:8F:5B:7B:7F:2E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DFD8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3F0F1E89B9911F1834693DECE1D38B0.roa
Signing time:             Wed 19 Aug 2026 06:47:48 +0000
ROA not before:           Wed 19 Aug 2026 06:47:44 +0000
ROA not after:            Sun 08 Nov 2026 06:47:44 +0000
asID:                     137443
IP address blocks:        154.223.168.0/22 maxlen: 24
                          154.223.176.0/22 maxlen: 24
                          154.223.180.0/22 maxlen: 24
                          154.223.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122840 (0x1dfd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 19 06:47:44 2026 GMT
            Not After : Nov  8 06:47:44 2026 GMT
        Subject: CN=6a855194-b9c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3c:3e:d6:ed:4f:64:d4:f4:f1:d0:b6:c7:ec:
                    c8:e3:13:5b:46:f8:49:de:4d:f2:1a:d1:83:3f:80:
                    6e:b6:91:cc:4d:16:2d:73:29:af:d5:98:c6:c6:a7:
                    fa:12:b8:ae:d9:fa:41:8b:a1:5f:0a:d6:1c:e8:91:
                    92:c6:a3:a5:2d:86:3b:c7:47:6a:c4:15:c2:36:c4:
                    78:0b:8f:66:61:bb:0c:f6:a7:9a:7d:83:c4:0a:ec:
                    f3:05:0e:e8:2c:81:ad:fc:dc:d6:00:97:bd:0c:5a:
                    32:f3:d1:bb:7b:43:9d:b6:f0:bc:be:8b:18:d9:d5:
                    ce:ff:2c:87:73:bd:fb:57:70:c5:a7:b8:e1:bf:17:
                    b3:71:31:33:65:f8:91:1f:be:a2:b4:1f:ce:db:42:
                    10:de:e3:1b:ae:5b:85:f6:55:e7:48:1a:85:8c:01:
                    19:e4:9f:72:23:f2:98:7c:f4:88:d0:1c:46:c6:ad:
                    1e:b4:c0:87:66:4f:b5:5e:e2:13:14:bc:05:24:6a:
                    1b:75:ba:67:fa:fd:88:08:fc:2a:39:9e:7c:c7:e2:
                    2d:85:86:42:13:28:03:9f:02:0f:f1:6a:8e:34:1a:
                    bb:9f:6f:e5:b4:ae:ea:5a:05:69:f2:b2:b2:88:b6:
                    a3:70:70:f9:c8:a6:7b:8d:3c:a3:34:1b:af:84:29:
                    a9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E4:FC:6A:1D:D9:E1:66:FB:1B:FD:F0:6B:E6:69:8F:5B:7B:7F:2E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3F0F1E89B9911F1834693DECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.223.168.0/22
                  154.223.176.0/21
                  154.223.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:22:59:0f:1f:49:e5:e6:09:70:ea:d0:3c:d7:a5:76:25:2e:
         b3:05:03:be:fa:5d:a0:47:73:3e:3f:7b:2a:2f:c6:09:ac:9f:
         6f:c3:61:f8:26:23:5d:09:45:59:ea:22:3a:87:c3:e1:f5:e5:
         63:68:81:51:62:e5:b1:15:8e:b9:96:c2:f6:6b:e7:0d:36:1e:
         40:f9:e4:4b:9a:f7:37:4e:3d:4f:37:be:9e:aa:60:ea:db:ba:
         82:9f:76:e0:b9:18:3f:ef:a9:5c:c4:83:67:e6:4e:87:c5:e6:
         71:1d:e9:c7:28:59:65:87:2d:21:14:25:13:a3:03:73:6e:2a:
         51:f0:c1:87:35:ac:9e:8c:8d:d5:51:c2:11:ca:68:ce:bf:62:
         e8:1c:d8:01:00:81:ca:c6:dd:65:bc:9a:7b:94:e7:3e:22:22:
         89:2c:bf:6f:54:cf:23:03:c5:c9:6a:5d:55:6e:5d:37:70:f7:
         5c:41:4b:d7:63:65:70:8b:72:a1:d8:12:5a:8b:0a:05:0b:fe:
         bc:48:42:85:ee:78:79:60:23:1a:03:9d:68:d1:df:3a:db:36:
         c7:50:01:61:8f:0d:57:c4:f8:59:03:66:df:85:eb:80:75:f8:
         ec:62:c9:53:26:8c:40:4c:f9:2d:3b:7e:4d:b0:4d:e9:84:2f:
         c8:c6:c6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----