Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D23FD109D4911F1ACC38116CF1D38B0.roa
File:                     6D23FD109D4911F1ACC38116CF1D38B0.roa (raw, json)
Hash identifier:          H7MwZ585kh8En7ClqShv96upMeLSmwgNJFHu7AC8+3Q=
Subject key identifier:   0B:52:D5:98:45:AC:41:CE:F4:CA:B7:2A:4B:7D:39:6D:9C:E2:36:F4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E18A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D23FD109D4911F1ACC38116CF1D38B0.roa
Signing time:             Fri 21 Aug 2026 10:16:52 +0000
ROA not before:           Fri 21 Aug 2026 10:16:48 +0000
ROA not after:            Fri 09 Oct 2026 10:16:48 +0000
asID:                     214143
IP address blocks:        154.197.60.0/23 maxlen: 24
                          154.197.86.0/23 maxlen: 24
                          154.223.248.0/21 maxlen: 24
                          154.223.248.0/22 maxlen: 24
                          154.223.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123274 (0x1e18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 21 10:16:48 2026 GMT
            Not After : Oct  9 10:16:48 2026 GMT
        Subject: CN=6a882594-f752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:30:56:a9:d8:36:39:34:59:a1:14:62:f0:bd:
                    35:2f:63:66:4c:4e:69:20:8d:6c:5e:95:33:82:15:
                    81:0e:2c:e3:b0:7c:27:1c:2f:1e:5c:eb:db:87:5b:
                    b5:e5:8b:49:d9:28:24:c0:a1:8f:34:a6:60:e1:6c:
                    06:12:a5:29:89:d4:a1:b1:ed:b9:9f:54:3d:f7:71:
                    d4:46:fc:7d:47:e8:91:4e:0f:46:96:f8:ee:2c:5e:
                    63:97:5d:37:6a:77:e6:d0:5b:05:20:17:29:2f:69:
                    23:a5:ee:1d:06:e3:ac:a5:f8:31:61:bb:c0:6e:29:
                    14:78:be:37:79:34:9e:df:42:6f:f1:04:31:71:a8:
                    fd:b4:25:c8:10:bc:09:7c:06:5b:97:cb:8d:d0:87:
                    dd:c0:0f:47:6d:99:5b:8b:65:f1:85:46:46:fc:9f:
                    71:d2:5e:ad:e8:96:c3:1c:c0:11:6e:cc:4d:f4:0f:
                    ef:37:63:d1:85:bf:30:ab:d6:4b:4e:3c:a7:4f:8f:
                    08:53:08:43:c4:90:24:d3:f6:38:31:31:01:b6:7f:
                    cd:b5:f7:99:8d:ba:26:cb:d4:1a:64:36:ba:9d:b8:
                    5c:00:22:00:58:c6:90:33:25:9a:52:b9:fc:e2:97:
                    10:8d:a9:b6:0d:06:40:73:9d:11:f8:6f:12:8b:3e:
                    39:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:52:D5:98:45:AC:41:CE:F4:CA:B7:2A:4B:7D:39:6D:9C:E2:36:F4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D23FD109D4911F1ACC38116CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.60.0/23
                  154.197.86.0/23
                  154.223.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         59:ae:73:a9:16:88:17:83:31:43:4c:fb:83:11:f6:e5:d7:ed:
         bb:7f:61:0a:50:46:ed:b8:74:86:60:45:ff:d3:90:15:fb:70:
         ee:db:25:89:ff:2c:d8:32:47:1f:5f:a6:53:ef:13:b9:87:08:
         7a:92:68:85:c5:36:ee:be:8e:4e:0d:06:c8:2e:a9:78:16:a7:
         c9:ac:4a:ba:71:7a:92:9c:78:a0:95:e3:45:17:9e:bf:08:ab:
         c8:82:10:0c:83:e2:8d:10:ed:6e:86:b8:72:8a:1b:37:2f:d6:
         fb:d6:f2:7f:71:3c:d9:34:9d:31:c1:e4:c3:84:5d:ea:b6:12:
         f3:4a:47:eb:14:b7:08:d9:48:ad:5b:d9:37:71:fa:2d:99:b9:
         97:db:68:dd:1d:bd:64:1d:3f:52:e9:36:44:7d:b8:dc:69:4a:
         0d:f4:9b:28:ee:f4:33:70:7f:50:5e:1f:2f:df:15:a6:cd:21:
         e2:8a:90:2e:dc:4e:18:70:bd:44:62:3e:c1:c0:6f:4f:72:c9:
         95:17:7a:2a:36:eb:0a:92:e9:95:08:d3:19:1c:6a:02:63:db:
         48:b8:8b:91:0d:fc:e8:19:2c:a3:5d:52:d7:d9:12:90:33:2d:
         5e:de:2e:43:88:29:10:04:29:15:a1:89:79:9f:f4:3d:af:4b:
         53:0a:e7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----