Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B899A09C9BAF11F19536DAE1CE1D38B0.roa
File:                     B899A09C9BAF11F19536DAE1CE1D38B0.roa (raw, json)
Hash identifier:          QEtiSAMUrSGOkjkKdcSSkByqwyq+983nvORNILRzg7A=
Subject key identifier:   1D:1C:FE:1F:F3:69:4A:A1:C7:06:B9:3E:11:EB:B6:FA:D8:07:D7:31
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E005
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B899A09C9BAF11F19536DAE1CE1D38B0.roa
Signing time:             Wed 19 Aug 2026 09:24:05 +0000
ROA not before:           Wed 19 Aug 2026 09:24:01 +0000
ROA not after:            Sun 04 Oct 2026 09:24:01 +0000
asID:                     63023
IP address blocks:        154.222.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122885 (0x1e005)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 19 09:24:01 2026 GMT
            Not After : Oct  4 09:24:01 2026 GMT
        Subject: CN=6a857635-1af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:2e:3b:d3:d0:f3:92:6f:0f:9a:0f:ed:4a:ed:
                    dd:1a:dd:e7:d0:b9:a6:63:42:6a:86:cb:55:a0:fb:
                    f6:ae:75:54:94:21:84:69:f7:2d:25:e8:6e:d1:b2:
                    ea:0a:49:b8:f3:fe:09:80:03:36:ab:55:f1:c2:6a:
                    39:20:6f:6c:6f:31:7b:88:2e:1c:c6:de:bf:50:9b:
                    9a:0e:fe:24:77:e4:7a:b5:ec:33:76:6b:f2:df:9e:
                    1f:2b:be:35:7f:e6:f9:8a:9d:e3:f7:c3:47:33:15:
                    5a:e1:3c:91:fe:1e:60:03:4d:42:e1:b8:da:d8:c2:
                    7a:d5:37:2c:4c:31:ec:ca:40:ea:8c:12:fd:3e:95:
                    80:3d:7f:92:ed:52:f4:dd:26:d1:1c:c7:97:f5:67:
                    26:0c:71:22:a7:80:db:f1:a9:26:b8:31:02:42:09:
                    f5:ae:9e:5a:79:5a:b3:93:5a:28:b8:2d:5b:27:e3:
                    e5:3e:6e:72:e7:90:3d:64:68:f9:77:b9:fb:38:3e:
                    69:48:8b:6a:bc:03:3f:e7:48:58:ef:89:51:45:b4:
                    81:5a:a7:c4:c7:e9:59:81:a6:f2:f7:95:25:61:5c:
                    eb:11:b2:6b:5b:95:af:7d:37:73:05:df:67:6d:19:
                    91:b1:f3:ef:2a:c5:ce:be:e8:16:80:64:34:29:ac:
                    a9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1C:FE:1F:F3:69:4A:A1:C7:06:B9:3E:11:EB:B6:FA:D8:07:D7:31
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B899A09C9BAF11F19536DAE1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:22:cd:43:28:f1:8d:60:5c:ac:cc:98:37:3b:36:5e:99:5c:
         dd:3f:51:16:f1:8f:fd:1e:5d:7f:b0:90:4e:18:77:65:94:a2:
         ea:b1:83:08:2b:cc:aa:91:f9:ed:53:02:ce:be:3d:40:3b:cb:
         38:ba:28:70:b0:2f:c6:be:e8:70:c2:53:1a:de:ea:2c:25:1d:
         6b:d5:ca:e7:65:09:6c:35:18:2d:ec:d5:cc:9e:bf:e8:31:79:
         c5:1f:8f:1e:16:18:38:03:b3:7f:a5:29:bb:a7:7c:22:fd:85:
         b2:73:89:3f:af:a4:5d:c1:8a:b0:a6:f0:d6:8b:93:a0:30:4e:
         06:06:2a:88:2d:a9:6a:4b:a1:5f:40:b5:aa:e7:a8:4d:22:6b:
         89:65:ed:a5:44:43:91:4c:11:4c:f8:b6:77:71:28:3c:a4:f7:
         f5:8c:60:2a:39:96:e2:41:d6:ec:94:31:aa:a1:ea:03:1c:87:
         0c:5d:c2:74:10:57:2d:01:e6:c5:f3:b0:65:00:10:30:42:44:
         de:1c:fb:9c:33:58:73:a3:32:3f:9d:6e:a4:23:28:3e:04:61:
         2e:a4:78:82:3a:32:41:8a:07:fd:82:d4:38:59:db:64:51:c7:
         17:48:7d:0b:aa:62:e6:8c:b9:c3:c3:8b:2b:04:47:64:9c:e9:
         b2:6d:eb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----