Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3907F92A30A11F18AB67CADCE1D38B0.roa
File:                     F3907F92A30A11F18AB67CADCE1D38B0.roa (raw, json)
Hash identifier:          2Z5DME5dv7vtAYiRCn4iEQsgFFSdFliXMUtSrfIkyss=
Subject key identifier:   13:66:50:06:CC:28:76:73:1F:F0:A9:99:7F:45:4B:CD:22:D8:8B:A5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E3E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3907F92A30A11F18AB67CADCE1D38B0.roa
Signing time:             Fri 28 Aug 2026 18:04:46 +0000
ROA not before:           Fri 28 Aug 2026 18:04:41 +0000
ROA not after:            Sun 03 Sep 2028 18:04:41 +0000
asID:                     142132
IP address blocks:        154.206.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 12:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123878 (0x1e3e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 28 18:04:41 2026 GMT
            Not After : Sep  3 18:04:41 2028 GMT
        Subject: CN=6a91cdbe-516d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c7:b9:bd:31:c5:75:ef:ab:6d:11:00:a0:29:
                    e3:d3:90:bc:53:ba:06:dc:c0:ff:e1:52:83:34:bd:
                    1d:7d:e5:c4:f2:a4:ae:19:1f:6f:44:13:8d:d1:f4:
                    db:4e:72:60:6c:1f:8b:18:b7:1d:fe:09:93:2d:e0:
                    24:9b:a9:88:8c:3d:9a:8d:b0:bc:2b:d9:19:0e:a7:
                    49:6e:2f:6e:cd:81:f6:89:cf:56:82:9d:21:1e:84:
                    c6:84:29:5a:03:80:84:07:40:a4:e1:a7:2c:4b:1e:
                    af:90:df:9e:1c:ed:cb:3a:91:ac:19:c8:4d:87:57:
                    a0:6b:1c:b7:c8:08:76:80:07:9f:9c:14:eb:bb:bf:
                    85:63:70:ca:af:30:27:f9:f8:a8:48:e8:2e:59:6d:
                    5b:e1:c8:f0:7d:4f:8d:ee:d2:df:45:f5:2c:cf:a3:
                    41:91:92:66:30:b4:e9:7c:e6:c7:89:23:5b:e1:30:
                    97:e2:21:99:dd:b8:cd:5b:0a:7f:42:2f:3e:52:01:
                    6b:a3:27:78:63:18:98:85:4e:47:54:74:70:e1:68:
                    cb:a8:14:66:1f:78:e1:c2:e7:a0:17:c7:5a:16:2b:
                    9d:0c:2a:70:5f:db:00:9b:77:f1:99:b4:40:55:9a:
                    84:d7:fa:17:e2:ce:59:dc:ee:f5:36:52:43:15:b3:
                    cc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:66:50:06:CC:28:76:73:1F:F0:A9:99:7F:45:4B:CD:22:D8:8B:A5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3907F92A30A11F18AB67CADCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.206.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:8f:c8:cb:3b:54:07:25:41:20:8a:4a:ef:e7:cc:20:b8:31:
         93:c3:d7:3b:05:47:94:23:69:f3:bb:cb:d9:8a:9d:cf:e7:65:
         14:ec:50:65:06:78:90:15:d7:39:70:1f:42:0a:9a:d3:bd:fe:
         36:40:77:c7:9e:1f:da:af:85:4e:ef:dd:42:fe:a7:88:ff:d2:
         5f:2b:a0:b6:75:9a:70:8b:ee:0f:fd:58:25:e9:9e:ad:f2:4c:
         59:a1:3f:75:bc:6f:4d:d8:f3:8e:2a:66:a4:fb:1f:80:2b:57:
         22:d8:8b:30:01:54:a0:0b:8a:af:ca:c1:ec:48:db:ae:a1:5a:
         15:b0:1d:38:bb:c0:11:62:84:7c:fe:cd:68:5b:48:f8:25:f9:
         aa:5e:dd:02:83:39:7e:b7:db:08:e1:7c:30:bb:20:1f:26:f5:
         cd:54:a1:3f:df:7d:b0:1d:2f:0e:92:ec:2f:2f:0f:03:43:41:
         9a:36:08:ac:25:0b:76:d7:d4:b6:a8:86:4e:3c:16:7f:15:b0:
         18:d9:3f:06:74:b3:8a:4d:fd:56:a9:6c:f5:52:43:66:e8:02:
         b1:45:3b:39:d6:8e:5d:7d:53:bb:35:d4:18:3c:80:64:f6:85:
         ff:82:60:6e:ac:72:df:3d:f2:b2:fd:eb:a8:67:86:b7:2e:09:
         35:61:25:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----