Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0181248A949C11F19E75CEF4CE1D38B0.roa
File:                     0181248A949C11F19E75CEF4CE1D38B0.roa (raw, json)
Hash identifier:          EaRQtXE+SJNnEaJcmCyiGwjlglN3Kde13Yd2X4+B8jM=
Subject key identifier:   B0:C3:ED:59:88:A0:55:6C:C6:47:D9:39:AF:F3:59:99:80:62:B5:92
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DDEA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0181248A949C11F19E75CEF4CE1D38B0.roa
Signing time:             Mon 10 Aug 2026 09:15:19 +0000
ROA not before:           Mon 10 Aug 2026 09:15:15 +0000
ROA not after:            Wed 16 Sep 2026 09:15:15 +0000
asID:                     151407
IP address blocks:        154.88.64.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 10:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122346 (0x1ddea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 10 09:15:15 2026 GMT
            Not After : Sep 16 09:15:15 2026 GMT
        Subject: CN=6a7996a7-c6c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3f:e7:41:6d:93:19:89:3d:82:70:96:80:8a:
                    54:3b:50:c1:0c:46:59:f8:a3:7a:3f:e3:81:d9:2b:
                    d2:40:05:c8:cf:a3:f0:21:31:ba:80:a1:1e:04:24:
                    cf:7a:48:07:40:86:1c:8a:42:19:13:ad:11:8f:67:
                    b5:46:32:1f:c3:c3:ad:b6:e1:af:6e:37:00:da:1d:
                    e3:66:2a:e0:21:21:f1:76:92:e3:44:5e:60:59:99:
                    81:91:70:ca:a4:4a:9d:47:2f:a3:a6:1f:88:82:ea:
                    ef:2c:4f:19:8d:c4:8c:17:95:ee:de:4c:d4:e5:d8:
                    92:d3:59:44:56:f8:44:3b:8a:48:8d:0d:01:43:98:
                    bd:fb:35:cf:71:fd:28:cf:18:e2:a1:81:92:85:5b:
                    c5:82:17:98:da:a8:80:68:42:08:dd:50:fd:b7:b4:
                    88:d6:08:35:1b:78:9b:82:7e:a5:82:bc:2c:bf:14:
                    9f:d8:6c:49:d6:0b:08:80:ca:1c:a8:3b:e8:6d:b3:
                    56:75:4a:d9:e3:f9:4a:c5:e8:73:71:1e:56:d1:02:
                    05:bc:24:88:db:1d:0b:ef:d1:4d:95:a2:3b:ec:8b:
                    ec:22:b4:d1:67:b8:14:2b:cd:fc:42:d8:08:c4:43:
                    55:75:a1:b9:d2:d4:ef:d6:07:c4:2e:54:3b:fa:ea:
                    70:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C3:ED:59:88:A0:55:6C:C6:47:D9:39:AF:F3:59:99:80:62:B5:92
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0181248A949C11F19E75CEF4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:07:94:fb:5e:49:97:eb:0b:76:ac:3b:e4:4a:52:20:43:69:
         4f:39:83:fe:2c:f7:62:d1:ab:0c:08:60:52:f0:0a:13:80:5e:
         6b:66:9e:d6:73:5b:8e:07:15:7d:27:14:d1:27:9a:c0:53:36:
         2d:d9:7a:dc:dd:4c:26:11:b4:5f:02:4f:f7:a8:de:ad:b0:a1:
         77:57:39:33:04:c9:b3:8e:88:05:1c:f2:b0:b2:ac:a5:3c:af:
         d2:47:b8:43:83:3e:58:d0:95:f6:5c:8f:7c:82:ad:05:99:c1:
         bc:09:a7:a6:cf:07:05:35:01:d0:7c:b0:05:10:c2:5f:27:8b:
         82:2d:b7:79:18:e6:16:ce:25:87:ab:f7:01:fe:92:f2:49:fc:
         e2:16:6a:46:ad:11:f2:9d:37:71:4d:1d:94:34:e3:2d:8d:31:
         17:3f:fd:6a:bf:fb:17:9e:fc:95:a0:c3:25:ab:84:9e:c5:db:
         43:ae:28:21:9b:aa:8d:26:3b:3c:ef:72:f2:f3:1a:b9:0d:cc:
         3d:5e:92:f2:94:77:0b:3e:11:60:d9:1e:93:92:0e:3d:a6:9f:
         17:90:f7:c4:f1:24:a2:e7:2b:5e:af:ab:a2:20:85:8a:78:3c:
         1b:0a:08:1a:37:82:65:93:a8:f3:fa:8f:ba:23:d1:b4:0e:42:
         82:d0:a5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----