Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02B6216696EA11F18BE0E4F0CE1D38B0.roa
File:                     02B6216696EA11F18BE0E4F0CE1D38B0.roa (raw, json)
Hash identifier:          gr0WvcDc0PMStjMcEWx0o5YYgwTYlpUQCS7FPr8F4zE=
Subject key identifier:   C7:F7:A3:17:F4:2E:2E:AE:B6:52:81:B9:07:22:00:32:66:FA:BD:49
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DED5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02B6216696EA11F18BE0E4F0CE1D38B0.roa
Signing time:             Thu 13 Aug 2026 07:38:44 +0000
ROA not before:           Thu 13 Aug 2026 07:38:40 +0000
ROA not after:            Wed 09 Sep 2026 07:38:40 +0000
asID:                     49581
IP address blocks:        154.86.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 12:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122581 (0x1ded5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 13 07:38:40 2026 GMT
            Not After : Sep  9 07:38:40 2026 GMT
        Subject: CN=6a7d7484-84bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f7:eb:46:8b:95:dd:ff:82:33:c7:7f:98:64:
                    da:7e:4a:ee:e5:79:e7:53:b0:f1:42:cb:ae:7a:0e:
                    5f:7b:ae:8c:af:e6:8c:94:8a:a3:f3:69:2e:cb:35:
                    1e:7b:0d:81:84:17:46:75:de:4d:f7:0a:18:1c:47:
                    c3:65:f4:42:3c:f0:4f:f8:78:5c:22:c9:1f:1e:4a:
                    34:45:d6:8a:dc:13:ee:b3:11:d9:bc:9f:16:eb:5e:
                    c6:fb:70:d5:8a:c1:f6:e4:1e:65:87:85:f2:b5:cc:
                    e0:97:49:e2:44:ec:96:88:8e:24:15:e9:a5:a6:70:
                    c1:81:e2:0c:7c:03:bd:df:26:93:99:c1:18:fa:df:
                    6c:c1:c4:6c:2d:d8:65:c4:a3:c8:6a:4e:13:43:f4:
                    be:3f:c9:6f:ad:b2:41:3f:30:82:f7:80:23:1e:81:
                    a4:a5:55:6e:fa:22:ab:94:3d:3e:09:b5:97:b9:cb:
                    85:c2:d2:28:b0:6f:ef:e0:61:b6:ab:82:bb:8f:6b:
                    3d:c1:02:07:a1:4f:f7:ab:b9:3c:66:3c:03:18:dc:
                    29:48:ae:a7:e9:27:81:e3:1e:e5:f3:d9:b2:f2:cb:
                    6c:a0:92:02:05:26:0f:32:49:0b:8e:88:45:d8:e8:
                    d9:ba:42:d4:31:24:fa:d0:17:c0:e2:81:c8:2d:9e:
                    03:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F7:A3:17:F4:2E:2E:AE:B6:52:81:B9:07:22:00:32:66:FA:BD:49
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02B6216696EA11F18BE0E4F0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:54:58:b9:97:7d:20:20:c7:60:12:04:d4:61:d7:9a:4b:8b:
         cc:06:79:8a:c4:f3:67:80:d9:55:d7:9d:0e:a4:7c:b7:26:f9:
         69:ad:d8:2d:da:18:b0:95:30:f8:64:8a:e1:ab:31:8e:84:6a:
         3d:69:f3:81:83:90:ce:cc:62:f7:9d:41:09:64:0c:1b:83:12:
         9a:e5:c5:3f:c9:c6:ed:df:a1:10:6e:eb:e7:31:6a:b6:7e:d9:
         07:d7:56:52:aa:d2:bd:32:40:4d:db:b2:94:49:12:35:5a:61:
         a4:d7:98:db:2a:a4:56:77:f7:62:f5:fb:6f:b0:24:31:78:79:
         f6:cb:65:1e:b1:44:38:26:e2:46:9c:3b:80:2b:01:41:ea:ea:
         8b:06:6c:a4:33:f3:3f:00:56:1f:50:72:b0:27:4a:d9:e4:e5:
         24:b2:bd:65:70:51:75:6e:f2:f6:87:34:91:03:be:19:ed:79:
         8b:db:b9:bf:34:13:db:4d:c7:1d:e1:bf:95:a1:60:e3:46:21:
         3e:df:07:6c:c0:b3:95:7a:76:98:fa:71:57:13:71:83:47:41:
         79:b9:69:eb:b3:de:72:2c:e8:34:f4:23:e4:02:b2:83:b9:2f:
         50:fe:07:a8:6d:de:1b:5e:ca:a9:6f:69:dd:8b:5c:58:07:c5:
         7f:9f:91:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----