Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/091D46BA97AD11F1B6B9BD15CF1D38B0.roa
File:                     091D46BA97AD11F1B6B9BD15CF1D38B0.roa (raw, json)
Hash identifier:          KaXX2qIlzbsigUzOjQu2uusUTZBX73N1WqzHZvgV4Cg=
Subject key identifier:   C9:0C:6C:ED:BA:98:A2:E9:10:E1:51:A3:8B:2A:96:6B:5E:65:5E:03
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DF1A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/091D46BA97AD11F1B6B9BD15CF1D38B0.roa
Signing time:             Fri 14 Aug 2026 06:54:47 +0000
ROA not before:           Fri 14 Aug 2026 06:54:42 +0000
ROA not after:            Sat 19 Sep 2026 06:54:42 +0000
asID:                     6079
IP address blocks:        154.221.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122650 (0x1df1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 14 06:54:42 2026 GMT
            Not After : Sep 19 06:54:42 2026 GMT
        Subject: CN=6a7ebbb6-e17d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:36:71:e7:97:e5:29:7e:cd:90:ad:32:7d:63:
                    6b:6e:1c:f3:4b:ba:19:37:29:bf:f2:d2:90:29:20:
                    ed:06:92:17:ab:c9:34:f5:a5:2d:e2:bb:44:a6:49:
                    ff:5d:e9:20:46:b1:f8:3c:a6:5d:a7:97:8b:d3:70:
                    06:c3:d0:7b:37:17:1a:35:02:ec:42:88:68:d0:58:
                    ad:35:5f:bc:2d:96:71:6d:0b:5c:dd:18:fc:62:62:
                    a0:b2:42:c6:74:8a:f7:ca:84:a2:34:96:dc:ab:13:
                    66:35:36:8b:41:ec:5b:7c:ed:a3:2e:48:e6:fb:a6:
                    d6:d1:91:63:cf:69:23:c2:57:cb:82:ea:19:de:00:
                    a8:12:50:b7:7a:86:24:24:f7:af:22:cd:68:b6:16:
                    fb:81:ff:1b:99:43:e5:2f:37:9a:02:e2:62:65:13:
                    60:af:db:a5:9b:34:5d:34:d9:70:72:26:26:f4:a0:
                    63:0d:cb:fd:e3:86:9b:b4:44:2d:09:cb:cc:9d:57:
                    27:3c:5d:88:af:38:6a:ae:43:54:f1:e5:46:f7:60:
                    e6:80:4b:4a:25:20:66:21:06:cb:39:d1:9a:1a:ea:
                    2d:3c:00:1b:c8:9b:29:85:bd:18:35:3e:d2:8d:5f:
                    ed:f9:0e:97:37:37:5f:45:e0:de:e6:3f:eb:ba:6b:
                    41:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0C:6C:ED:BA:98:A2:E9:10:E1:51:A3:8B:2A:96:6B:5E:65:5E:03
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/091D46BA97AD11F1B6B9BD15CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.221.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9f:78:4f:c5:6d:f4:d4:b5:15:a7:28:ba:70:f7:7b:08:10:be:
         e6:28:96:f1:62:13:97:b5:86:5c:b3:02:ca:c7:6d:aa:b4:66:
         d5:fd:f3:ee:4d:45:01:61:57:87:8c:86:fa:ec:db:da:cc:f4:
         0b:df:28:6a:7f:12:80:fa:3f:0c:33:0e:79:70:15:e0:66:f0:
         ca:82:1f:a2:85:44:84:cb:63:94:16:3c:e4:b9:44:7e:0c:34:
         da:55:26:49:2f:a2:37:16:bc:38:8f:92:1f:7f:3b:ae:50:dd:
         a7:c2:82:79:30:ef:9a:38:97:25:3f:ef:aa:1c:09:bb:7c:c0:
         0d:4d:9b:60:27:12:e6:00:a2:9f:e4:d0:5f:fd:3b:6e:c2:3a:
         05:fa:d7:5f:07:8c:9c:8a:dc:8e:27:f4:42:9c:18:f5:d4:cc:
         63:cd:fe:0e:a8:44:eb:3f:db:57:10:8b:41:cf:63:65:e3:c3:
         a9:25:a0:26:87:02:81:c6:dd:b4:41:f3:77:8b:97:03:10:a9:
         bb:f8:b2:2f:06:94:1a:02:a7:53:60:7f:1c:a1:c8:b2:26:29:
         d1:38:6e:94:8b:dc:b8:73:5e:4f:06:c8:82:23:2d:84:0e:d0:
         0d:c0:33:55:19:d4:9a:65:19:7a:e3:a4:32:36:8b:37:78:5a:
         b3:e9:80:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----