Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12B81584A2B011F1BAB4EF13CF1D38B0.roa
File:                     12B81584A2B011F1BAB4EF13CF1D38B0.roa (raw, json)
Hash identifier:          ufaaVf6Nyt4In93uH48FGXZEc9s2LV75kL0qooZ/A8c=
Subject key identifier:   8D:CF:70:5C:2D:19:D2:F5:50:71:9C:5C:14:88:FB:BC:94:26:4A:FF
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E3C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12B81584A2B011F1BAB4EF13CF1D38B0.roa
Signing time:             Fri 28 Aug 2026 07:14:14 +0000
ROA not before:           Fri 28 Aug 2026 07:14:10 +0000
ROA not after:            Mon 07 Sep 2026 07:14:10 +0000
asID:                     138152
IP address blocks:        154.211.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123844 (0x1e3c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 28 07:14:10 2026 GMT
            Not After : Sep  7 07:14:10 2026 GMT
        Subject: CN=6a913546-ebe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3d:62:25:1b:f1:9a:c8:6d:75:84:39:93:0d:
                    d8:0d:7b:a3:c0:b7:98:1c:29:9b:18:d4:23:da:8b:
                    41:a6:72:a5:7d:fa:3e:7f:b3:c3:44:77:06:09:a7:
                    dc:5a:1a:1f:6e:8e:d4:17:cd:de:5e:fe:70:d9:99:
                    a3:01:ce:28:50:0f:b5:47:f7:43:c9:22:64:00:62:
                    a7:dd:15:89:ee:6f:ea:32:8f:43:2b:5c:5f:51:98:
                    32:98:3b:3f:61:c4:3f:82:ae:d5:d7:72:6b:96:06:
                    c9:1a:99:9f:51:ab:61:62:38:36:3c:f3:30:54:b9:
                    0c:d6:5f:d3:78:38:cc:9e:1e:ea:ce:c8:a8:05:a2:
                    a4:4b:83:02:cf:6d:c6:c2:71:a8:48:60:92:26:5f:
                    4c:8a:bf:29:68:fe:93:3c:af:32:4e:31:8a:40:5d:
                    2c:4b:d5:76:66:68:25:55:2d:59:0c:6b:90:f8:ea:
                    ed:6a:b2:7c:ac:6a:1d:d4:70:6e:a7:e4:7e:15:5a:
                    a0:6d:f0:f2:e4:73:17:97:16:38:ac:37:eb:a8:da:
                    31:b2:ad:4a:99:93:3c:3f:93:a5:30:a6:5c:ef:cd:
                    1f:0e:7c:51:18:68:a5:4c:f4:25:54:a3:cb:b7:90:
                    fe:52:eb:29:34:36:c8:70:45:4a:e0:a3:08:e9:1b:
                    b4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CF:70:5C:2D:19:D2:F5:50:71:9C:5C:14:88:FB:BC:94:26:4A:FF
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12B81584A2B011F1BAB4EF13CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.211.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:69:07:55:4c:79:7e:c2:a4:d1:5a:e7:cf:72:b6:54:38:06:
         c7:4b:c1:aa:6c:e8:43:4b:00:6e:2e:38:94:54:10:ff:fc:fa:
         07:a5:e8:55:ed:ac:06:69:65:e0:5e:0c:0c:df:cf:96:9d:cd:
         1d:d0:3c:9a:25:c2:b5:a2:97:82:0e:94:e4:5b:3a:f2:2e:44:
         a0:24:89:7d:da:23:76:7d:86:90:04:bf:05:a1:16:52:9c:cd:
         24:3f:e7:96:1f:a3:53:15:ac:50:00:0a:2f:bb:48:bc:d8:bf:
         27:fa:bc:65:ad:94:80:72:de:da:2f:8b:1d:ac:f3:d5:c3:3d:
         e2:d7:e7:df:45:03:26:ca:a3:98:14:f2:69:78:98:96:c8:7a:
         00:1d:09:b1:8e:55:e4:82:dc:cf:6e:6a:28:f8:1b:ad:9d:8c:
         89:29:22:2c:b0:29:94:33:6a:ec:06:65:78:4f:59:91:e3:a4:
         85:29:b7:5a:71:8f:81:cc:7b:d7:00:30:8d:19:6b:4d:93:83:
         34:2b:dd:c9:95:8f:1b:b2:be:1b:41:77:3c:09:9b:97:6c:d9:
         4d:8d:a5:4c:d9:36:e0:82:85:f2:a5:b8:61:ff:60:7a:f6:49:
         4d:8f:44:dd:82:93:ad:09:a5:ed:d8:b5:6c:bb:29:e5:30:64:
         1b:5f:29:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----