Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16D251469BB411F18AD292FACE1D38B0.roa
File:                     16D251469BB411F18AD292FACE1D38B0.roa (raw, json)
Hash identifier:          37J3dmdYOiJVjdOXMWzMypK2/VJApV8I9bjf0dsQaUo=
Subject key identifier:   60:0E:C4:CB:21:02:B5:70:C8:D1:AE:10:E8:D7:6D:37:E4:E5:5E:07
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E00D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16D251469BB411F18AD292FACE1D38B0.roa
Signing time:             Wed 19 Aug 2026 09:55:21 +0000
ROA not before:           Wed 19 Aug 2026 09:55:17 +0000
ROA not after:            Thu 19 Nov 2026 09:55:17 +0000
asID:                     55020
IP address blocks:        154.91.48.0/20 maxlen: 24
                          154.91.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122893 (0x1e00d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 19 09:55:17 2026 GMT
            Not After : Nov 19 09:55:17 2026 GMT
        Subject: CN=6a857d89-0525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a8:d1:87:60:b7:d1:e9:d2:4e:c5:fa:e3:16:
                    1c:72:96:90:0b:a0:bd:a2:a1:7a:74:16:1a:47:38:
                    e6:31:06:25:2b:43:67:d6:b3:f8:63:35:50:40:31:
                    0f:59:c6:35:d1:10:5f:63:e0:3e:e3:a0:3d:c9:33:
                    86:95:c2:9b:59:63:af:5a:3e:2a:d7:86:1b:6e:50:
                    dc:6d:1b:e0:50:f6:b1:9b:f2:45:6b:1d:da:b3:9c:
                    de:d6:0d:13:41:ea:05:02:c7:96:63:cc:eb:bf:e2:
                    a7:60:15:df:de:66:4a:ec:fb:3d:a7:58:00:4c:59:
                    ae:89:81:59:47:d7:9d:30:75:60:cb:b9:22:79:e4:
                    6b:85:34:af:4d:41:4b:1a:b8:e3:29:37:31:53:f8:
                    c5:dc:96:db:43:aa:82:22:df:a3:8c:9f:af:9f:82:
                    a1:e5:23:d7:07:09:c5:37:80:ac:bd:a8:a0:5f:67:
                    41:bf:ca:e5:42:68:3a:89:43:b3:12:ab:11:49:48:
                    4e:a3:7c:71:56:0b:b3:60:4b:5b:19:01:2a:6d:32:
                    58:f7:5f:48:82:55:91:1a:db:ec:c0:da:7c:91:cd:
                    fe:48:38:29:03:3f:f7:7d:ac:cc:4f:c6:c5:47:db:
                    54:c3:a9:f9:81:3b:21:bd:e8:da:20:5f:5d:a8:55:
                    03:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0E:C4:CB:21:02:B5:70:C8:D1:AE:10:E8:D7:6D:37:E4:E5:5E:07
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16D251469BB411F18AD292FACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.91.48.0/20
                  154.91.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         34:5f:0e:36:66:4d:15:a4:86:4a:b2:94:cc:da:f2:b5:c7:87:
         39:50:f3:1d:de:da:f8:ba:bc:4f:e4:cf:1e:66:9f:74:58:2c:
         c8:34:90:d1:98:ef:ff:1a:8a:2a:8e:a4:d8:84:ce:2b:71:89:
         3d:4d:83:68:6b:da:de:54:aa:18:1c:6a:41:94:25:54:09:e3:
         82:a4:57:0e:a2:fa:40:7c:72:f6:45:00:64:08:b0:4c:84:bd:
         e1:d4:65:64:bf:11:fd:0d:7d:fe:ab:14:12:b0:da:6d:ad:f6:
         c0:4a:22:be:c5:2c:d6:13:c6:7c:87:67:41:8f:a4:5a:1d:e0:
         37:7e:15:8f:6a:3c:50:1e:6f:5e:1f:76:40:4f:13:5c:29:09:
         84:91:66:2b:7e:30:82:91:cf:a1:43:41:9a:7a:9c:36:ec:9f:
         f4:e1:f3:fa:d1:85:2a:78:f0:d3:54:d7:29:d9:54:ac:07:bc:
         60:fb:04:5d:d4:44:ef:97:6e:07:c3:30:02:15:95:ab:80:bd:
         0e:a5:ac:dc:76:6a:63:e4:71:8d:f8:12:15:e4:cf:83:42:79:
         3e:03:11:9a:85:65:38:6b:9e:19:00:d2:5b:11:45:e0:39:bc:
         0f:c6:65:56:a2:e9:62:3a:40:50:d0:10:23:2a:05:14:b5:94:
         58:a3:06:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----