Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EA0BBA09F9311F1B8F0A2AECE1D38B0.roa
File:                     1EA0BBA09F9311F1B8F0A2AECE1D38B0.roa (raw, json)
Hash identifier:          Fu2JnB9AkIQDEAKpoLlVP/rXHamLDcpPsX6TmxY5cO8=
Subject key identifier:   E3:6C:86:A7:B3:1C:09:D4:B9:AF:37:FC:43:58:73:7D:63:CE:2C:37
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E217
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EA0BBA09F9311F1B8F0A2AECE1D38B0.roa
Signing time:             Mon 24 Aug 2026 08:09:25 +0000
ROA not before:           Mon 24 Aug 2026 08:09:21 +0000
ROA not after:            Tue 22 Sep 2026 08:09:21 +0000
asID:                     40779
IP address blocks:        154.94.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123415 (0x1e217)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 24 08:09:21 2026 GMT
            Not After : Sep 22 08:09:21 2026 GMT
        Subject: CN=6a8bfc35-2663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1a:f9:4c:fe:89:19:14:4d:e8:5a:f7:8c:bd:
                    de:4c:fb:5c:2c:63:4e:4f:c8:34:b4:04:d1:1f:79:
                    c4:86:71:87:87:c8:8c:ad:d9:61:20:af:3a:21:7d:
                    de:d3:17:6d:e0:0a:64:50:29:66:36:2f:5b:76:b0:
                    3d:c7:8b:d9:e5:9d:f8:b3:b7:0f:d3:b5:4d:44:75:
                    fc:2b:d2:8d:61:c2:55:e6:cc:fc:37:9c:32:9c:5e:
                    f5:c0:79:72:f3:76:ae:4c:20:2f:2a:37:db:de:2b:
                    05:ef:b3:92:ec:7f:32:7f:6b:71:a7:9e:77:64:44:
                    d5:87:3a:6c:33:f8:9d:50:53:4a:b9:e5:d8:af:bc:
                    c3:45:1e:3c:c5:fd:e5:59:49:f7:99:2f:c5:e0:8a:
                    73:d2:e8:16:32:14:5f:10:b3:90:97:19:46:06:fe:
                    95:66:6a:1a:31:65:07:67:33:83:2a:8a:77:98:8f:
                    2e:b5:d6:34:d9:01:d3:5e:91:94:6a:e8:98:cc:2d:
                    f5:49:2b:eb:ac:07:63:99:c1:06:c6:55:26:5e:46:
                    d6:cc:f5:4b:23:1c:2e:12:e2:d6:e1:28:95:0a:05:
                    53:94:3d:99:fd:4d:ab:6d:69:83:50:af:17:cc:c0:
                    94:9c:13:6e:53:9f:3e:85:0f:84:cb:f6:d2:78:cc:
                    0b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6C:86:A7:B3:1C:09:D4:B9:AF:37:FC:43:58:73:7D:63:CE:2C:37
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EA0BBA09F9311F1B8F0A2AECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a3:61:17:7a:16:0b:cc:e0:43:a3:5e:71:6f:c1:74:fb:a0:0d:
         33:80:8a:e3:f3:04:07:4e:04:10:76:d2:07:d0:e5:c6:4e:26:
         b5:70:87:6c:f4:6a:5b:17:4d:db:5c:ad:ff:09:b2:5e:8b:11:
         0f:36:e3:61:1c:83:64:c7:ad:11:81:39:df:1b:1a:3f:0f:68:
         3e:9a:0d:2a:9d:f0:49:87:11:dc:10:c0:ba:97:a6:d1:3d:f9:
         2f:9f:5a:99:25:4c:d4:ee:2d:02:ed:06:77:24:3f:d5:73:5e:
         04:a6:02:b9:fc:fb:50:ac:05:23:0c:32:55:d7:85:6a:32:84:
         13:61:51:20:fb:ed:93:58:95:98:90:4c:0f:8c:b7:3b:a1:38:
         56:69:28:69:0f:37:7b:a0:22:9a:46:ca:ec:f2:ba:db:64:af:
         1b:c9:7d:5b:00:4c:bf:f1:d2:f8:54:28:e9:21:01:37:51:36:
         08:a4:48:46:b4:d3:c6:87:22:94:c0:0a:b9:f0:62:bb:56:01:
         0c:d2:91:87:36:56:0d:b6:6b:b7:d5:95:fb:61:61:34:b9:22:
         ad:c9:a5:d9:d1:4e:86:9e:58:32:6c:1f:ae:71:bf:f4:59:dc:
         f8:d5:8f:4d:74:0e:c9:8a:42:ba:e6:47:14:86:28:d5:c6:cf:
         7d:d0:20:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----