Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23070B3A9D4111F1968AC9E5CE1D38B0.roa
File:                     23070B3A9D4111F1968AC9E5CE1D38B0.roa (raw, json)
Hash identifier:          YDhZUPpNo3463Dv2sdcsEmSYWNMm2vrtvoOD+NZOtVc=
Subject key identifier:   4C:EE:57:88:6C:A5:19:FD:56:06:04:CA:8E:4A:DC:36:08:53:8E:D6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E178
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23070B3A9D4111F1968AC9E5CE1D38B0.roa
Signing time:             Fri 21 Aug 2026 09:17:31 +0000
ROA not before:           Fri 21 Aug 2026 09:17:27 +0000
ROA not after:            Sat 28 Nov 2026 09:17:27 +0000
asID:                     395886
IP address blocks:        154.219.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123256 (0x1e178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 21 09:17:27 2026 GMT
            Not After : Nov 28 09:17:27 2026 GMT
        Subject: CN=6a8817ab-5871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e7:de:39:bb:c9:66:3c:50:65:eb:f8:7d:3f:
                    5f:cb:43:ba:99:09:fe:7d:dc:77:86:02:24:89:ca:
                    3d:f2:e5:1c:d3:b6:1e:94:b5:75:58:a1:32:97:57:
                    aa:f2:00:66:59:12:4c:52:2d:76:99:73:a1:5d:d6:
                    bb:ac:86:3c:ae:47:5b:10:f3:f7:1e:c5:11:44:b5:
                    e3:6d:ba:eb:c2:a3:0f:75:9a:04:fe:5f:d6:d7:bd:
                    14:0e:21:ef:d7:59:f2:80:d5:f6:34:c1:97:c1:65:
                    41:ba:7c:a2:2d:d0:d7:e3:6b:83:24:1b:52:e2:b6:
                    42:12:ce:a9:fd:62:29:46:50:2f:32:28:86:78:9d:
                    97:67:53:87:c1:f2:6c:3b:20:92:53:55:9c:d2:fa:
                    58:b6:fc:a7:8f:de:58:68:0b:eb:11:4b:a2:d3:8f:
                    28:a8:c5:c5:1e:b7:bb:e6:d0:92:1c:25:51:7e:d1:
                    42:b0:7e:18:4a:78:d0:6f:76:6b:2f:6b:00:3c:6a:
                    d0:29:e5:01:33:58:99:91:65:1c:99:a4:94:da:0b:
                    c5:ba:b1:d2:4b:e4:d2:22:f7:a6:c6:c1:2e:79:8e:
                    86:8e:f7:4a:bd:de:70:8c:74:3f:25:d4:ed:f6:63:
                    e4:1a:ea:dd:ac:da:c6:83:66:27:ae:af:18:03:77:
                    8e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EE:57:88:6C:A5:19:FD:56:06:04:CA:8E:4A:DC:36:08:53:8E:D6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23070B3A9D4111F1968AC9E5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.219.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         59:1a:0a:f4:d7:c2:77:0f:a4:35:0b:3e:e5:0e:9a:d4:20:66:
         3a:54:04:f3:aa:fd:33:7d:12:b9:57:35:ca:3f:ec:e6:bf:47:
         6e:17:48:e2:cd:19:1b:be:ab:5b:96:ee:91:e4:0c:85:3b:66:
         77:18:fd:e6:f6:50:cc:da:17:5e:c4:c2:99:6a:8f:aa:da:88:
         20:d4:07:66:92:f1:80:c0:a8:6b:46:3f:c9:e1:92:0c:9a:e3:
         22:66:57:78:16:f6:8d:1b:a2:af:31:a4:aa:67:9f:10:ad:96:
         de:cf:34:f4:42:d6:cf:70:03:83:30:7e:c5:3a:d9:11:9e:27:
         62:80:49:24:3c:36:b1:b1:65:a7:0a:da:e6:b8:8f:13:d8:70:
         33:c4:a8:f9:bd:33:c8:26:f0:53:6c:16:4b:d3:e7:87:4b:ba:
         7c:b2:a1:3d:cb:05:06:bb:5c:f3:3b:91:85:16:f0:a5:7c:5b:
         bb:89:d4:5f:de:71:7a:46:a7:b0:a5:25:0e:e6:5a:f5:f4:af:
         ff:1d:61:1d:a6:ad:9d:b5:f9:32:8a:ae:c5:47:f6:1a:26:9e:
         d8:d5:a1:d1:58:68:84:17:cc:44:7f:50:88:42:7f:57:dd:c9:
         d9:d8:3b:ba:b8:10:08:83:8e:86:ba:7c:b2:49:90:3b:bd:85:
         1f:4b:4c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----