Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23D6812EAC5C11F1BA630815CF1D38B0.roa
File:                     23D6812EAC5C11F1BA630815CF1D38B0.roa (raw, json)
Hash identifier:          aSRti3ZtsC3Kp6mNft7rlSUw4IS5t+t6yCpxIs+hM4g=
Subject key identifier:   F0:33:C7:1B:9C:7B:E2:38:36:21:43:04:C3:7B:4A:E6:CC:AE:90:1E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E6B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23D6812EAC5C11F1BA630815CF1D38B0.roa
Signing time:             Wed 09 Sep 2026 14:38:37 +0000
ROA not before:           Wed 09 Sep 2026 14:38:32 +0000
ROA not after:            Tue 29 Sep 2026 14:38:32 +0000
asID:                     214483
IP address blocks:        154.86.2.0/24 maxlen: 24
                          154.86.3.0/24 maxlen: 24
                          154.86.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 00:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124592 (0x1e6b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  9 14:38:32 2026 GMT
            Not After : Sep 29 14:38:32 2026 GMT
        Subject: CN=6aa16f6d-423d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:10:2d:54:6f:fb:cd:f7:bd:be:7d:35:30:7e:
                    ba:2e:9c:9f:a0:9e:45:b7:c9:86:f4:50:2a:0c:5c:
                    94:e6:67:76:d9:75:1c:d8:71:7a:88:c8:f9:b0:7c:
                    6e:bf:7a:3e:fa:fb:17:da:d7:4b:20:a8:9c:b8:6a:
                    37:8b:e5:43:19:26:17:7b:31:34:3f:23:8f:eb:74:
                    e5:58:97:1c:30:56:fe:6f:32:9c:b5:ad:58:9a:d9:
                    af:16:04:af:76:ea:b7:21:c9:89:23:36:07:6e:ba:
                    8a:72:4c:86:fc:c4:a1:34:45:00:ee:e1:ca:8b:84:
                    1f:d9:db:af:5a:e0:18:95:75:94:f0:33:de:c7:b3:
                    10:ff:e7:84:65:2d:a9:48:b8:bf:4a:a3:33:65:46:
                    b8:0f:4b:2e:bb:60:0d:e7:e6:19:49:79:07:3c:86:
                    44:81:fa:74:35:36:72:2f:f1:c3:35:bd:6b:c6:fa:
                    73:0a:08:41:1f:2d:f3:dc:c5:cb:37:fd:ba:4a:aa:
                    ad:dd:89:50:c5:2b:8a:e9:eb:b2:b0:e1:a2:37:fa:
                    c5:df:2f:33:44:e2:67:9d:b7:29:3e:3f:d6:fa:c0:
                    94:5a:83:35:60:96:ed:2b:b4:c6:95:05:cf:2d:a3:
                    34:e1:d6:a1:2e:b3:cf:79:14:b9:21:df:89:f0:4b:
                    22:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:33:C7:1B:9C:7B:E2:38:36:21:43:04:C3:7B:4A:E6:CC:AE:90:1E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23D6812EAC5C11F1BA630815CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.2.0/23
                  154.86.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:ba:e7:51:4a:8d:26:b4:da:cc:60:53:98:d0:64:d2:3e:dd:
         61:23:3e:19:bc:a6:97:fc:4f:77:9b:20:5e:ed:04:da:63:7c:
         d4:c7:11:ba:db:7a:8a:9d:67:5c:cf:46:94:02:55:52:97:d2:
         8d:58:ef:80:76:42:ce:e1:7c:6e:fd:42:cf:c4:79:a1:ad:23:
         74:ad:18:7e:c4:9d:da:e5:cf:9f:af:91:72:a3:d1:06:93:0c:
         05:62:d8:0f:d7:4b:fa:41:41:87:57:c3:85:f4:ba:b8:bd:b4:
         60:9c:d7:04:68:3c:36:87:bf:a2:fc:55:dd:03:73:22:8e:36:
         21:f9:0f:c3:06:1d:4b:53:c4:cb:83:27:22:87:9f:36:82:91:
         5d:78:d6:31:51:59:39:6d:9c:0a:f5:d3:a6:13:e3:bd:f4:6b:
         e0:b4:d5:4d:13:5b:df:d6:c9:9d:df:92:f9:9b:12:87:8c:eb:
         4e:19:96:6b:a3:59:74:e4:b5:62:67:3f:bd:61:73:2e:c8:14:
         be:72:ae:24:2e:5f:b0:63:24:c0:60:82:a9:37:f2:0e:c3:c6:
         98:20:c1:b4:4c:7e:ac:70:f4:96:6c:05:6a:53:17:2a:4d:d3:
         26:a8:1d:b9:88:f8:eb:be:89:13:fa:e5:0a:13:4a:c7:7a:c7:
         8e:77:77:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----