Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/323ECAA09F9B11F19EED51E0CE1D38B0.roa
File:                     323ECAA09F9B11F19EED51E0CE1D38B0.roa (raw, json)
Hash identifier:          sftrSJ/iKMyy5C5IZSsyC+g3iJ1bqfOjrc9juY3QoC8=
Subject key identifier:   4E:B7:1B:AF:FF:91:2A:0B:F3:BD:6A:FE:F9:82:A2:AD:4F:3C:9E:BB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E231
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/323ECAA09F9B11F19EED51E0CE1D38B0.roa
Signing time:             Mon 24 Aug 2026 09:07:14 +0000
ROA not before:           Mon 24 Aug 2026 09:07:10 +0000
ROA not after:            Thu 01 Oct 2026 09:07:10 +0000
asID:                     139880
IP address blocks:        154.194.128.0/18 maxlen: 24
                          154.209.160.0/19 maxlen: 24
                          154.214.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 07:34:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123441 (0x1e231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 24 09:07:10 2026 GMT
            Not After : Oct  1 09:07:10 2026 GMT
        Subject: CN=6a8c09c2-ab99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:73:7d:30:71:74:c1:3c:81:68:fa:a3:dd:f1:
                    46:ea:6e:00:73:09:45:52:e2:0a:3f:70:f6:7c:28:
                    39:b7:e8:aa:c7:00:cc:2e:14:be:13:e5:8c:10:b2:
                    d4:f8:ca:a4:f5:be:3b:fb:ff:13:9d:17:2d:fa:db:
                    4f:0d:d8:82:89:2c:d2:18:1f:f1:c8:98:80:6f:e4:
                    da:0e:a9:e0:89:26:dc:6f:72:1a:78:c5:1b:12:3b:
                    d4:12:ca:5e:95:99:03:b4:72:0a:60:80:f1:11:32:
                    88:dd:37:12:99:89:4b:36:6a:88:af:aa:7d:6d:61:
                    1a:9c:8a:87:79:42:4d:45:0b:8c:56:7a:34:f5:ab:
                    94:3b:67:7d:60:2a:91:87:a1:67:fa:a4:6b:bf:ad:
                    b8:6d:71:8b:2b:39:58:c1:e8:3b:12:00:ae:1c:4e:
                    af:1e:b8:67:b8:5f:0e:e5:48:35:cc:f5:07:27:b2:
                    0b:71:e0:6b:a4:36:12:39:97:73:30:84:89:20:e7:
                    78:c9:8a:07:5b:64:1f:1e:b3:7a:aa:70:e8:84:b1:
                    ed:0b:4f:0d:5c:3c:ae:17:f4:74:7f:2a:55:9c:ba:
                    b0:8f:02:2e:37:0a:fb:f6:dd:08:ab:19:13:9a:19:
                    46:ea:2c:1b:be:fd:90:ec:d2:73:a6:5c:e7:17:76:
                    c0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B7:1B:AF:FF:91:2A:0B:F3:BD:6A:FE:F9:82:A2:AD:4F:3C:9E:BB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/323ECAA09F9B11F19EED51E0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.128.0/18
                  154.209.160.0/19
                  154.214.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         03:d9:97:15:7d:41:9f:74:87:1f:c5:22:e5:f0:da:80:68:47:
         d2:85:e0:86:af:b2:e6:c1:8f:2c:db:3d:be:d0:ba:26:ad:b7:
         1f:8b:0f:87:96:bd:02:83:b3:15:a7:b4:8f:34:19:50:a6:61:
         89:d7:13:99:04:92:6b:6c:10:b1:ae:c8:f2:17:0d:e5:82:64:
         ca:9e:a8:7d:96:a5:f3:08:2e:ab:a0:6a:29:32:86:8c:5e:c9:
         4b:01:33:cd:71:26:cd:65:30:32:23:35:8f:51:30:80:a2:f4:
         b3:ba:f1:65:6f:7a:66:04:1a:39:7f:8d:46:7a:60:3e:58:62:
         bf:6c:7b:cb:94:cf:36:8c:af:88:11:c6:92:79:be:81:df:bf:
         06:1d:79:e7:45:7d:7e:62:96:93:36:78:c7:db:57:1e:06:3c:
         96:44:73:48:d2:94:f3:ea:60:9c:a7:40:11:62:4a:18:04:95:
         74:92:a2:8a:b7:6a:f8:53:19:7c:12:18:1e:68:af:df:d2:f1:
         61:10:25:45:82:5f:29:58:30:69:74:c0:ee:6f:40:b2:c2:79:
         f6:e3:5e:e6:b4:4b:44:15:5b:51:bc:af:f0:85:8e:2e:84:c8:
         2c:52:8d:17:aa:36:b7:18:af:41:93:79:5f:e4:e3:57:ab:4e:
         df:f8:df:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----