Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3353EACCA12811F18DA4E7CACE1D38B0.roa
File:                     3353EACCA12811F18DA4E7CACE1D38B0.roa (raw, json)
Hash identifier:          YjYOx9L+aisSKo1JJ783tGgjfGanxT57AEr2LKThrQ0=
Subject key identifier:   FD:9F:90:16:C0:60:4F:60:ED:B2:B2:6C:1F:03:90:F0:44:65:02:BC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E346
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3353EACCA12811F18DA4E7CACE1D38B0.roa
Signing time:             Wed 26 Aug 2026 08:29:06 +0000
ROA not before:           Wed 26 Aug 2026 08:29:02 +0000
ROA not after:            Sat 25 Aug 2029 08:29:02 +0000
asID:                     17561
IP address blocks:        154.85.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123718 (0x1e346)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 26 08:29:02 2026 GMT
            Not After : Aug 25 08:29:02 2029 GMT
        Subject: CN=6a8ea3d2-535a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8b:eb:35:41:4f:21:b4:72:3e:08:5a:8c:1a:
                    13:5f:f6:db:4e:e8:06:03:21:e0:70:48:8a:0a:64:
                    b6:f7:fe:53:60:6b:aa:65:71:c5:8f:cf:99:82:32:
                    ca:ca:a6:ac:cd:03:1e:88:9e:a9:fd:c4:25:b5:fa:
                    fc:23:07:85:99:6e:b5:71:58:6b:f2:9f:f9:57:10:
                    12:df:81:0f:3a:3b:21:d1:b6:53:88:0b:5e:d1:d9:
                    3a:2e:ac:7d:18:7c:9c:56:6d:0f:bf:f4:6e:8e:ba:
                    c0:e8:06:51:c1:26:73:a1:0a:6d:6f:59:bc:c4:17:
                    9c:55:7f:f2:11:a9:c5:86:d0:00:d2:67:4f:5f:36:
                    ca:cd:bb:46:12:58:b7:f9:52:bb:de:f5:c2:39:a1:
                    75:a2:6b:4d:51:88:6e:f4:4d:51:03:ac:ef:e2:e4:
                    8c:21:8d:58:1f:58:d4:4d:aa:28:68:59:be:9c:6a:
                    7d:35:2b:55:19:ae:de:a2:40:4b:ea:4d:d4:cd:4d:
                    f6:65:7e:79:80:2f:7c:0e:1e:14:10:52:69:c0:4b:
                    58:7b:7b:85:8f:6a:4d:15:3e:76:dc:f1:3b:01:5d:
                    6b:3f:97:a3:6f:1f:6c:1f:99:f7:18:c9:33:8d:d6:
                    23:3e:0f:61:ad:ca:76:e1:4b:6b:ca:84:0a:3f:8e:
                    4e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9F:90:16:C0:60:4F:60:ED:B2:B2:6C:1F:03:90:F0:44:65:02:BC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3353EACCA12811F18DA4E7CACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.85.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:af:e3:0e:02:2a:b0:74:94:bd:87:9b:ce:90:80:25:22:95:
         f9:a0:00:43:95:93:10:49:90:ce:f3:b7:d3:72:31:fc:ab:fd:
         5d:cd:0f:ee:d5:a9:4e:17:62:9e:7d:aa:c0:19:ed:f6:bb:bd:
         57:cc:c7:7c:41:e7:67:7d:0d:13:e4:17:e6:0f:d9:91:bb:64:
         9f:13:93:69:61:90:e2:57:76:da:df:8d:4d:0a:75:ea:a7:17:
         66:d0:38:6c:bb:8d:26:17:03:ab:69:27:51:50:db:54:a5:27:
         84:cf:ed:49:01:7b:b4:e1:23:04:3b:65:75:56:9f:4f:e9:3a:
         f8:dc:03:17:74:ac:33:ad:ff:90:32:8f:bf:8b:82:ca:2e:d8:
         f8:71:19:94:0d:79:9e:0c:f4:67:21:2f:c7:f6:36:a5:7b:3a:
         c0:57:4c:e4:19:06:da:ec:9a:c1:c2:71:85:57:50:e9:2c:a7:
         14:83:e9:1d:07:e1:0a:2a:2c:06:76:46:fa:e4:ac:7a:1b:a6:
         c6:bf:31:71:72:fd:9d:20:df:2a:24:2f:2c:5e:56:42:f1:d5:
         5a:1a:14:7f:09:c7:14:4d:ad:81:e6:38:f3:43:d4:5e:f7:47:
         9e:1e:16:7f:85:f6:bd:cc:5c:9e:07:54:a4:f2:e3:8a:26:9e:
         78:1a:d2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----