Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33BAA6B0A6B211F1B90348D0CE1D38B0.roa
File:                     33BAA6B0A6B211F1B90348D0CE1D38B0.roa (raw, json)
Hash identifier:          GM+fHgkCJ+yyOq+ACIPV3CYxNt7cQDW+b811tURjFlY=
Subject key identifier:   7E:A4:05:DF:6D:54:3B:34:CA:22:76:9D:9D:F3:6D:60:6D:3C:14:BC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E4A7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33BAA6B0A6B211F1B90348D0CE1D38B0.roa
Signing time:             Wed 02 Sep 2026 09:39:33 +0000
ROA not before:           Wed 02 Sep 2026 09:39:29 +0000
ROA not after:            Mon 12 Oct 2026 09:39:29 +0000
asID:                     212042
IP address blocks:        154.83.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124071 (0x1e4a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  2 09:39:29 2026 GMT
            Not After : Oct 12 09:39:29 2026 GMT
        Subject: CN=6a97eed5-742b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0d:09:e4:45:18:12:eb:1f:9a:92:26:c6:05:
                    55:66:b2:3a:b7:77:ad:77:ab:2a:04:79:28:7f:78:
                    8a:74:ed:98:da:0a:e6:99:4f:5e:f0:90:0b:6a:b6:
                    81:e4:4a:99:9c:d7:d2:ea:1a:e0:61:60:a7:38:e3:
                    ca:02:e6:37:ca:b5:e6:b2:03:6a:7c:d9:d7:6f:37:
                    23:92:5c:d4:d5:5c:98:81:39:c7:7e:fe:40:03:a6:
                    59:79:c9:00:88:1b:93:5a:d4:48:74:c4:08:e8:1c:
                    5d:e3:50:23:8c:85:58:5b:eb:2a:6a:17:82:eb:dc:
                    2d:1b:ca:3d:c3:e9:1d:d7:33:76:d8:90:37:ae:85:
                    71:ac:1c:54:fb:15:ae:6e:15:89:dc:78:e5:39:dd:
                    52:48:e9:f9:ba:78:6c:0b:ca:aa:8e:8b:fb:a8:42:
                    82:3b:9e:71:d1:17:0e:98:db:47:b7:90:99:60:56:
                    14:43:63:ca:33:64:58:15:3d:dd:69:d0:54:8c:93:
                    7f:26:05:30:df:05:9c:4f:1a:b5:ea:58:54:3c:f1:
                    5e:53:b7:9d:b4:40:1a:05:34:de:a4:34:fc:9d:2d:
                    94:5d:41:79:a9:f9:c8:58:b0:6c:6f:2f:eb:d3:8e:
                    aa:c4:00:42:35:bf:19:63:66:f1:df:02:2c:5e:13:
                    e8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A4:05:DF:6D:54:3B:34:CA:22:76:9D:9D:F3:6D:60:6D:3C:14:BC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33BAA6B0A6B211F1B90348D0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:3e:4a:91:40:5b:b4:7f:05:72:9f:bf:78:39:0e:0b:d4:7e:
         24:fc:39:bd:23:bf:8b:0d:03:c6:00:72:92:6c:90:33:d6:c4:
         9b:56:14:ef:08:a5:92:29:93:47:9b:68:62:b2:1f:48:61:30:
         27:02:38:10:b4:25:67:07:8b:ea:12:40:5f:a2:c7:73:68:5f:
         7c:30:82:58:65:35:03:81:8a:65:15:82:61:17:0b:76:99:b1:
         02:5c:b0:6c:60:16:7d:7b:31:b2:f0:f2:0f:3a:b2:14:4c:8f:
         4e:9b:b5:12:34:0b:c9:4c:c3:34:1e:fb:33:6d:d3:50:15:e8:
         22:69:17:aa:e8:e8:7a:3e:88:c3:13:0c:c6:b5:dd:cd:81:7a:
         cb:5c:e1:01:fc:4d:cc:71:a5:50:9a:36:eb:7c:20:26:db:90:
         29:b7:b7:71:55:d1:f9:04:25:00:cb:de:a5:70:7b:41:eb:cf:
         8f:6b:a2:82:4a:87:ab:60:02:33:1f:5a:92:45:9b:d2:c9:08:
         89:17:44:42:33:53:25:d8:3b:6c:e3:d2:7f:d3:c9:6f:71:92:
         b9:8c:63:0b:27:be:47:46:c9:33:01:d1:30:f1:b1:e6:f4:fb:
         cd:f7:e4:b9:c3:01:55:b0:35:95:f9:af:3e:e2:4e:8e:c2:ca:
         42:f3:eb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----