Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3437AE3496E111F1A3FD53C0CE1D38B0.roa
File:                     3437AE3496E111F1A3FD53C0CE1D38B0.roa (raw, json)
Hash identifier:          xYAZl83jl+tHgHD9ij0g8NQ4WtxgkQ9yFBs46p/eSf4=
Subject key identifier:   22:0F:F8:91:DF:1B:75:BD:CA:B6:7A:ED:E8:39:45:96:C4:00:0B:D9
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DECB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3437AE3496E111F1A3FD53C0CE1D38B0.roa
Signing time:             Thu 13 Aug 2026 06:35:42 +0000
ROA not before:           Thu 13 Aug 2026 06:35:37 +0000
ROA not after:            Thu 10 Sep 2026 06:35:37 +0000
asID:                     17497
IP address blocks:        154.193.16.0/24 maxlen: 24
                          154.193.17.0/24 maxlen: 24
                          154.193.18.0/24 maxlen: 24
                          154.193.19.0/24 maxlen: 24
                          154.193.20.0/24 maxlen: 24
                          154.193.21.0/24 maxlen: 24
                          154.193.22.0/24 maxlen: 24
                          154.193.23.0/24 maxlen: 24
                          154.193.24.0/24 maxlen: 24
                          154.193.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 10 Sep 2026 06:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122571 (0x1decb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 13 06:35:37 2026 GMT
            Not After : Sep 10 06:35:37 2026 GMT
        Subject: CN=6a7d65bd-0611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:87:be:e5:11:35:16:5b:b7:27:0c:81:6c:3e:
                    65:50:9e:51:e2:5f:7e:e4:47:14:36:e9:7a:0a:76:
                    4b:55:a0:f3:db:ba:34:ff:f7:c5:62:8c:01:91:f9:
                    06:db:d6:44:24:da:ca:55:14:a0:d6:c6:d1:5a:69:
                    51:17:82:86:1b:8b:07:39:bb:91:7e:c8:3a:a0:5e:
                    98:ed:42:8e:7c:be:42:34:c2:af:20:f3:ae:e4:39:
                    eb:b4:ea:6b:07:5e:40:a7:df:e4:1a:02:22:a3:3f:
                    e6:32:89:26:10:be:e9:92:cf:36:5e:22:35:ce:92:
                    c3:09:57:32:05:ae:48:29:5f:b9:3d:16:52:9d:1c:
                    19:99:5e:d6:d8:3c:b6:0d:e1:c7:2a:e3:00:f7:81:
                    8d:2e:ff:8d:ba:66:1f:83:77:bd:3f:02:91:f2:62:
                    d0:72:c7:01:95:0c:3c:42:cc:39:8d:b5:ce:e1:f4:
                    0c:d6:3b:75:4c:00:ab:df:4a:ad:ca:2d:74:09:fc:
                    7f:df:56:37:95:92:69:b2:68:92:e1:92:b1:58:4b:
                    a9:b0:57:5d:3a:64:2f:61:2c:10:d9:c4:d3:5a:c6:
                    43:40:09:64:f2:ab:fc:f6:06:cb:7f:7f:9b:ce:5d:
                    fa:da:2a:73:b6:fb:86:08:f3:41:de:2c:4d:52:58:
                    ed:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0F:F8:91:DF:1B:75:BD:CA:B6:7A:ED:E8:39:45:96:C4:00:0B:D9
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3437AE3496E111F1A3FD53C0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.16.0-154.193.25.255

    Signature Algorithm: sha256WithRSAEncryption
         30:47:21:c9:f0:29:77:4a:02:a0:ae:49:dd:b7:9d:4a:97:7e:
         ee:6f:36:e6:6c:30:70:78:1a:89:de:ab:96:d7:d0:c7:50:f0:
         0b:63:5f:26:a4:97:b2:ff:3b:a6:8e:75:fe:74:20:96:3e:49:
         b4:ab:69:07:9c:dc:ba:3a:8d:4a:d7:1d:b4:9b:a6:54:cd:0f:
         d2:93:ed:57:9c:39:b4:f1:d4:64:a1:c3:24:e1:39:e9:6d:99:
         16:ec:ff:99:be:61:8a:32:07:86:1c:1f:d3:d6:90:a2:d9:97:
         ad:42:af:a3:39:c8:86:19:6b:eb:56:cb:eb:e8:97:87:c0:78:
         c8:ff:fa:12:48:4a:50:47:24:6d:c5:93:35:bb:bb:13:84:8d:
         ed:06:74:18:c1:6e:8c:dc:27:8b:42:15:85:b1:02:e0:da:e8:
         a1:b4:33:3d:24:ae:4d:df:a4:30:e5:8e:6c:46:17:29:ea:16:
         ec:33:df:80:f1:ea:0b:9c:2d:04:61:be:11:75:01:28:7d:13:
         68:a6:ca:95:15:24:bc:df:fb:61:5f:28:13:b3:42:8d:e6:8e:
         6d:98:23:e8:af:8c:b8:63:12:c9:03:57:a3:2b:88:4a:70:e0:
         ce:7d:69:3d:9f:09:a5:5c:83:dc:8a:94:d0:a2:c8:fb:26:8e:
         d8:4b:40:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----