Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B629536A2E711F1AF2DC7DACE1D38B0.roa
File:                     3B629536A2E711F1AF2DC7DACE1D38B0.roa (raw, json)
Hash identifier:          Z6zk3e9Nx5cwX9aGHPX/2cKFN/XCE/h/1xI53v5Eyas=
Subject key identifier:   2C:B6:C9:AC:FF:56:AB:48:67:EE:2B:3B:36:4A:45:17:5B:E3:AF:65
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E3D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B629536A2E711F1AF2DC7DACE1D38B0.roa
Signing time:             Fri 28 Aug 2026 13:49:05 +0000
ROA not before:           Fri 28 Aug 2026 13:49:00 +0000
ROA not after:            Thu 01 Oct 2026 13:49:00 +0000
asID:                     269741
IP address blocks:        154.95.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 11:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123858 (0x1e3d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 28 13:49:00 2026 GMT
            Not After : Oct  1 13:49:00 2026 GMT
        Subject: CN=6a9191d0-9237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:21:a9:58:5c:95:66:c7:24:87:09:80:a3:38:
                    05:af:f7:10:3f:db:6c:e8:35:94:55:78:66:62:23:
                    f9:61:cf:df:32:d3:e4:1c:55:ed:b4:4c:0d:38:cd:
                    48:80:45:2a:87:44:1f:d1:fe:96:34:90:1c:dc:57:
                    6d:9b:81:be:c4:01:16:ab:db:96:9d:c2:4f:17:af:
                    67:aa:57:ee:2b:a8:a5:8a:8a:94:5c:c3:8a:7c:f7:
                    21:53:e2:0d:eb:bc:f0:31:c6:27:8d:79:8a:3d:1c:
                    06:b2:ad:db:ad:57:0f:73:d2:bc:b8:4e:ee:fa:65:
                    90:d1:3a:2f:1b:11:b2:c2:33:48:e0:f4:a9:2a:6b:
                    3a:fc:04:b8:d5:ae:75:a7:f1:0c:33:1d:91:38:88:
                    4b:a8:ee:58:c8:e8:f2:ec:58:31:8f:cd:02:ed:c7:
                    64:84:8c:5e:c8:94:c1:ef:0f:cb:0f:1b:c3:c0:4b:
                    92:99:9f:61:9a:c8:b9:10:27:93:bb:0b:16:ea:d1:
                    87:d7:63:cc:ff:1c:ba:6d:b3:13:94:ef:ed:0b:9e:
                    17:a3:30:f3:d5:7c:01:87:35:83:72:db:0d:4f:f9:
                    02:be:68:57:71:9c:5f:e8:0a:6d:62:08:56:3e:ed:
                    38:d5:97:01:bd:a4:7a:a3:59:7a:cf:fe:86:d8:37:
                    4d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B6:C9:AC:FF:56:AB:48:67:EE:2B:3B:36:4A:45:17:5B:E3:AF:65
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B629536A2E711F1AF2DC7DACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.95.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:69:12:22:a6:0d:86:53:1d:32:c4:5d:31:ca:74:5e:a6:ef:
         a9:d4:d1:0a:c9:05:52:74:c8:05:95:d1:13:85:8e:3c:93:40:
         9a:65:06:dc:d9:56:c2:bf:b2:d2:e1:6b:f0:6d:90:4b:f6:8d:
         c0:fe:51:69:02:6e:6e:98:e6:ef:69:24:95:eb:25:b6:a4:cd:
         3e:c2:c8:fe:01:d4:54:d1:e2:8a:48:75:b0:11:1d:96:85:90:
         02:74:60:d2:d7:1c:69:60:56:b8:28:7b:d2:10:ef:39:94:93:
         81:9a:4a:57:62:b5:01:d7:8b:d4:b4:83:69:f4:71:b5:4b:2f:
         e8:c9:36:64:5f:61:c9:22:a0:bd:46:9f:70:61:a6:fb:6e:4f:
         05:ac:e3:8b:d6:0d:0d:e4:2a:c9:f1:a3:87:f2:7b:45:84:24:
         a3:4e:90:62:d9:df:09:37:8d:c6:eb:ea:40:79:7e:5f:e0:5c:
         1d:54:de:80:79:cd:bb:1c:5f:01:39:06:0e:c1:4e:b8:71:2b:
         80:8d:0c:dc:25:22:1d:06:33:05:79:42:49:51:9c:d8:46:ab:
         1d:d7:21:ed:6d:88:9e:cf:7b:61:a9:bd:d0:fa:df:13:17:9e:
         d6:95:fd:29:f7:85:ea:43:5b:74:b0:ce:36:6b:ab:e1:7d:1b:
         39:af:47:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----