Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4981B02C989511F1B688A310CF1D38B0.roa
File:                     4981B02C989511F1B688A310CF1D38B0.roa (raw, json)
Hash identifier:          Dzi2ZT+83l5A1L6pV0FKoyP4duhEwWrVmU8hO0ySwxc=
Subject key identifier:   1D:F7:40:40:01:4D:F9:1F:9D:9B:24:C0:4C:A9:FC:24:B6:1F:3C:12
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DF39
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4981B02C989511F1B688A310CF1D38B0.roa
Signing time:             Sat 15 Aug 2026 10:37:18 +0000
ROA not before:           Sat 15 Aug 2026 10:37:14 +0000
ROA not after:            Mon 21 Sep 2026 10:37:14 +0000
asID:                     59711
IP address blocks:        154.83.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 07:35:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122681 (0x1df39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 15 10:37:14 2026 GMT
            Not After : Sep 21 10:37:14 2026 GMT
        Subject: CN=6a80415e-74ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e5:89:cb:ce:8d:c4:a0:d9:95:85:e7:a7:31:
                    96:03:26:22:07:64:67:2a:cf:fb:41:70:93:d4:d9:
                    2c:c8:b9:b5:04:fe:00:5b:49:89:52:5b:03:44:6e:
                    23:fd:cd:be:3f:da:26:a7:de:82:3a:e3:cc:bb:ed:
                    19:41:89:a2:63:75:db:c5:0a:c6:3f:5a:20:87:71:
                    75:eb:af:a4:20:2a:bc:b1:c6:e9:59:08:3c:c3:92:
                    a5:3f:6f:c2:27:78:8e:fb:3c:19:21:26:ce:4b:bf:
                    e3:29:a0:0b:de:69:64:5e:9e:93:b5:5b:ea:d4:48:
                    f6:4f:b3:a4:c0:d9:e3:bb:b7:f1:69:5b:60:e9:ac:
                    99:fe:66:b2:da:b8:14:74:69:4b:58:41:57:c2:ab:
                    f0:76:a6:e4:61:2f:bf:30:04:49:8c:da:4c:c9:d8:
                    35:d4:90:5a:81:ac:d2:d2:88:1d:05:83:ad:e9:cf:
                    c5:21:0d:54:47:ff:6b:df:c1:1f:03:6e:5c:f3:2f:
                    5f:31:18:41:af:0c:ea:40:49:e7:8f:15:c9:0e:4e:
                    33:a3:ea:08:21:7a:47:50:8e:a4:94:0d:b4:bb:a7:
                    73:5e:8b:87:52:f9:8e:b9:81:a6:38:2d:67:6c:bf:
                    11:9a:dc:6e:98:d5:8f:45:b0:c0:0c:ae:4f:12:ca:
                    3c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F7:40:40:01:4D:F9:1F:9D:9B:24:C0:4C:A9:FC:24:B6:1F:3C:12
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4981B02C989511F1B688A310CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:ec:42:19:48:a4:8a:28:4d:b9:f9:71:2c:11:58:b6:ee:da:
         05:1b:f4:87:bf:11:73:11:88:0f:5b:84:34:52:d7:ab:5b:49:
         3d:30:2b:de:be:bb:cf:a8:1a:85:d1:33:bf:c1:7e:7c:42:b0:
         d5:4a:fe:ba:11:e7:40:85:38:5a:80:72:bc:71:c3:37:da:55:
         ef:18:6d:f1:84:70:cb:7a:71:3b:44:42:82:74:7b:6c:89:35:
         7f:40:ba:d1:98:ed:f1:84:e2:fb:2c:4c:e9:d1:89:be:b9:7d:
         4d:bd:45:58:47:17:65:9b:98:6c:db:54:29:c7:36:02:03:ab:
         51:9d:05:c1:9e:9c:68:cd:df:7a:ad:c5:ce:37:c0:9a:ee:99:
         d5:9e:c0:c3:8f:82:8b:c3:c2:b5:ab:11:39:10:7d:7a:43:05:
         93:fc:07:3d:00:e3:21:10:42:bf:10:bd:8d:24:73:13:c2:73:
         96:0e:16:c2:7f:81:a4:a8:5f:ed:5d:2d:94:da:ca:28:d4:ac:
         25:36:0c:21:cb:80:61:18:0a:c7:b9:f9:98:3c:77:1a:b1:95:
         93:ac:42:c7:30:3e:9c:ad:59:32:3a:fc:42:a0:95:e7:2a:92:
         c9:11:e5:a9:fe:ff:c0:15:7a:a7:8d:77:1c:4b:af:b8:20:b1:
         ff:33:a9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----