Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54F2707A949B11F1B9DCC3F0CE1D38B0.roa
File:                     54F2707A949B11F1B9DCC3F0CE1D38B0.roa (raw, json)
Hash identifier:          CWMs1WSNYuNmJKwtzoQWnhB7i3fjb/fX0MLwETRPzLg=
Subject key identifier:   94:30:CD:02:9C:86:5F:A7:A8:B8:08:70:A6:7C:52:18:72:AC:B3:D0
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DDE8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54F2707A949B11F1B9DCC3F0CE1D38B0.roa
Signing time:             Mon 10 Aug 2026 09:10:29 +0000
ROA not before:           Mon 10 Aug 2026 09:10:25 +0000
ROA not after:            Wed 16 Sep 2026 09:10:25 +0000
asID:                     151419
IP address blocks:        154.88.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Sep 2026 00:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122344 (0x1dde8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 10 09:10:25 2026 GMT
            Not After : Sep 16 09:10:25 2026 GMT
        Subject: CN=6a799585-302c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0b:2e:52:10:7a:f6:c3:f2:75:4a:00:ba:39:
                    77:43:fd:3c:0e:8c:b9:b2:52:5a:fa:5c:30:a9:e3:
                    77:29:4d:7a:33:54:66:f6:53:76:e4:65:4c:ab:da:
                    4a:78:a9:fe:81:2c:83:f2:cd:cc:1e:d8:e1:3b:64:
                    10:c9:26:4f:c0:74:c3:75:b3:75:1f:fb:33:b6:6d:
                    34:50:49:ca:94:72:9f:14:50:91:39:e6:c7:b5:ad:
                    9d:70:cf:a1:52:fb:e2:5b:28:e4:8a:6a:9b:c2:b6:
                    ae:fc:a8:ff:8d:4c:54:d1:ba:61:91:9f:43:36:2f:
                    1a:5a:7c:a1:82:50:3d:14:94:2c:06:e3:fe:40:56:
                    b5:e9:0c:65:41:68:a3:20:1d:c7:4b:a4:75:f2:c4:
                    ad:66:59:78:39:24:67:b1:46:43:89:42:fd:82:7c:
                    c6:9f:f1:8c:b8:e7:46:e8:0f:1d:6b:00:22:57:82:
                    5c:36:c9:fa:00:cb:56:71:5d:bc:0f:c9:cb:25:91:
                    37:e8:eb:04:52:d2:d2:8f:66:4a:d8:a0:ac:b3:90:
                    90:a6:19:27:75:73:5e:40:6b:19:78:60:b7:87:4c:
                    3a:04:3f:49:ee:9e:1b:cf:2e:0e:3a:d7:f0:34:ac:
                    af:68:56:08:53:3a:58:d5:33:4c:95:7e:a4:ce:dc:
                    18:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:30:CD:02:9C:86:5F:A7:A8:B8:08:70:A6:7C:52:18:72:AC:B3:D0
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54F2707A949B11F1B9DCC3F0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d2:88:6f:f0:20:59:10:26:cb:d2:2a:6e:7d:c8:e0:95:70:2e:
         87:48:0f:35:24:1c:8e:6d:18:6e:d0:71:57:82:4a:2b:80:b4:
         16:1f:ef:73:0e:36:66:84:e8:c4:01:21:f2:08:99:32:07:b1:
         e4:3b:70:b4:13:f5:a3:14:90:67:92:e6:4a:fe:c1:c7:8e:e6:
         c5:9e:bc:9f:ec:59:64:7e:fe:bf:f7:e4:64:21:0b:e6:64:ff:
         44:51:00:be:9f:d1:bf:b6:a4:99:69:24:84:3d:ff:76:53:54:
         7f:9f:d9:4a:cf:71:b2:26:e1:a5:29:3e:fe:1a:c3:c4:6d:48:
         75:e6:07:75:a3:03:91:b7:75:d7:00:ed:0e:69:eb:d7:f5:b9:
         8e:c1:37:75:60:f9:b6:1c:04:1f:52:7f:a9:5c:53:76:23:8c:
         fb:56:e2:0d:79:eb:df:fa:b6:52:77:4b:fd:b2:53:65:c9:f9:
         06:1f:df:d5:24:67:b7:71:35:00:35:d4:d8:da:05:ff:08:38:
         51:09:cc:7e:94:87:be:ea:20:54:3a:b0:05:f0:b5:59:88:1c:
         7c:73:15:04:65:e3:96:aa:1e:e8:58:2c:e7:52:53:4b:ea:dd:
         bd:a0:a5:03:21:7a:d7:b8:b6:2c:70:6e:5d:f7:d5:fa:19:96:
         ff:03:f4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----