Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F5CE920A37B11F1B36190E3CE1D38B0.roa
File:                     5F5CE920A37B11F1B36190E3CE1D38B0.roa (raw, json)
Hash identifier:          dKERBRyIYUGS9u7YHfaQYTw2c8GGDcF1vvKB0yGlEaE=
Subject key identifier:   3E:6A:2B:21:BC:BC:10:D7:78:68:BC:DA:FA:AE:4E:61:46:E0:62:8C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E3EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F5CE920A37B11F1B36190E3CE1D38B0.roa
Signing time:             Sat 29 Aug 2026 07:29:30 +0000
ROA not before:           Sat 29 Aug 2026 07:29:26 +0000
ROA not after:            Mon 05 Oct 2026 07:29:26 +0000
asID:                     21859
IP address blocks:        154.216.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123883 (0x1e3eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 29 07:29:26 2026 GMT
            Not After : Oct  5 07:29:26 2026 GMT
        Subject: CN=6a928a5a-dab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bb:fc:53:de:c0:3d:06:b3:a0:fb:ad:86:09:
                    a9:fe:22:9e:ad:ee:0f:2a:bb:ad:06:9e:70:54:2e:
                    7f:1d:74:2c:13:de:ff:4a:83:97:7c:2c:e8:4a:2f:
                    69:3c:4c:33:98:6e:4c:b3:6c:83:21:fa:04:a3:6a:
                    c3:3c:62:0d:47:bf:5c:7b:aa:39:81:43:7e:6d:ea:
                    75:26:ad:bd:08:c0:32:5d:5d:30:c3:13:61:9d:52:
                    95:b9:a9:00:4b:95:6f:1d:8e:36:e8:88:04:83:90:
                    09:32:22:8c:ce:c6:7f:13:54:05:7e:8b:54:0f:b5:
                    25:53:fd:da:b7:4b:76:f5:3c:12:9c:f5:d7:8e:eb:
                    17:cb:c9:fc:1e:62:29:32:7d:6a:90:81:fe:e5:2e:
                    db:8f:c5:1d:c6:52:f5:5e:4b:21:ef:77:73:29:3a:
                    9b:22:b2:4c:2b:1c:6c:6c:88:9e:48:b9:57:e5:d8:
                    86:8b:b2:10:2f:f3:44:0b:00:4f:df:38:2b:3f:98:
                    5f:25:16:e2:18:69:97:c5:de:ad:31:ed:36:2d:e0:
                    20:a8:28:38:e1:d9:c0:69:37:4f:59:45:17:9f:cf:
                    ed:60:87:c5:f8:33:f4:c1:7e:56:66:c0:e6:a7:1e:
                    1e:8f:34:91:b7:5c:9b:93:21:e2:d9:cc:85:62:71:
                    7c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6A:2B:21:BC:BC:10:D7:78:68:BC:DA:FA:AE:4E:61:46:E0:62:8C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F5CE920A37B11F1B36190E3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.216.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:d0:7a:0d:20:e9:34:9d:e2:92:81:21:c8:2a:f2:87:e8:36:
         c5:20:32:03:13:4b:90:45:41:f0:55:cb:20:2d:45:27:4a:f4:
         93:1a:be:d7:65:ee:85:e6:b6:61:52:f4:20:52:a7:da:ac:5d:
         d2:a8:df:24:46:7b:66:40:ca:97:a0:50:85:14:e7:f6:9b:39:
         cc:8f:7a:71:b6:69:b6:a4:08:c0:c6:49:31:8a:11:d4:91:55:
         90:d9:86:96:f0:68:2f:44:87:43:5c:d2:5f:46:81:13:ad:7d:
         b2:ff:f6:1f:70:bc:db:79:d9:e1:df:8c:79:0e:62:89:65:00:
         f9:4e:ae:bb:12:2e:43:98:2a:97:e3:b0:9a:a0:be:a5:84:48:
         8d:c9:2b:b1:78:73:6a:8b:d5:42:da:bc:f6:6b:e4:34:78:c4:
         cc:12:d5:db:37:8b:e8:ac:eb:42:f9:bb:69:e5:26:96:bd:6a:
         a1:61:f2:f7:a7:20:6c:fa:c0:bc:d6:a4:9c:25:84:06:82:67:
         29:44:3f:14:4c:b2:9d:5b:55:70:5b:2d:32:1f:2e:8c:af:41:
         24:7d:e6:82:0e:24:18:0d:21:e7:1a:01:ff:74:aa:6b:8d:84:
         26:8c:0d:c2:7e:5e:12:6a:7f:85:21:e0:27:6a:02:5a:74:2a:
         04:dd:22:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----