Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F9F9594A1EC11F185B093F3CE1D38B0.roa
File:                     5F9F9594A1EC11F185B093F3CE1D38B0.roa (raw, json)
Hash identifier:          WihDNKANSYPARAAhbZngzeyoldrDyG2JjxmKosvKEMQ=
Subject key identifier:   49:35:D3:6A:83:DA:EC:C7:3D:DA:85:03:78:7E:04:04:1A:D6:E0:CC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E3A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F9F9594A1EC11F185B093F3CE1D38B0.roa
Signing time:             Thu 27 Aug 2026 07:53:22 +0000
ROA not before:           Thu 27 Aug 2026 07:53:18 +0000
ROA not after:            Sat 03 Oct 2026 07:53:18 +0000
asID:                     214483
IP address blocks:        154.208.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 14:31:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123811 (0x1e3a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 27 07:53:18 2026 GMT
            Not After : Oct  3 07:53:18 2026 GMT
        Subject: CN=6a8fecf2-062f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6e:be:fe:ae:48:ac:78:11:e1:74:1d:5a:f4:
                    44:0e:4f:50:88:21:01:2b:58:88:45:34:82:a8:86:
                    3f:69:9a:34:c3:59:4c:4d:e3:f5:16:bd:6c:60:ed:
                    42:c3:61:e0:50:10:c2:1c:85:48:7b:29:d8:af:ec:
                    e1:aa:9a:92:70:c2:39:b1:8e:32:b6:34:ad:f7:4c:
                    d9:54:8e:63:db:7b:26:74:ad:8d:e1:c0:4b:8a:99:
                    15:d6:59:8e:20:a9:20:99:68:48:89:6b:7f:4d:19:
                    bc:3b:1b:9f:43:c2:7a:d1:00:4e:06:38:07:96:2f:
                    f4:fd:e5:3b:44:6b:bd:69:98:16:79:7b:08:d5:a5:
                    63:c0:6b:74:d7:a5:9d:19:80:45:8b:45:c2:10:ca:
                    9d:bd:3c:e3:c9:2d:46:fd:ea:ee:75:26:c5:d4:79:
                    b8:8e:01:09:bd:81:8a:28:80:26:fb:94:5c:79:56:
                    5a:c6:c6:6e:ef:d6:1e:40:ec:d3:88:4a:d9:2d:f0:
                    e3:1f:38:56:04:a5:25:84:40:ff:63:bd:87:82:ca:
                    c7:39:4e:89:13:00:e9:a1:24:5b:fc:e8:8f:ed:6d:
                    30:16:58:26:1e:8e:5f:4f:fe:21:a8:60:a7:fd:c6:
                    ba:ea:b8:98:e0:d6:0b:84:05:ff:d5:5e:1a:22:5c:
                    5a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:35:D3:6A:83:DA:EC:C7:3D:DA:85:03:78:7E:04:04:1A:D6:E0:CC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F9F9594A1EC11F185B093F3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.208.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:df:56:e6:1a:61:c5:5a:08:ce:ba:00:96:77:37:59:2f:cd:
         c5:e5:67:ff:be:fe:2a:03:9f:41:7f:32:d1:cf:75:1e:2d:12:
         c6:08:61:c8:cd:47:fe:0d:81:b6:47:70:58:bc:d8:ce:13:ee:
         7f:d7:5f:10:86:e7:e3:88:a8:7f:79:eb:80:28:a2:95:f7:85:
         b6:70:22:4c:4d:02:1c:bb:10:ea:b0:e5:23:2f:9b:15:94:5b:
         7d:01:e7:40:1c:19:98:a1:6f:2a:c8:f8:04:83:71:52:7e:e9:
         dc:1b:68:8e:51:93:85:ee:07:21:f6:1e:61:46:cf:cd:ee:7a:
         68:a6:c5:ce:d8:a6:0f:b7:d1:a0:2d:74:af:b1:7b:39:bf:9f:
         24:77:ac:b0:ca:9b:3c:74:8a:5a:1e:c0:7b:6d:2c:44:b9:a9:
         5f:4a:84:b3:a9:9a:89:99:52:12:7f:2b:b5:ff:6b:bc:20:03:
         87:df:c2:a9:b4:8a:5d:49:66:bc:45:63:68:aa:a8:cf:38:91:
         e4:02:03:64:63:e7:89:ff:ae:b8:01:55:c6:70:d9:0e:6f:3d:
         e3:5e:07:67:9d:1d:1a:a8:40:79:9d:32:c7:48:39:fb:2e:7c:
         d1:72:3b:63:ec:96:b0:0c:59:91:fb:ec:31:3f:78:6d:cc:4c:
         e5:ec:7b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----