Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66D07B069BB311F1AF2483F6CE1D38B0.roa
File:                     66D07B069BB311F1AF2483F6CE1D38B0.roa (raw, json)
Hash identifier:          3yzSxOGxt90pBXu2ZXaxdmzsf3Ub0z7CwVgwl1Xnvag=
Subject key identifier:   D1:76:7C:A0:41:74:6D:A0:E1:2F:7B:EF:F4:60:9A:7A:78:6C:F5:C6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E00B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66D07B069BB311F1AF2483F6CE1D38B0.roa
Signing time:             Wed 19 Aug 2026 09:50:25 +0000
ROA not before:           Wed 19 Aug 2026 09:50:21 +0000
ROA not after:            Thu 19 Nov 2026 09:50:21 +0000
asID:                     400619
IP address blocks:        154.91.48.0/20 maxlen: 24
                          154.91.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 14:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122891 (0x1e00b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 19 09:50:21 2026 GMT
            Not After : Nov 19 09:50:21 2026 GMT
        Subject: CN=6a857c61-ae4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a1:dd:9b:2c:02:6e:5e:ca:94:b6:3a:8a:5f:
                    05:7d:50:de:2e:31:df:57:12:07:76:d4:f7:0c:d0:
                    e5:cc:d5:53:c5:f9:4d:96:b4:63:99:6e:1c:9d:5f:
                    e8:8c:a6:ac:79:b4:56:a2:78:47:e8:9f:fe:10:29:
                    98:1c:29:58:9d:a4:65:8a:8a:21:4f:9f:fc:33:34:
                    e5:3d:9b:db:34:10:73:b7:12:70:26:8a:4e:89:c6:
                    3e:36:e8:57:31:a2:a3:c9:2a:0d:2d:30:a6:fd:00:
                    d9:75:73:85:df:b0:6f:f3:87:8b:f6:da:23:86:9a:
                    e6:15:c4:79:6c:9a:9e:22:0d:11:41:24:e1:cc:99:
                    23:f6:70:76:2c:5f:d4:d8:78:b6:bf:8b:97:a1:4e:
                    09:d0:c4:52:5a:25:ff:df:d4:10:06:74:e9:dc:88:
                    ca:43:7a:c8:5d:6a:da:dd:35:e6:2f:9c:7e:3e:c0:
                    3a:61:ef:7c:9c:5e:f4:ef:ab:68:97:bd:10:c6:1b:
                    fc:be:da:b2:2b:ce:d4:51:70:c0:85:5f:bc:8e:85:
                    cd:ec:78:c8:c7:34:c2:94:b3:e9:bd:83:c5:de:63:
                    4a:d1:61:dc:ae:58:91:68:93:b9:ad:b2:58:c0:3d:
                    51:1b:93:d1:58:a3:d4:4d:7a:94:2e:ee:3a:3e:89:
                    8e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:76:7C:A0:41:74:6D:A0:E1:2F:7B:EF:F4:60:9A:7A:78:6C:F5:C6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66D07B069BB311F1AF2483F6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.91.48.0/20
                  154.91.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         49:3e:5b:df:42:56:3b:3d:a3:dd:51:ef:d2:c8:4f:07:e6:ba:
         0d:df:07:3e:dd:50:c9:39:ab:23:91:87:52:6d:c4:51:c4:d2:
         f4:c0:89:c4:78:de:6f:c0:30:d5:aa:0c:02:52:c3:b9:77:25:
         35:46:0e:4a:45:e1:f5:06:f8:c0:e0:c5:30:6c:02:7a:16:6d:
         d8:e7:19:ba:24:63:2e:34:23:1c:de:97:d9:f4:75:f8:4e:16:
         95:0e:27:df:d5:22:b4:b9:82:33:b5:15:e5:4a:5b:39:26:2d:
         e4:23:2a:9d:0e:54:13:46:5f:0c:72:0b:4a:6f:bd:cd:f4:9f:
         a6:f5:0a:77:89:e5:58:6a:ea:07:d3:f9:1e:f4:c2:22:d8:9c:
         26:14:e6:14:df:6f:be:a8:91:b8:1d:6a:9f:61:aa:bd:67:93:
         5f:63:12:1c:88:e6:4a:88:ae:80:c0:e9:23:ad:b9:9b:8f:28:
         b5:bd:45:c3:9a:ef:4e:be:1e:36:bf:c1:de:20:05:bc:7f:28:
         99:8e:39:09:65:bc:61:a3:21:9f:88:d0:9f:58:9d:89:55:f7:
         8c:e6:aa:d1:17:63:f3:57:7f:69:b6:50:19:3c:e1:6c:9d:e1:
         05:f9:e0:26:6c:22:71:ab:cc:17:c0:c2:75:74:49:c1:9a:43:
         18:14:b0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----