Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67FCB5689B9911F1805847DBCE1D38B0.roa
File:                     67FCB5689B9911F1805847DBCE1D38B0.roa (raw, json)
Hash identifier:          b2wGEszlo0AGcuqajaAP+2HFLYgWltZA6bC1KMoiXCU=
Subject key identifier:   DC:31:E0:97:87:13:D7:9C:19:F3:5F:13:49:4E:30:09:FA:C5:89:9E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DFD6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67FCB5689B9911F1805847DBCE1D38B0.roa
Signing time:             Wed 19 Aug 2026 06:44:20 +0000
ROA not before:           Wed 19 Aug 2026 06:44:17 +0000
ROA not after:            Sat 18 Aug 2029 06:44:17 +0000
asID:                     17561
IP address blocks:        154.83.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122838 (0x1dfd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 19 06:44:17 2026 GMT
            Not After : Aug 18 06:44:17 2029 GMT
        Subject: CN=6a8550c4-f321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cd:08:18:de:5c:c9:00:6a:9b:37:64:1b:73:
                    00:42:30:bf:a8:80:e9:7e:c4:5f:e6:75:f0:bc:aa:
                    69:52:be:7f:1d:45:7f:9d:a0:99:5e:9e:07:c2:47:
                    dd:d8:48:da:2e:0a:b9:01:c9:a3:3a:05:b2:58:59:
                    c5:5e:dd:b1:78:29:84:05:33:a8:bf:88:25:8a:01:
                    32:4d:d8:00:75:48:cf:a5:70:f1:1f:e6:82:f6:c3:
                    9a:54:e7:b8:e3:6b:37:62:00:a8:4c:7c:38:b0:db:
                    96:3e:f3:04:5f:1f:00:f4:03:b8:59:d1:1a:ec:7d:
                    0a:5d:c6:23:25:8d:e5:9d:93:7e:97:2b:9f:ec:3a:
                    20:6d:1e:fa:8c:23:a5:f9:bd:e7:34:6a:68:73:58:
                    c3:05:65:3c:8f:61:cc:c8:90:cc:e0:a8:bc:70:e1:
                    03:68:66:db:7c:a9:7e:99:0b:e1:36:37:bb:46:42:
                    98:4d:3d:52:08:34:23:85:e9:07:0b:8a:f3:8a:64:
                    12:94:cd:8f:16:e5:01:39:92:a8:55:a4:d6:c5:ff:
                    1b:c4:44:cb:ad:66:1e:d7:a9:a5:84:c6:89:ff:4b:
                    30:1c:85:bd:09:7d:8d:3d:c1:fa:be:7b:38:d0:57:
                    2e:8e:6e:4a:e6:7b:5a:d1:a5:bc:26:bc:5e:98:25:
                    9d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:31:E0:97:87:13:D7:9C:19:F3:5F:13:49:4E:30:09:FA:C5:89:9E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67FCB5689B9911F1805847DBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:89:99:2c:f4:ff:58:67:11:a1:9f:5d:ff:eb:0d:dc:17:76:
         90:06:c7:aa:b2:b1:86:08:28:d9:4f:e2:20:82:ac:de:1c:78:
         97:15:ff:de:11:d2:32:23:66:a9:30:9b:f1:0f:e2:78:bf:c1:
         e9:a1:2f:c7:98:b0:01:51:53:3c:25:fb:e8:64:dd:19:98:17:
         fc:df:64:89:d8:eb:f6:78:21:91:6b:89:71:81:7b:1c:91:8b:
         c4:4e:97:c3:8a:79:66:2b:db:8a:b4:bf:76:dd:27:53:85:d7:
         36:86:66:fa:b7:5b:e8:11:d5:c4:ee:81:82:65:1e:21:f5:8b:
         b3:08:6e:25:7e:99:d2:29:ce:4d:7a:de:79:be:31:02:82:71:
         82:f5:28:f0:15:2d:2e:c1:7f:e1:03:b7:28:f4:60:f1:05:ca:
         1f:ca:4d:52:50:58:5f:b7:5f:96:bf:2b:b5:c5:dd:de:ae:37:
         b5:8c:ee:b9:b8:12:91:79:73:52:be:3a:10:8c:86:02:1b:4a:
         8b:df:d6:8c:42:2e:51:48:bf:43:6f:1a:87:6f:87:80:bb:5e:
         98:d3:07:78:33:6c:b9:76:c6:5f:11:35:79:8d:c5:7f:e0:c9:
         1b:39:ee:be:ef:53:e5:25:68:58:75:51:f8:74:59:e1:5f:86:
         40:14:e8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----