Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87DAF29CB72211F184770FD0CE1D38B0.roa
File:                     87DAF29CB72211F184770FD0CE1D38B0.roa (raw, json)
Hash identifier:          Eel/Ri9bQdINvHqxVZo42vrNK+CPKoNbMQFi5s1IbZ4=
Subject key identifier:   DB:CE:2B:B4:63:AF:88:FF:84:1E:84:AF:2A:35:C4:57:F4:E5:D3:C1
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EA47
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87DAF29CB72211F184770FD0CE1D38B0.roa
Signing time:             Wed 23 Sep 2026 07:43:56 +0000
ROA not before:           Wed 23 Sep 2026 07:43:52 +0000
ROA not after:            Sat 24 Oct 2026 07:43:52 +0000
asID:                     141323
IP address blocks:        154.86.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125511 (0x1ea47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 23 07:43:52 2026 GMT
            Not After : Oct 24 07:43:52 2026 GMT
        Subject: CN=6ab3833c-b67d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e9:06:e0:41:bb:f4:0a:61:ab:07:09:36:b3:
                    82:f2:95:45:e9:1d:4b:0d:b7:25:6c:fc:e4:d4:43:
                    8e:d8:a0:b6:5e:0e:98:92:c9:08:c0:39:e8:24:87:
                    1b:27:df:f7:fd:96:bd:f8:77:08:35:f4:ec:b6:7b:
                    ee:06:ff:0f:48:be:6d:04:5d:f1:a4:02:a6:09:b6:
                    18:6d:ee:80:78:6c:8c:97:a8:cc:39:15:a7:32:2c:
                    44:42:7d:96:94:b1:c2:74:d9:26:25:39:be:ed:41:
                    46:2a:8a:50:c0:c1:18:fc:84:a4:f2:94:52:34:fb:
                    a7:fc:4e:45:35:d5:db:54:fe:44:d3:6f:08:f8:9e:
                    f9:18:54:a1:54:89:3e:05:81:37:77:da:01:5d:d5:
                    4c:2d:e2:f7:0d:b7:7c:ad:82:29:ee:15:75:99:8e:
                    8c:b4:f1:c0:32:cb:93:2f:d3:cb:67:15:08:cf:b8:
                    a1:fc:e9:7d:9e:70:cc:31:83:4d:09:15:24:08:12:
                    f4:a4:27:bf:d3:b4:21:be:c5:56:89:f9:16:a3:46:
                    47:00:4d:a6:d1:dc:95:32:77:04:0e:8a:86:a2:99:
                    46:4c:a2:50:39:83:14:8d:ef:ff:11:40:36:81:0f:
                    05:49:a7:7b:72:e0:e6:da:c9:77:cd:19:2f:a2:f0:
                    d5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CE:2B:B4:63:AF:88:FF:84:1E:84:AF:2A:35:C4:57:F4:E5:D3:C1
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87DAF29CB72211F184770FD0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:17:75:47:b9:e5:8b:8d:22:73:a7:a0:cb:02:83:11:62:45:
         6b:3b:51:07:1f:d1:d1:c8:3c:c1:72:4a:2d:8b:d4:43:f7:47:
         88:75:15:df:b9:b8:17:fb:e9:0c:59:93:6d:cc:a2:ed:fa:cb:
         08:ad:89:1b:db:d6:c7:cb:e2:fa:1d:76:a3:d6:20:71:75:56:
         0b:ae:19:e5:a7:60:5e:0f:41:71:fb:b1:4a:07:f1:37:0e:41:
         d3:82:e3:40:7f:02:83:c5:7a:83:a4:60:ac:08:64:b0:6d:b7:
         33:06:1d:09:49:c6:17:dd:29:16:98:ea:d4:48:a0:2e:ed:a6:
         69:07:2b:14:4a:fe:b6:0d:3d:03:d7:c2:a5:24:6a:4c:55:48:
         92:83:e6:2a:14:97:df:04:f3:a6:ca:82:8f:11:01:cf:b8:f2:
         94:f9:d5:aa:ec:a2:2a:1f:42:97:c2:8e:c8:0f:88:b8:31:20:
         f9:b9:3d:3e:07:78:87:d5:c7:ba:26:19:98:e4:17:52:82:75:
         46:7a:ec:d6:43:b7:2b:8e:cc:d1:a3:97:1f:34:15:2d:bc:95:
         24:91:9c:5a:28:06:d4:b3:e9:6d:e4:31:96:31:c9:35:68:ba:
         bd:69:f6:19:c9:e1:13:ab:79:59:d9:c1:01:7d:5f:00:6c:af:
         7a:53:ae:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----