Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DECC8BC9EBD11F18DD65DB9CE1D38B0.roa
File:                     9DECC8BC9EBD11F18DD65DB9CE1D38B0.roa (raw, json)
Hash identifier:          Hcmk0iBiLk2Zwu9L//IJGefA+fH9Wkv2XnU5gA/CBnM=
Subject key identifier:   6A:24:D4:3C:81:E7:6F:5E:90:5F:75:84:7B:E1:3E:40:51:44:5D:50
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E1CF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DECC8BC9EBD11F18DD65DB9CE1D38B0.roa
Signing time:             Sun 23 Aug 2026 06:41:06 +0000
ROA not before:           Sun 23 Aug 2026 06:41:02 +0000
ROA not after:            Wed 02 Sep 2026 06:41:02 +0000
asID:                     137899
IP address blocks:        154.201.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123343 (0x1e1cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 23 06:41:02 2026 GMT
            Not After : Sep  2 06:41:02 2026 GMT
        Subject: CN=6a8a9602-9ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:59:5f:6f:45:57:73:35:7f:0b:e9:b1:a7:3c:
                    71:0d:56:53:63:ad:8a:0e:09:cf:37:fd:18:9d:21:
                    b9:91:99:6b:0f:a6:7a:40:1e:33:5e:5c:15:d8:8a:
                    f0:46:1f:8a:3b:28:e1:64:9d:99:81:4c:13:eb:e7:
                    02:40:1a:b2:ee:63:34:0f:bb:c6:33:cf:59:37:40:
                    52:55:bd:f5:92:c8:8d:a1:0b:ee:73:88:bb:9d:18:
                    58:d9:c5:cb:06:56:9e:c6:15:2f:0b:c4:77:3c:a1:
                    e5:46:56:13:33:60:e4:ba:a5:9c:03:45:30:20:cc:
                    86:19:5b:a7:e9:89:b6:75:c2:da:86:90:31:bc:7b:
                    9a:3e:0d:a6:75:6a:70:40:87:7d:ce:23:34:7f:f4:
                    0d:27:fb:23:fa:30:d2:df:28:69:e4:97:9c:6a:ae:
                    b5:7d:98:eb:82:53:d6:c0:ae:fd:9c:38:3a:6c:22:
                    23:ce:e5:f1:30:69:af:01:a4:f9:c1:b8:8b:b3:0e:
                    71:61:99:7b:8e:a6:87:ab:d5:ad:62:51:a8:59:bb:
                    91:66:1f:84:6f:9c:0c:f7:53:b4:2a:d9:97:3c:54:
                    59:c4:1a:2d:1f:7d:47:11:89:6c:05:95:e7:35:c3:
                    e7:bf:9b:a4:99:f8:be:be:41:9a:0b:24:2d:9d:55:
                    a7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:24:D4:3C:81:E7:6F:5E:90:5F:75:84:7B:E1:3E:40:51:44:5D:50
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DECC8BC9EBD11F18DD65DB9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bc:51:b2:ae:d1:5c:92:99:b0:ec:a8:b0:9a:0b:d8:f3:bc:c3:
         bb:c1:9a:22:2f:78:f8:93:a1:52:72:ab:0b:73:14:32:28:97:
         97:12:27:6c:72:87:ea:05:de:1e:09:2f:88:59:cd:b2:11:d4:
         40:46:c4:9d:dc:1e:f3:a6:96:18:00:fe:0b:6a:3e:58:c9:d6:
         7c:9a:a1:0d:26:d4:b5:b0:f3:3d:a1:58:2a:99:f0:7e:aa:79:
         11:fc:f8:1f:bb:f2:30:10:ac:df:7f:86:51:9f:b7:c3:08:fe:
         73:89:44:ae:a0:d1:28:2e:85:52:7e:85:5f:93:cc:d8:61:d8:
         94:1d:54:ff:55:da:e7:bd:ce:5c:5a:cb:2e:99:4c:5a:bc:1d:
         b2:be:af:4d:e9:d9:29:7a:0e:27:b3:19:66:dc:9e:a0:8b:21:
         1b:4c:f6:ae:fa:46:70:35:17:77:65:a5:db:2a:6a:f4:b8:1d:
         84:91:09:56:8f:37:28:b1:12:4e:ff:1f:ab:e3:1d:67:61:b2:
         11:97:ba:50:8a:50:7a:f5:ac:34:27:1d:12:d0:39:99:14:bf:
         06:7c:65:e6:c9:93:3a:ad:38:3e:52:af:18:99:46:16:9c:ea:
         f6:fc:03:27:08:fe:f1:9a:cb:46:68:f1:e8:dd:a0:19:d1:2c:
         49:b1:ce:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----