Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A07DF27C989B11F1A76ADAB6CE1D38B0.roa
File:                     A07DF27C989B11F1A76ADAB6CE1D38B0.roa (raw, json)
Hash identifier:          f9+t2+q92xrRAbZlVyBd2WgkQhzhQCxIyybXDy0Q/2w=
Subject key identifier:   4B:36:7F:DD:70:E5:1A:D8:DF:43:D9:A4:F5:1D:0A:AC:6D:EE:A3:4D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DF3F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A07DF27C989B11F1A76ADAB6CE1D38B0.roa
Signing time:             Sat 15 Aug 2026 11:22:41 +0000
ROA not before:           Sat 15 Aug 2026 11:22:37 +0000
ROA not after:            Fri 25 Sep 2026 11:22:37 +0000
asID:                     174
IP address blocks:        154.214.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 27 Aug 2026 00:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122687 (0x1df3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 15 11:22:37 2026 GMT
            Not After : Sep 25 11:22:37 2026 GMT
        Subject: CN=6a804c01-dc96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1c:96:40:2f:2a:c4:c1:4c:df:28:5a:5e:a8:
                    1c:fd:0b:97:96:56:8b:8a:ff:64:dc:c6:b6:d8:df:
                    38:13:60:1e:28:0b:9b:60:51:61:29:ae:05:55:a7:
                    15:f6:d1:97:fe:e5:72:27:83:9c:4d:04:da:04:dd:
                    9b:f0:83:5d:4c:ee:b3:93:6f:e1:35:14:7a:b4:e3:
                    df:4a:5f:5b:f5:fc:f7:16:02:f7:6c:32:f7:47:dd:
                    a3:40:11:0d:05:03:2e:e8:83:d8:af:1a:ea:9f:56:
                    c5:d6:41:77:f9:19:1e:30:eb:21:98:b4:24:f2:8e:
                    5b:fe:81:71:12:cc:2b:63:78:bf:ee:90:27:39:bb:
                    d2:49:0c:a3:75:41:b5:41:dc:bb:72:1d:ef:4e:13:
                    35:fc:b2:93:f5:c4:4f:5b:67:c1:97:46:30:9f:0f:
                    77:eb:65:65:c9:25:3c:f9:b7:96:27:0f:4d:d2:e1:
                    9c:2c:5f:c4:3a:14:c6:d7:f6:5e:da:2b:63:9e:67:
                    43:15:26:00:68:9f:c9:a7:0a:a9:97:37:85:86:84:
                    a4:85:7a:8f:d3:ff:8d:71:de:41:58:2d:78:79:7f:
                    49:76:83:53:1c:35:9f:24:e1:25:7d:fd:17:dd:3f:
                    bb:f3:6c:d3:b3:f7:b3:6a:35:4b:ef:33:4f:1f:59:
                    79:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:36:7F:DD:70:E5:1A:D8:DF:43:D9:A4:F5:1D:0A:AC:6D:EE:A3:4D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A07DF27C989B11F1A76ADAB6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.214.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:63:77:61:48:1c:bd:61:44:b1:db:77:41:cb:2f:02:07:28:
         17:66:5f:1c:0c:5a:9e:95:5e:70:af:7d:20:33:8f:ff:a8:56:
         84:9a:e8:fb:74:d7:84:3f:d8:2c:23:c3:10:ce:14:34:b9:69:
         35:9c:e4:bf:7d:8a:06:67:03:29:d0:0d:df:44:f8:4a:8e:41:
         7a:a6:30:f7:3e:1f:33:0b:b8:41:c3:a5:a0:a1:1a:e5:ae:3e:
         29:f6:30:5c:fc:b8:c7:f1:9c:c2:8d:e8:d2:be:d8:e8:ca:d8:
         60:ff:30:10:3a:29:bc:d8:af:52:96:f4:01:de:1c:e4:32:e6:
         91:ee:9c:20:ba:a1:cc:44:de:fe:e5:3f:82:41:9c:f2:d0:42:
         4f:b7:f6:95:d6:b5:78:6d:7f:d0:56:c1:bf:d8:2c:31:44:b1:
         de:ea:66:65:7d:2f:5f:13:f3:36:3f:20:cf:85:61:d4:58:63:
         8b:6f:4f:09:2d:04:f5:7d:b0:60:67:ea:8b:f9:c0:c7:c4:3f:
         8c:33:03:3b:48:6c:85:d4:d8:5c:6a:32:3c:b9:4f:fe:1e:79:
         35:f7:28:52:a0:d8:e7:9c:9a:3c:9f:14:7d:43:39:45:3d:73:
         c7:41:ff:42:a2:ed:ef:4b:d0:fb:24:e9:ce:88:f8:f4:07:e4:
         fe:1c:a6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----