Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A416B35696ED11F18794AC08CF1D38B0.roa
File:                     A416B35696ED11F18794AC08CF1D38B0.roa (raw, json)
Hash identifier:          TtzV50yE3bEy/Oht8suqZno8cnQp77Us7axohdESy/8=
Subject key identifier:   21:26:53:ED:4D:77:26:99:6A:D0:D5:50:88:D4:F9:CC:8B:4A:C0:BB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DEDD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A416B35696ED11F18794AC08CF1D38B0.roa
Signing time:             Thu 13 Aug 2026 08:04:43 +0000
ROA not before:           Thu 13 Aug 2026 08:04:39 +0000
ROA not after:            Thu 10 Sep 2026 08:04:39 +0000
asID:                     17497
IP address blocks:        154.90.174.0/23 maxlen: 24
                          154.90.174.0/24 maxlen: 24
                          154.90.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 10 Sep 2026 08:04:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122589 (0x1dedd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 13 08:04:39 2026 GMT
            Not After : Sep 10 08:04:39 2026 GMT
        Subject: CN=6a7d7a9b-9a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:aa:f2:c4:f9:5a:ef:ce:7b:d1:a7:49:3f:d0:
                    31:44:b6:a7:bb:ef:36:1e:d9:35:77:4d:13:7e:7b:
                    d7:24:e7:c2:6b:a7:ee:13:0c:0a:a5:e9:9f:6f:e2:
                    63:9f:d0:81:65:dd:7f:da:0a:5d:1a:93:10:49:09:
                    cc:54:25:05:fe:b2:3e:90:08:32:01:d3:41:9a:c3:
                    7b:24:cc:13:cd:94:0a:9e:43:2a:09:1f:52:49:a9:
                    6c:b0:da:1e:79:4d:1e:6d:64:ea:1a:14:fc:a8:e1:
                    b9:ee:40:8b:1c:7b:bf:4d:27:d7:77:72:9b:13:b7:
                    ab:d1:63:b3:bf:c9:5b:9f:08:42:56:e5:5f:ea:6e:
                    ad:36:95:60:c1:55:4c:00:13:15:e8:77:9b:c4:76:
                    1f:fe:c8:a1:ea:d4:3a:88:c6:7a:54:e6:d6:3c:c0:
                    f7:d9:a0:00:32:3f:ed:8b:f5:02:56:46:45:12:ea:
                    93:10:5b:ba:ac:98:66:38:f2:c6:7f:e6:24:a6:f3:
                    3c:ee:42:fb:74:6c:ab:fd:3f:91:32:09:49:68:e6:
                    70:37:70:5f:20:ba:84:28:95:02:11:3e:8b:fc:80:
                    56:8e:fb:15:80:22:33:ab:13:11:04:3e:d3:d9:a5:
                    97:27:e5:56:f5:de:17:19:9f:e4:b7:80:78:d1:84:
                    7f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:26:53:ED:4D:77:26:99:6A:D0:D5:50:88:D4:F9:CC:8B:4A:C0:BB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A416B35696ED11F18794AC08CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.90.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:ff:85:94:ae:b1:c9:8a:26:8f:ab:b6:95:65:42:cb:50:8d:
         06:f8:10:33:45:2b:20:db:49:a6:14:ad:8a:c3:94:02:8d:f1:
         b5:60:e2:ed:17:d8:9b:11:70:46:45:26:dd:7a:40:0c:c7:26:
         db:f2:07:55:7d:a3:a9:81:68:b3:98:7e:b0:9a:82:a9:2a:f1:
         b0:2b:0a:2f:d9:e1:60:7d:92:03:03:a2:4d:9d:f6:22:b5:47:
         12:7a:39:2c:aa:55:12:e9:1f:80:95:78:5a:9e:98:53:4d:cc:
         f2:4a:bb:c9:da:6d:e3:83:a8:13:f5:6f:f9:a5:7b:f2:cd:71:
         61:70:f8:12:85:67:af:01:39:2b:83:15:ac:27:97:3e:46:bf:
         c6:88:34:9c:e8:af:1e:7a:56:e5:57:30:9e:2a:70:27:67:7b:
         81:59:a1:57:f3:00:26:37:43:05:4a:ad:e3:91:54:48:8b:18:
         5b:27:ae:42:b1:ac:58:f4:80:90:3e:54:90:75:63:90:29:bc:
         34:2f:0c:b2:49:97:25:65:5a:c9:cd:37:6c:08:2e:68:00:38:
         36:6c:b6:6f:c5:a6:bc:39:58:fd:1a:2a:46:70:4b:cf:32:d4:
         fa:17:35:33:17:5e:2f:96:9b:12:9c:a2:d8:af:d9:ad:12:7b:
         c8:d2:32:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----