Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A47FC826AE7D11F1A741FD08CF1D38B0.roa
File:                     A47FC826AE7D11F1A741FD08CF1D38B0.roa (raw, json)
Hash identifier:          lGSYV8SxLiNQVScKKxkB7dX7k7CspvcSS8/+MS43BTc=
Subject key identifier:   D1:67:47:64:A9:FD:97:F3:15:CE:B0:05:FE:D9:E6:32:99:D1:96:26
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E7A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A47FC826AE7D11F1A741FD08CF1D38B0.roa
Signing time:             Sat 12 Sep 2026 07:43:28 +0000
ROA not before:           Sat 12 Sep 2026 07:43:24 +0000
ROA not after:            Mon 21 Sep 2026 07:43:24 +0000
asID:                     274913
IP address blocks:        154.88.180.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124840 (0x1e7a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 12 07:43:24 2026 GMT
            Not After : Sep 21 07:43:24 2026 GMT
        Subject: CN=6aa502a0-8d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ec:07:b8:82:28:12:b2:88:a3:f3:80:86:e6:
                    5d:d7:25:b7:7b:cf:69:ef:8e:4c:b6:cd:fe:fc:e9:
                    1a:e1:c1:57:9c:91:12:b3:88:aa:71:1d:6a:2a:5f:
                    84:f2:53:db:3d:1d:fc:5a:5d:8b:12:25:d4:9f:19:
                    93:c0:a0:b9:f6:8e:39:d1:b3:3b:29:e9:8b:d5:7a:
                    e3:c7:ca:dd:af:47:31:8f:6f:f4:9b:9d:aa:b5:fd:
                    25:db:50:41:a9:18:61:9b:d2:45:93:0d:da:4d:d3:
                    ac:87:1a:6f:9c:d0:2e:2c:a3:17:55:56:6f:57:f9:
                    46:43:3e:27:23:f3:e3:8d:f7:44:f6:22:57:44:be:
                    be:7e:8a:b1:fa:f2:8b:bc:43:a5:d3:d3:13:0b:de:
                    b0:92:3f:3d:9d:5a:2c:20:cd:0d:ed:3a:4b:48:08:
                    e9:bb:e7:05:75:37:b5:50:64:ce:fb:56:6a:be:a0:
                    fb:f4:3d:86:4b:ab:08:58:ac:90:94:50:ff:e2:b9:
                    45:79:7d:cd:df:ea:a1:72:1a:79:57:c0:6a:fe:c7:
                    6a:19:5e:b8:24:f3:8b:6e:31:bd:ad:d1:0a:ce:1c:
                    ff:cd:5e:35:6a:7e:13:cb:dc:1e:ca:2f:4d:31:05:
                    60:ee:b4:e9:b9:1c:d9:85:ae:06:26:0d:96:fe:ea:
                    de:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:67:47:64:A9:FD:97:F3:15:CE:B0:05:FE:D9:E6:32:99:D1:96:26
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A47FC826AE7D11F1A741FD08CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:1c:9f:63:c4:f6:bc:8d:64:1e:1d:84:5a:e5:75:97:f1:94:
         30:b8:c4:79:5e:3f:8e:ce:18:56:da:89:2c:ca:1a:a3:74:f5:
         12:e5:79:b2:67:a7:57:7a:b3:c8:f9:31:22:b5:8d:6f:8f:d1:
         c5:9e:01:30:1d:80:4f:16:54:36:fd:0e:e6:32:98:48:14:a6:
         4b:8f:46:de:9f:0e:e7:c6:c1:47:dd:6d:7a:17:ca:e8:55:63:
         d4:f3:a2:91:1b:50:e9:d5:22:8a:93:0e:2b:e6:84:5d:4c:cc:
         80:9f:ef:0d:a7:8f:cf:36:f6:35:0e:34:da:60:a3:df:af:63:
         04:ed:3c:7d:ee:05:ec:3a:68:64:0d:91:9f:7c:f6:67:39:7b:
         c9:a8:bd:57:1d:e0:60:eb:cd:7d:f8:c1:e2:25:04:9e:a8:02:
         af:b7:5f:a9:a4:88:41:55:3b:67:38:10:ef:41:a0:2d:dd:c9:
         fd:dc:99:2e:f6:b5:28:b5:29:b6:18:57:0f:ac:8f:ef:2c:e6:
         00:9e:17:fb:c0:12:01:3e:0e:82:b1:45:3a:28:59:0b:10:2a:
         77:99:d8:41:35:92:fa:fe:f1:c1:c4:94:24:3f:51:8e:68:14:
         99:20:2a:bf:96:d6:ec:ec:e8:83:aa:72:1f:bb:68:08:33:ef:
         26:67:1a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----