Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B714EE7894A911F19484D1C4CE1D38B0.roa
File:                     B714EE7894A911F19484D1C4CE1D38B0.roa (raw, json)
Hash identifier:          3LE+mBqPkX/eNDMNSV1usmxjP1kxLVE8BLKXmni2M04=
Subject key identifier:   8E:59:F8:3D:1D:5E:D6:63:F6:E8:AE:69:C8:C0:FD:E4:09:89:F8:F3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DDF8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B714EE7894A911F19484D1C4CE1D38B0.roa
Signing time:             Mon 10 Aug 2026 10:53:27 +0000
ROA not before:           Mon 10 Aug 2026 10:53:23 +0000
ROA not after:            Thu 17 Sep 2026 10:53:23 +0000
asID:                     139880
IP address blocks:        154.206.128.0/18 maxlen: 24
                          154.215.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 07:35:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122360 (0x1ddf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 10 10:53:23 2026 GMT
            Not After : Sep 17 10:53:23 2026 GMT
        Subject: CN=6a79ada7-a076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:65:32:c3:54:b3:97:65:24:4e:cd:0b:bd:
                    f0:49:53:cf:5e:62:9a:f1:fa:37:31:a4:71:7b:4a:
                    f8:2d:e9:d4:be:68:46:f2:54:a0:4a:97:1d:d4:5c:
                    ef:18:80:0c:bc:7b:ca:f7:de:e6:82:b8:90:db:34:
                    d0:b0:64:e1:4f:ec:db:ab:97:ec:0d:b7:50:67:4f:
                    fa:75:88:f6:69:ff:9c:d7:47:7f:5f:8c:40:31:74:
                    d9:f4:f5:ab:81:5b:26:78:2e:08:28:03:f1:44:6b:
                    62:cb:5c:0b:96:c3:7c:49:29:04:f2:40:e1:0c:c3:
                    94:98:25:cc:32:76:c9:03:13:34:e3:8e:0b:6b:b1:
                    94:cd:43:57:d1:cb:62:32:6f:34:eb:a4:65:59:fa:
                    d9:3f:51:db:1e:f5:6c:48:f8:34:00:e6:a2:20:f0:
                    bb:3c:c3:c8:5b:a8:ca:6d:32:55:39:75:b6:8a:64:
                    09:d2:90:2b:64:16:00:ab:84:5e:d1:56:f0:c7:bc:
                    12:37:83:35:ed:b2:d9:68:7b:67:55:a5:44:e2:64:
                    e8:6a:a0:16:14:05:92:93:01:d1:bb:fd:f2:5b:51:
                    1b:7b:49:0d:1e:8e:f4:2b:22:c9:e9:9d:45:d5:5a:
                    7b:ea:52:1a:99:88:fb:9e:12:bc:14:35:83:fe:76:
                    ba:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:59:F8:3D:1D:5E:D6:63:F6:E8:AE:69:C8:C0:FD:E4:09:89:F8:F3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B714EE7894A911F19484D1C4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.206.128.0/18
                  154.215.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0e:e8:58:14:0c:64:e0:85:65:96:c5:f2:89:6f:ea:ff:d2:ae:
         75:b0:ee:c4:c2:e9:ff:a1:3a:ac:c2:bb:76:a7:cb:18:32:56:
         b1:be:00:a2:57:a2:6f:aa:23:bd:36:86:ed:8b:9f:f1:a2:41:
         e1:83:a8:dc:84:0a:98:46:a8:c9:86:1f:2e:72:54:07:1d:3a:
         34:7a:14:9d:f7:aa:bb:fb:8b:e8:3c:b4:3d:09:86:7f:4c:24:
         71:ff:ef:88:ae:1b:1b:f2:7a:ea:41:fb:d5:31:d7:6a:41:fc:
         29:24:ef:4e:1a:d0:0e:71:9a:06:21:3b:5e:a1:a6:94:2e:7e:
         44:9e:14:9f:f7:c4:bd:91:e2:eb:26:56:d6:77:14:a2:47:6b:
         8c:c7:0d:a8:1a:51:57:71:b5:b7:8e:5e:36:b4:56:e1:1f:16:
         71:68:1c:23:fd:6e:b6:a7:ce:a3:c2:1e:b4:bd:e1:5b:69:5f:
         2f:07:d6:c2:e8:7f:78:ad:30:ff:3a:fc:54:3e:0c:17:58:91:
         99:8a:41:66:9d:1f:ce:b3:65:0e:dd:2f:23:d7:38:5f:02:49:
         20:49:ea:bd:35:eb:c4:03:35:01:26:83:ce:cd:08:5c:d8:f4:
         36:00:ac:6e:7c:d2:73:84:16:d7:bd:a8:c3:85:9d:31:3b:99:
         2f:f1:09:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----