Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF66DD449BB411F1BD1799FECE1D38B0.roa
File:                     CF66DD449BB411F1BD1799FECE1D38B0.roa (raw, json)
Hash identifier:          HAY9OzKmav1OCMjsKh3tz50werXbnLiH14fodx2S53A=
Subject key identifier:   1A:FB:74:00:B3:82:DB:F0:08:1B:28:9A:BF:78:82:15:7C:3E:FF:60
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E00F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF66DD449BB411F1BD1799FECE1D38B0.roa
Signing time:             Wed 19 Aug 2026 10:00:30 +0000
ROA not before:           Wed 19 Aug 2026 10:00:26 +0000
ROA not after:            Thu 19 Nov 2026 10:00:26 +0000
asID:                     152849
IP address blocks:        154.91.48.0/20 maxlen: 24
                          154.91.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122895 (0x1e00f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 19 10:00:26 2026 GMT
            Not After : Nov 19 10:00:26 2026 GMT
        Subject: CN=6a857ebe-8c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:70:4d:4b:d0:7a:23:64:29:a4:9e:11:5f:99:
                    64:a4:09:91:75:46:e4:31:5f:74:9b:d1:95:c3:64:
                    4e:f1:6f:5d:27:da:51:66:26:c0:4d:09:07:a9:85:
                    28:25:2d:21:bd:21:c6:c5:53:61:97:75:7c:15:f7:
                    0d:e9:cf:ca:6c:85:02:ad:6a:7b:45:39:c0:dd:33:
                    4e:43:8e:8c:39:6f:da:c4:30:fe:2e:db:31:f7:f2:
                    42:fe:77:2c:8a:2f:9b:e4:8e:d3:06:cc:2d:1b:62:
                    cd:dc:ae:9e:7d:69:01:8b:00:3f:e1:44:df:3a:26:
                    6f:7d:b1:4d:8b:67:8b:72:1c:18:49:a6:44:5c:20:
                    b8:09:2b:34:16:ce:23:d9:1b:4b:d6:83:78:94:84:
                    eb:f5:87:cc:61:bf:e2:f9:0d:37:d2:5a:c4:93:0a:
                    39:0b:6f:fe:01:64:69:81:4b:da:24:cd:76:72:46:
                    30:e7:c2:06:91:0d:50:a8:96:d4:3b:5e:6c:74:79:
                    d2:1b:97:4b:07:04:f8:ca:01:33:e5:62:b8:0c:ba:
                    e9:8d:25:8e:ac:aa:de:64:61:5d:2d:34:f2:27:eb:
                    d3:10:a2:d6:5a:77:3f:c0:ac:d6:cb:9e:c1:b2:4d:
                    6e:e5:48:ac:77:83:b3:fc:8b:b5:84:21:84:31:96:
                    19:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:FB:74:00:B3:82:DB:F0:08:1B:28:9A:BF:78:82:15:7C:3E:FF:60
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF66DD449BB411F1BD1799FECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.91.48.0/20
                  154.91.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bd:55:4d:b1:3d:70:4d:65:10:e4:69:9d:03:dd:e3:7d:79:11:
         a3:2e:81:a4:9b:27:c4:83:c2:8b:60:28:c1:42:33:e8:d3:d0:
         92:bd:d7:ec:a7:db:92:70:22:9f:b7:1a:59:3f:53:91:fd:03:
         9b:69:c3:52:80:e1:45:e8:28:a7:a6:cb:f2:61:99:2f:49:4d:
         f8:78:65:b5:bc:1e:e7:1f:45:2c:18:14:b4:9a:ef:85:fa:e8:
         77:5c:16:b9:bc:f3:6f:14:89:ad:4b:8f:c6:b0:a2:09:09:cd:
         82:54:61:0b:b5:06:cf:21:76:48:aa:2d:68:ba:84:5c:11:dd:
         9a:22:e5:62:02:2f:93:da:26:d2:af:33:b6:1b:b3:38:36:9c:
         7a:ed:1b:0f:6a:65:66:fa:b6:fc:f9:6e:af:b4:0b:f6:70:52:
         c5:15:a1:f2:d2:7a:f0:09:cd:07:b5:4c:0c:95:ed:d3:de:50:
         39:2d:ba:5c:1f:09:94:ef:d9:5e:61:32:41:0f:89:a5:6c:88:
         1a:4f:5d:e7:9c:f5:dd:c1:b9:f2:07:54:b1:07:50:92:84:09:
         a2:bf:d0:96:9c:df:fd:f8:d1:39:24:e1:d0:be:c2:67:8b:bd:
         cb:02:f1:df:20:fb:cc:3a:68:d8:83:1f:a3:41:c9:08:c2:a0:
         bf:01:66:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----