Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D03759AEA14C11F18D0000A5CE1D38B0.roa
File:                     D03759AEA14C11F18D0000A5CE1D38B0.roa (raw, json)
Hash identifier:          Z7KhPF+6aT6bBEToz8TWA0sYmfnY055S6znAu+LiXuY=
Subject key identifier:   4B:C0:FE:AA:58:F4:17:A6:F1:DC:BB:85:B3:A8:D8:AB:CA:66:6C:54
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E388
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D03759AEA14C11F18D0000A5CE1D38B0.roa
Signing time:             Wed 26 Aug 2026 12:51:11 +0000
ROA not before:           Wed 26 Aug 2026 12:51:07 +0000
ROA not after:            Mon 05 Oct 2026 12:51:07 +0000
asID:                     213169
IP address blocks:        154.94.48.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123784 (0x1e388)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 26 12:51:07 2026 GMT
            Not After : Oct  5 12:51:07 2026 GMT
        Subject: CN=6a8ee13f-d7d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a4:e8:2e:73:5b:07:45:f0:97:2d:52:46:91:
                    90:d6:00:75:cb:e5:77:0e:7a:60:e1:af:bb:f3:e8:
                    1f:7f:5f:d8:6c:bd:c0:93:75:f2:ae:bb:af:49:a3:
                    79:f6:58:1a:75:07:aa:25:dc:a6:db:31:2e:76:4c:
                    b0:3b:9c:e3:1a:98:59:92:6c:05:18:7f:4b:9d:9f:
                    5c:30:ca:df:89:ae:6e:35:ee:8a:66:b0:4a:61:9d:
                    2d:6f:e2:b0:c9:91:49:be:2a:8c:63:d0:f6:69:74:
                    7b:89:a7:cf:97:c0:3d:fc:00:1b:06:b6:bb:16:8a:
                    ce:39:75:6e:be:16:9e:88:42:87:d5:65:df:57:58:
                    e3:53:6c:28:ce:f9:8e:1c:4e:38:57:fa:ed:e9:aa:
                    21:b7:21:11:47:37:61:a7:89:45:64:ff:9b:ed:2e:
                    f5:8c:72:af:5e:2b:e8:30:48:8d:c0:e8:13:60:4a:
                    bb:35:a9:ac:95:08:ed:8f:85:1e:2c:f6:91:f0:5d:
                    3d:03:cc:c2:54:99:32:54:7a:89:59:e0:fc:64:ee:
                    ab:a6:a6:be:8f:72:c8:4a:0b:7a:c1:5b:86:42:61:
                    a6:71:11:b4:67:44:40:91:d0:75:ef:b0:27:6b:4b:
                    bc:ee:fd:1d:16:55:44:7a:a3:6c:29:52:a9:5f:04:
                    67:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C0:FE:AA:58:F4:17:A6:F1:DC:BB:85:B3:A8:D8:AB:CA:66:6C:54
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D03759AEA14C11F18D0000A5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:f3:00:27:d5:c7:48:31:3f:10:bf:c8:0c:c4:28:c7:19:92:
         01:06:a9:8c:90:ec:ee:d4:f2:b2:38:37:36:5c:ef:76:28:99:
         62:c5:51:94:5e:0f:2d:28:bf:7c:d2:12:dd:b2:ca:ee:3f:12:
         bb:c8:68:b0:1e:68:f4:9d:73:fc:ed:50:8b:fc:44:51:72:58:
         2b:6a:34:38:8f:c1:80:9d:f4:4e:01:00:77:76:7f:a2:39:bc:
         84:8a:a9:b0:65:e6:56:65:1f:a9:3b:e1:78:a0:c2:89:3b:ff:
         d8:ef:5d:0c:77:af:58:42:db:43:b6:eb:4c:4e:2c:69:ea:40:
         93:bc:3b:36:0f:0d:cc:80:b3:d8:9f:8c:46:c1:f3:a7:66:55:
         fd:1f:4c:bf:09:5f:e3:4b:55:2a:79:b5:b7:5a:7a:98:93:58:
         6f:c6:30:cc:dd:fd:ce:13:af:27:fb:c2:0b:93:b2:ce:3e:b5:
         b9:71:66:22:c7:ec:b8:79:69:30:64:a4:93:fe:20:7c:c4:d4:
         a1:96:ca:81:f0:5c:04:c3:3c:b7:23:2d:93:17:22:b4:51:64:
         0a:16:0f:4d:6d:a5:b5:7a:0d:5c:53:a1:a4:0f:b2:9d:49:f3:
         6f:59:78:16:09:01:ac:d4:c6:db:ff:bd:40:a7:77:4e:4d:3f:
         3e:28:eb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----