Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D05507BA9D4111F1B213D9E9CE1D38B0.roa
File:                     D05507BA9D4111F1B213D9E9CE1D38B0.roa (raw, json)
Hash identifier:          dExyT0x6N/Y2ERgB1WdSWpym1jzVqixhj96zc7daHWo=
Subject key identifier:   AE:DE:6A:B8:9D:CB:59:E3:12:24:0F:1A:2E:2A:C0:56:E9:2C:3E:AF
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E17C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D05507BA9D4111F1B213D9E9CE1D38B0.roa
Signing time:             Fri 21 Aug 2026 09:22:22 +0000
ROA not before:           Fri 21 Aug 2026 09:22:18 +0000
ROA not after:            Sat 28 Nov 2026 09:22:18 +0000
asID:                     8796
IP address blocks:        154.219.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 12:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123260 (0x1e17c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 21 09:22:18 2026 GMT
            Not After : Nov 28 09:22:18 2026 GMT
        Subject: CN=6a8818ce-8396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a2:3a:6a:5b:83:60:74:43:2f:b8:ad:70:bb:
                    9e:e1:7d:33:c4:e2:e3:b8:2a:f6:e1:65:df:a2:d0:
                    7f:55:dc:2b:26:0a:8d:c4:ba:24:db:37:62:6f:22:
                    d3:11:96:bd:01:42:a8:49:94:54:43:17:fd:d1:bf:
                    06:cb:4e:35:84:5d:a3:ce:3a:02:4e:ab:a4:e6:7e:
                    d2:7b:d8:93:05:0b:55:a4:92:ef:5b:c1:73:e5:56:
                    90:fc:40:50:22:ae:98:58:f6:12:77:75:83:0f:ec:
                    bc:43:a6:fc:b1:c3:2a:20:c6:e3:b4:5e:33:26:2f:
                    82:2e:53:5f:51:1d:86:73:7a:b3:34:90:b4:ac:24:
                    9a:b8:fa:7c:d2:da:42:ec:6a:66:1e:5e:61:06:de:
                    d4:22:f0:05:36:01:96:14:2c:bf:d2:9e:63:4e:b3:
                    e5:69:1f:0a:75:0a:75:8e:e3:62:69:56:ba:6c:52:
                    19:bb:d0:2d:00:a2:a7:e7:f8:43:3e:d9:9d:37:45:
                    6f:6c:42:b7:11:0c:a0:32:46:84:f5:30:4e:b6:7b:
                    6a:f9:86:7d:a4:02:87:05:fb:bf:15:e7:c9:3f:03:
                    83:7a:c8:c4:54:8a:0f:f2:36:ea:51:39:a2:fa:19:
                    5e:5f:59:13:c7:1a:f4:4c:9f:50:92:37:1c:f3:36:
                    43:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:DE:6A:B8:9D:CB:59:E3:12:24:0F:1A:2E:2A:C0:56:E9:2C:3E:AF
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D05507BA9D4111F1B213D9E9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.219.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9e:ac:89:a9:80:27:c3:44:b9:71:10:48:e3:7c:c6:28:60:62:
         31:91:fd:0a:4e:77:99:b8:3f:93:99:17:16:87:82:42:3e:a0:
         7e:5a:ab:54:52:67:fe:3e:53:cb:db:71:75:18:bc:8a:e2:d6:
         12:d2:c7:a3:5c:c9:aa:24:da:52:46:ae:b3:23:d6:61:77:24:
         70:a1:fb:1b:53:48:8e:95:b3:03:3c:1a:87:d5:b1:75:7b:15:
         1a:ac:3e:0c:df:ef:7d:60:e4:ce:58:eb:42:2f:28:b2:36:4c:
         59:cb:a3:ca:f0:31:8d:48:55:2c:91:ad:c1:a1:f5:7c:a2:b7:
         6c:f5:b3:32:f1:4b:4c:e6:36:93:25:84:18:41:37:33:ef:95:
         d4:af:9f:d1:df:86:80:37:3c:68:60:28:8a:27:91:3f:25:ad:
         17:10:ed:c1:00:03:6f:75:f4:43:a5:dc:b3:fe:ce:9b:0f:df:
         8e:f1:57:88:86:e8:20:3b:c7:ec:1d:05:32:d6:46:38:f8:26:
         fc:88:9a:a4:a3:0e:72:a4:5d:f0:96:7e:67:66:f1:f7:3a:d1:
         3a:b6:bd:6e:9d:1a:42:1d:aa:62:ec:95:cd:79:34:5a:84:83:
         8b:c3:ce:f1:92:e6:c1:30:04:dc:84:28:20:97:e2:21:cb:e6:
         b1:95:04:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----