Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1E640CC93BD11F18176ADBACE1D38B0.roa
File:                     D1E640CC93BD11F18176ADBACE1D38B0.roa (raw, json)
Hash identifier:          irF/y2QpbhIv6eDmo8eh5/WfT+XkCSQCkOAlufMJYOo=
Subject key identifier:   AC:7B:14:3B:CF:17:75:AB:36:3A:3B:BF:E5:D0:EC:25:E9:C0:4A:56
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DD9F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1E640CC93BD11F18176ADBACE1D38B0.roa
Signing time:             Sun 09 Aug 2026 06:44:51 +0000
ROA not before:           Sun 09 Aug 2026 06:44:47 +0000
ROA not after:            Mon 16 Aug 2027 06:44:47 +0000
asID:                     141109
IP address blocks:        154.81.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122271 (0x1dd9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug  9 06:44:47 2026 GMT
            Not After : Aug 16 06:44:47 2027 GMT
        Subject: CN=6a7821e3-9821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ec:b5:60:b9:7c:3f:a1:a3:61:ef:52:25:15:
                    60:24:68:ce:05:f1:25:d9:ba:23:cc:86:d1:00:9a:
                    f4:38:cf:4c:dd:db:6f:2c:29:a3:3a:66:b6:02:af:
                    ae:a3:05:7f:e7:4d:58:c0:44:15:7d:21:b0:fb:0d:
                    8e:7f:ac:00:38:a9:d4:1e:b3:59:7a:37:7f:6e:51:
                    74:01:e5:f7:05:a5:7e:55:01:a9:01:43:46:f4:13:
                    80:ee:47:f1:f7:62:f3:d7:f8:95:d2:80:5c:8d:89:
                    c1:ef:de:c4:0f:ca:22:0e:d4:18:34:37:4f:2e:34:
                    7f:2a:3b:99:7b:42:80:18:00:33:ec:7a:f5:54:72:
                    ff:29:d7:22:2c:b6:2f:c6:f9:a9:b1:b3:98:dc:7f:
                    2d:00:3e:3b:8d:13:aa:b8:73:8f:57:b2:b6:24:ee:
                    22:a3:99:b6:6a:52:61:6c:52:25:6d:f5:85:d3:d3:
                    f8:41:0e:03:1c:bd:ef:28:70:e1:b7:22:84:b3:8b:
                    74:20:a5:b8:b1:c9:40:c5:0f:09:de:3f:bf:e8:bd:
                    06:97:bb:1f:24:f5:7e:38:17:bb:06:c1:56:05:48:
                    58:64:99:63:12:8b:85:34:a8:02:7e:4c:e1:52:21:
                    1a:57:85:ce:cb:bf:60:b3:1c:a8:f6:5e:32:3c:5c:
                    12:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7B:14:3B:CF:17:75:AB:36:3A:3B:BF:E5:D0:EC:25:E9:C0:4A:56
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1E640CC93BD11F18176ADBACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:b0:79:98:4d:1f:70:3b:0a:61:5c:b7:45:b1:04:f2:c6:08:
         c0:de:cd:6d:c1:05:6f:b1:2a:17:25:cd:aa:28:f1:f0:95:3d:
         77:85:1a:c4:e7:60:f0:f9:32:a7:01:ff:b5:fc:dd:9e:70:67:
         cf:b8:19:1e:32:9c:d3:1c:97:80:89:e7:4d:28:47:f0:13:39:
         e8:3d:62:d7:f2:81:63:31:74:a7:b8:cc:23:ce:01:c4:bf:69:
         42:7f:a5:e9:dd:7b:55:5e:4d:7a:09:cd:ca:ed:f2:5a:7d:15:
         e0:b0:a3:9c:3a:23:27:1e:2e:77:ef:e6:30:bf:52:08:ed:9b:
         97:36:05:d3:0d:f0:ee:d2:55:b1:3e:7d:65:de:be:e1:b4:aa:
         8b:e7:11:87:ef:6f:f9:82:60:af:2a:7b:aa:f2:82:13:df:a5:
         fb:27:1d:f1:a2:87:7c:66:97:32:a7:d4:a0:2b:df:a3:7f:d7:
         59:35:da:ac:5c:e2:4c:8e:de:5a:56:ea:0b:63:c3:8d:a2:b9:
         cb:01:cd:1a:69:9f:96:d7:cf:96:8e:e7:12:80:08:ec:12:30:
         80:0f:f2:a5:41:0c:24:ae:c8:70:e6:13:40:de:6c:51:af:38:
         a4:aa:25:7d:ae:47:1d:68:30:9a:8e:93:7f:b6:38:ea:94:99:
         b9:bc:6c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----