Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3366C00ABF911F1AF20EFBBCE1D38B0.roa
File:                     D3366C00ABF911F1AF20EFBBCE1D38B0.roa (raw, json)
Hash identifier:          hfBL/q+NSkoZ50yi6X5m7QEptoUp82HlHEqE+J/skwE=
Subject key identifier:   72:2E:20:E8:9E:81:7B:9D:C4:21:50:6C:A2:93:31:92:7B:31:55:8D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E690
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3366C00ABF911F1AF20EFBBCE1D38B0.roa
Signing time:             Wed 09 Sep 2026 02:54:51 +0000
ROA not before:           Wed 09 Sep 2026 02:54:47 +0000
ROA not after:            Thu 17 Sep 2026 02:54:47 +0000
asID:                     17497
IP address blocks:        154.90.174.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 11 Sep 2026 10:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124560 (0x1e690)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  9 02:54:47 2026 GMT
            Not After : Sep 17 02:54:47 2026 GMT
        Subject: CN=6aa0ca7b-de93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ae:91:50:48:d3:30:66:0c:36:56:4f:aa:e3:
                    80:78:13:2d:8a:50:ad:20:55:da:d6:af:9d:b2:9e:
                    88:f1:8c:94:74:25:18:d4:37:7c:7f:06:2d:3c:b4:
                    d9:a8:d4:b4:52:36:e0:22:1b:47:bb:84:91:5c:be:
                    15:00:13:04:74:58:12:b6:4c:7d:b6:58:06:f0:68:
                    b3:07:a6:76:72:c2:62:b7:dc:bd:e5:dc:1f:b2:17:
                    95:f7:b7:f7:e0:21:3a:b1:85:9c:42:19:7f:93:9e:
                    a9:39:cc:15:c9:82:40:0d:d0:cd:ee:ea:bb:d3:2f:
                    f2:0a:06:a2:bf:a8:d8:4f:4b:f7:80:0e:90:fc:e7:
                    7d:78:95:d6:fb:06:89:53:3c:48:ef:c5:fb:e3:3a:
                    36:33:d8:a4:c4:d7:21:88:a9:2e:bc:33:5b:56:bf:
                    33:cc:80:88:7e:4b:8f:d5:d8:a5:9e:bf:40:8b:26:
                    ed:3c:71:f5:21:26:7d:58:45:f5:22:57:7e:2b:d0:
                    b5:44:7e:fb:9f:c2:d7:3c:86:a4:08:aa:c4:af:25:
                    8f:89:72:6a:7d:5e:a3:33:1d:45:82:f9:90:88:3c:
                    60:19:b7:08:51:11:55:e3:d1:72:17:3c:3b:20:71:
                    cd:28:3b:38:67:31:fa:0b:0a:b2:b2:12:93:79:2e:
                    1d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2E:20:E8:9E:81:7B:9D:C4:21:50:6C:A2:93:31:92:7B:31:55:8D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3366C00ABF911F1AF20EFBBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.90.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:a5:aa:3f:c4:95:f1:28:c9:ec:30:3f:a8:8a:1d:c8:fe:f6:
         f2:6f:44:38:7e:8b:1c:78:e5:4b:1b:76:e0:58:2d:a7:77:e0:
         da:2f:4c:1d:5c:8a:15:66:48:74:24:30:ca:c8:2d:a3:d5:d5:
         d8:36:3f:07:63:a4:b5:0b:e0:79:ba:1f:0f:5d:b1:02:98:cc:
         5e:79:e5:77:c0:60:34:59:91:99:00:44:d7:bf:88:d1:f2:7a:
         f8:bb:80:68:f0:45:0c:7f:c6:3c:85:2e:22:6c:85:b3:f7:9b:
         cd:60:e3:2f:16:7d:d0:8a:39:89:14:ae:49:8f:b1:d5:44:02:
         84:b5:c7:fb:38:9e:f1:19:18:0b:1a:89:82:f2:f8:2c:ca:ea:
         41:17:6c:aa:2e:23:4e:af:a0:ce:02:de:c6:86:7e:e2:c9:63:
         b5:b4:97:8c:1e:4a:aa:ab:0b:2c:ad:45:d6:08:ca:50:9e:7d:
         2e:94:aa:bd:56:82:d6:1d:ed:26:fb:f6:fd:63:69:71:09:83:
         ec:5e:83:e2:24:e3:00:9f:80:72:a8:4d:4d:e2:d4:4c:cf:1e:
         8b:38:e5:95:41:24:4f:14:36:c0:ca:54:c9:d0:4e:c6:0c:c0:
         55:fa:d2:4c:89:a3:4a:28:01:22:4f:d6:43:59:46:63:e5:1b:
         49:36:b3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----