Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D59CB1F49A0E11F1BC73E705CF1D38B0.roa
File:                     D59CB1F49A0E11F1BC73E705CF1D38B0.roa (raw, json)
Hash identifier:          ro5gfhyvQmQ7matBPv0Awgh3+Kx/BpEK8I0VMt4XVBM=
Subject key identifier:   FB:66:61:7F:21:4D:70:D6:1B:A6:9F:26:0C:30:24:25:F7:B6:05:FD
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DF6D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D59CB1F49A0E11F1BC73E705CF1D38B0.roa
Signing time:             Mon 17 Aug 2026 07:39:53 +0000
ROA not before:           Mon 17 Aug 2026 07:39:49 +0000
ROA not after:            Tue 15 Sep 2026 07:39:49 +0000
asID:                     397423
IP address blocks:        154.202.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 25 Aug 2026 00:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122733 (0x1df6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 17 07:39:49 2026 GMT
            Not After : Sep 15 07:39:49 2026 GMT
        Subject: CN=6a82bac9-d2cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7d:b6:07:e2:1a:b8:06:12:d5:9b:0f:3f:f7:
                    02:d6:83:40:f8:93:df:55:14:3d:f3:f7:bc:14:6a:
                    5a:a5:83:fa:05:d9:68:d1:e7:9e:c6:5d:c0:e5:50:
                    c7:86:11:f2:fb:f1:52:33:6e:0c:c5:3d:4e:38:01:
                    9d:f7:8e:30:ad:0f:ca:30:65:bd:ee:fc:f2:37:23:
                    b6:35:b5:a1:22:17:29:eb:4a:16:45:b9:cb:4b:a0:
                    58:1f:1e:d3:3b:08:40:cf:ec:bb:f0:a8:16:a8:c3:
                    d9:27:27:b9:c1:e1:66:34:f5:52:4d:11:cd:98:0d:
                    c8:f0:ed:bb:6b:61:40:03:68:b2:07:77:b1:61:b9:
                    55:68:49:d8:80:bb:49:f0:62:98:02:f0:3e:aa:43:
                    75:6b:e4:86:93:c4:6e:bd:7e:c8:fb:65:c2:fd:71:
                    b5:d6:a9:94:24:08:a4:3f:89:6a:cb:fb:9c:80:7b:
                    8b:1c:92:ce:d3:04:0c:b0:d7:c2:cb:82:22:c5:e8:
                    c3:af:cb:bf:39:5b:db:8f:1a:53:5f:a8:00:da:a9:
                    c9:52:c0:3e:43:7e:10:4c:e7:a9:a5:09:a1:af:21:
                    b2:e9:42:48:8a:c4:93:02:d6:ee:3b:11:b9:6a:d4:
                    8a:9a:a4:b2:1a:e9:df:c5:bf:d9:c3:b5:c5:f6:32:
                    aa:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:66:61:7F:21:4D:70:D6:1B:A6:9F:26:0C:30:24:25:F7:B6:05:FD
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D59CB1F49A0E11F1BC73E705CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:d3:fe:be:ef:7d:94:fa:5d:13:b2:d6:0e:64:0f:a0:be:18:
         1b:2d:fb:11:c3:54:10:20:4f:6c:17:3d:9d:57:ec:6e:f2:79:
         ac:0c:af:fe:da:99:b5:e7:11:f6:05:63:9e:72:24:93:24:48:
         e9:a4:81:f7:65:90:0d:c9:b1:67:a3:68:1b:58:e3:32:49:53:
         90:28:96:80:1c:e0:a4:34:36:19:ff:74:89:2a:cd:c3:01:23:
         3c:19:20:14:9e:05:2a:5a:4b:27:55:05:c1:f4:97:57:e4:35:
         c8:ed:9d:c3:35:45:7d:ac:ce:22:b1:00:dd:41:37:e3:c6:3f:
         9c:5a:25:85:47:48:ab:5b:39:e6:4d:11:c1:a9:12:4c:30:c6:
         a4:5a:26:32:89:ac:ca:80:fc:c1:0c:a9:9f:a8:3f:98:99:c4:
         5c:f5:38:6c:13:ee:d5:89:aa:b1:7e:34:53:12:5e:2c:29:bf:
         0e:54:6b:97:19:13:a9:1e:48:26:1f:04:45:4d:48:0a:1d:07:
         62:a8:6c:e5:e0:72:78:3b:0b:ce:cc:29:2b:e6:83:44:53:6e:
         3c:88:6f:e9:ed:3a:36:84:0c:0a:f6:35:a5:19:dd:cf:7f:1e:
         c0:74:a7:2c:55:47:74:0e:7b:73:cb:32:c8:21:7d:44:f2:08:
         0a:42:8e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----