Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4EFA670949611F1B29290D4CE1D38B0.roa
File:                     E4EFA670949611F1B29290D4CE1D38B0.roa (raw, json)
Hash identifier:          TVbFtvd4C5bxxwki9vuhfEgKGOZa20jcWDeCGU1DGjo=
Subject key identifier:   05:42:80:A5:FC:F3:35:20:45:99:E4:B9:35:F9:0E:F7:2D:3D:53:DE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DDE2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4EFA670949611F1B29290D4CE1D38B0.roa
Signing time:             Mon 10 Aug 2026 08:38:44 +0000
ROA not before:           Mon 10 Aug 2026 08:38:40 +0000
ROA not after:            Thu 10 Sep 2026 08:38:40 +0000
asID:                     1405
IP address blocks:        154.83.88.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Sep 2026 00:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122338 (0x1dde2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 10 08:38:40 2026 GMT
            Not After : Sep 10 08:38:40 2026 GMT
        Subject: CN=6a798e13-85a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:23:1f:ce:55:8d:41:36:9d:01:13:36:5d:5c:
                    c2:e1:ac:67:dc:d1:32:5e:04:d8:81:15:71:6c:48:
                    35:f5:02:00:ea:78:f3:f2:08:7f:82:e9:fd:ac:9a:
                    a0:eb:a0:5d:27:18:70:13:e2:d0:0a:e6:16:e0:9c:
                    dc:7e:c2:5c:fb:bf:77:13:b8:bd:c1:43:26:97:bc:
                    8b:68:bc:65:83:fc:f1:66:5c:34:69:e0:f9:24:5f:
                    cb:32:41:4e:e2:5d:30:a0:62:af:03:1d:5f:f0:04:
                    fa:b3:8d:7b:17:a8:28:3e:0f:5e:67:1b:37:9a:b9:
                    a7:c5:b1:15:9c:bc:fe:14:ae:6d:da:58:98:d7:7d:
                    0e:00:a4:2d:49:ae:ec:86:04:ab:c0:56:aa:f6:06:
                    73:1b:34:81:d5:0e:c9:14:74:08:3b:a1:05:c4:2c:
                    8a:df:2c:a3:92:f1:59:1f:6c:d8:0e:85:bf:b0:1e:
                    0e:72:5d:e9:a1:92:d5:3d:93:79:50:0d:96:cb:25:
                    03:36:e6:9f:bc:3d:f7:b5:45:8f:70:9b:63:92:df:
                    f2:14:e5:f7:61:25:bf:db:b9:16:bd:34:dd:0f:5b:
                    82:59:d3:de:f1:40:f7:5c:6d:0b:59:a4:a6:58:f7:
                    2c:9f:0c:6f:be:0a:c0:67:b9:38:7f:20:04:74:a2:
                    3a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:42:80:A5:FC:F3:35:20:45:99:E4:B9:35:F9:0E:F7:2D:3D:53:DE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4EFA670949611F1B29290D4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:04:7e:88:c4:89:8b:31:bb:4f:5e:cf:80:dd:f2:8d:e5:9f:
         be:da:01:6b:e3:f2:d0:e4:53:c8:3a:fa:d7:f2:8d:92:81:9d:
         84:ea:9b:7a:82:b3:36:82:59:04:2d:d7:98:db:72:a5:d7:f0:
         a3:22:3b:b7:b5:d0:91:df:3e:d5:69:e5:36:bf:df:f1:c8:f9:
         a0:c6:b8:cf:da:a5:fc:5b:e9:42:5e:91:a0:0f:60:2b:df:16:
         17:49:e9:a9:97:5f:86:d4:df:0f:03:5a:24:b7:53:fb:35:ca:
         4c:88:60:e1:72:45:d7:da:7a:86:bf:ae:ce:29:b1:8b:56:15:
         68:78:95:53:a9:3c:88:fb:94:6f:99:6d:c6:b8:0d:78:4c:01:
         11:98:86:86:85:35:80:03:20:e9:f7:b0:be:21:e2:a9:eb:2a:
         78:36:8e:97:fe:2d:31:c4:ac:6d:05:a4:73:b9:48:f7:e8:f6:
         7d:88:3d:6a:c1:b4:65:0b:00:af:c5:29:e1:9a:30:d7:d5:a5:
         e5:a7:c3:f5:7f:ea:1b:e6:43:5b:62:e1:a7:3b:d7:53:52:b6:
         40:3b:fa:e3:35:0a:ec:d5:07:c8:7f:ce:95:64:4a:80:c2:16:
         b2:c6:93:3e:54:2c:ec:c2:45:a6:b2:ff:9d:51:ee:2a:20:c6:
         05:18:97:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----