Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9B4496A961A11F18665A203CF1D38B0.roa
File:                     E9B4496A961A11F18665A203CF1D38B0.roa (raw, json)
Hash identifier:          HKlxblQl6mt6T9dNYJdNNjbKETldy2XwVvB8ts7qEZc=
Subject key identifier:   46:05:F5:9F:19:61:31:0C:96:DF:A0:A3:5F:B1:19:5C:3B:ED:88:24
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DE36
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9B4496A961A11F18665A203CF1D38B0.roa
Signing time:             Wed 12 Aug 2026 06:56:16 +0000
ROA not before:           Wed 12 Aug 2026 06:56:12 +0000
ROA not after:            Sat 12 Sep 2026 06:56:12 +0000
asID:                     147176
IP address blocks:        154.84.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 10 Sep 2026 09:09:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122422 (0x1de36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 12 06:56:12 2026 GMT
            Not After : Sep 12 06:56:12 2026 GMT
        Subject: CN=6a7c1910-044b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6f:2f:87:02:bc:43:56:c5:07:f3:7f:53:d0:
                    66:ac:29:90:8d:6f:f5:04:cf:f9:75:79:52:ef:8f:
                    ab:29:37:1a:a7:02:1f:eb:69:4f:03:e8:cb:ec:01:
                    da:47:1a:54:11:a7:61:cf:cd:65:34:44:58:52:e0:
                    61:f2:c1:53:d9:fb:04:56:4c:be:54:2f:86:42:ef:
                    1a:a9:68:e7:ee:05:ad:8b:d1:5f:6a:4f:a8:5c:9a:
                    78:80:ad:6e:32:88:16:67:69:08:64:76:14:0c:90:
                    91:ae:e9:d2:17:fc:6f:4e:43:ff:1a:b2:61:95:88:
                    5a:7e:ec:2e:70:5a:89:b2:35:bf:c8:03:ac:44:2c:
                    02:d5:af:6a:d4:1d:14:3e:76:ec:6b:ea:55:0e:d5:
                    dd:a5:d8:c7:67:39:64:b2:62:f9:99:a0:d7:c4:cc:
                    52:db:89:68:d9:45:07:3a:38:ca:a4:16:c1:27:45:
                    dd:32:58:78:29:28:10:f8:37:72:df:b4:30:42:bc:
                    48:8c:2d:4c:b7:27:45:9e:58:21:03:29:10:93:67:
                    77:6b:d5:b3:c1:6e:50:b0:62:a4:b5:1a:99:41:d0:
                    6a:4a:4c:0a:01:be:2c:2c:2d:90:56:2a:91:56:2e:
                    6e:c9:98:33:c1:4f:09:b9:6b:36:80:5e:67:76:e0:
                    c3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:05:F5:9F:19:61:31:0C:96:DF:A0:A3:5F:B1:19:5C:3B:ED:88:24
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9B4496A961A11F18665A203CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:35:f3:56:e7:87:6a:70:e9:ec:50:e9:ea:18:27:68:6e:cf:
         5d:06:1d:f0:c1:99:26:88:ef:8c:60:4f:fe:e5:cf:96:bc:39:
         e3:9e:af:c3:ba:a7:85:c9:9b:c0:73:84:6d:6d:54:2e:48:9a:
         dd:eb:6a:79:e6:b8:7a:61:c9:80:2d:a9:04:4a:1d:11:bc:9d:
         26:e0:2c:b8:ed:18:a6:46:43:3e:83:ab:99:75:86:ac:ae:c9:
         15:b0:20:c9:d0:ba:54:33:a0:16:19:e7:7a:b3:a4:d9:89:95:
         d2:c2:fb:a4:07:a9:94:12:ce:30:71:af:e8:22:48:38:86:d8:
         9b:52:1b:f7:05:11:cd:f4:a3:4f:63:58:af:4e:95:d2:a5:72:
         d8:b2:3b:00:e8:16:d0:ba:11:07:66:38:a7:09:7c:8e:91:79:
         c1:11:60:b5:ea:50:34:f8:8f:6c:9a:61:8e:e9:4b:47:f0:80:
         a0:37:f7:8b:72:4b:e4:3b:bb:3d:08:b7:52:5a:1b:dd:71:91:
         f0:dc:50:ff:34:f0:b9:11:10:2f:61:3f:b5:30:a2:1c:35:2e:
         86:ad:f8:97:ea:30:74:b0:66:a7:87:4a:2e:a1:cd:b2:b6:92:
         6d:7a:ff:d0:7b:f5:34:06:3e:c2:fc:ac:b7:b6:fb:7e:5b:2e:
         f7:33:5f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----