Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC6123F89D3711F1A420DBADCE1D38B0.roa
File:                     EC6123F89D3711F1A420DBADCE1D38B0.roa (raw, json)
Hash identifier:          Htm/FjVG7LYpmAWHF/XF7r8zwh/VheZhyLYILRELfd0=
Subject key identifier:   36:70:37:E5:74:5F:CC:DF:D5:B1:9B:47:87:38:38:91:C8:35:12:F6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E15F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC6123F89D3711F1A420DBADCE1D38B0.roa
Signing time:             Fri 21 Aug 2026 08:11:35 +0000
ROA not before:           Fri 21 Aug 2026 08:11:30 +0000
ROA not after:            Sat 19 Sep 2026 08:11:30 +0000
asID:                     214432
IP address blocks:        154.193.211.0/24 maxlen: 24
                          154.193.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 11 Sep 2026 10:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123231 (0x1e15f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 21 08:11:30 2026 GMT
            Not After : Sep 19 08:11:30 2026 GMT
        Subject: CN=6a880837-c217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d5:65:44:0d:fc:c4:79:75:55:87:89:75:12:
                    5e:82:0a:a9:86:6e:24:fc:6e:d5:c2:60:f1:8e:7b:
                    8c:20:69:46:30:26:04:53:73:d8:50:d7:67:66:d8:
                    00:0c:66:ae:29:a7:00:11:06:34:37:ae:58:a5:29:
                    e6:85:ed:ea:ff:f4:bd:e9:53:e6:65:1a:f0:d5:7b:
                    42:31:43:2b:77:22:97:88:70:60:26:93:f0:88:48:
                    a7:b5:dd:5d:37:f3:03:75:5f:ca:cd:4b:97:41:a4:
                    51:9b:b2:37:f1:7a:4e:c1:63:be:0f:2b:b2:a9:e5:
                    de:aa:bf:da:27:48:7a:5e:55:49:69:2a:a1:ef:26:
                    e4:ea:c2:57:dc:ee:3e:ce:4a:da:5d:7e:0a:7c:e5:
                    ef:13:ba:38:86:0e:99:3d:df:fc:f0:5f:57:5c:3d:
                    1e:7c:4f:a9:c3:65:ca:15:b1:45:b8:6a:29:70:60:
                    55:f7:e6:3b:24:c7:c8:c7:80:c7:6e:1c:63:2f:e8:
                    7f:fb:e7:72:c1:02:74:52:5b:9f:29:e8:85:7d:ec:
                    36:0f:eb:f0:69:ff:19:03:63:3e:83:20:56:37:20:
                    e2:87:88:ce:28:4b:b0:d9:8f:a5:f4:0e:25:ba:4b:
                    63:12:4c:83:44:2a:2b:56:82:d8:08:86:9e:94:45:
                    fe:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:70:37:E5:74:5F:CC:DF:D5:B1:9B:47:87:38:38:91:C8:35:12:F6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC6123F89D3711F1A420DBADCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.211.0/24
                  154.193.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:90:65:29:b7:d1:46:47:36:6f:8e:95:f6:12:67:a6:8e:ab:
         7a:3b:cb:af:dc:d2:0c:4d:ae:4e:44:c6:51:0c:7a:26:30:d5:
         8e:7c:6e:39:74:82:7b:05:84:6b:e6:72:a7:76:f6:95:6a:96:
         e3:74:4f:d6:f1:ba:0b:7b:de:42:64:4a:d1:30:e8:17:bd:4d:
         94:bc:dd:fc:5a:5e:f0:18:ea:a0:87:84:53:f6:7c:d9:05:8e:
         60:f0:f3:c7:0b:51:d3:47:c4:e3:9c:c9:df:7a:12:59:55:a2:
         a9:46:18:d1:57:b6:2a:5b:c9:d3:83:89:1a:d4:bc:70:ea:3a:
         42:39:a3:7b:eb:35:e5:cf:16:c1:14:22:5b:e6:50:f1:45:8e:
         7f:d7:cb:51:5d:0e:63:df:6b:e4:37:6a:d5:6c:cf:18:30:bd:
         e0:8f:a7:0f:47:44:03:0b:b6:bc:55:4b:48:0f:05:d5:bf:52:
         d6:a4:81:88:a9:a0:74:0c:65:3c:b0:7d:7e:fb:38:68:93:5b:
         5d:64:b8:a4:1b:bb:d2:a1:00:ee:37:0b:93:63:53:7a:16:e4:
         7d:bc:c1:2f:a7:34:d7:4d:14:4e:b4:37:8c:04:55:0d:49:64:
         c9:3a:0f:1f:37:6a:87:79:8c:16:3e:f6:ec:59:01:e4:e5:b6:
         7b:d1:86:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----