Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C8340389BAF11F19B5FB6DCCE1D38B0.roa
File:                     0C8340389BAF11F19B5FB6DCCE1D38B0.roa (raw, json)
Hash identifier:          fSXVc4eQceVLylox9tpCdJg+bqbap6h4MbCcI8e6zjk=
Subject key identifier:   F9:52:25:C9:3D:75:D7:E6:62:69:4E:51:7D:0E:39:32:A7:9E:76:24
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E001
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C8340389BAF11F19B5FB6DCCE1D38B0.roa
Signing time:             Wed 19 Aug 2026 09:19:16 +0000
ROA not before:           Wed 19 Aug 2026 09:19:12 +0000
ROA not after:            Sun 04 Oct 2026 09:19:12 +0000
asID:                     198652
IP address blocks:        154.198.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122881 (0x1e001)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 19 09:19:12 2026 GMT
            Not After : Oct  4 09:19:12 2026 GMT
        Subject: CN=6a857514-c6fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:87:57:52:76:c0:36:dc:89:9b:24:6a:f6:0e:
                    d4:b5:f7:18:ad:fd:34:d9:d8:6d:3f:99:89:b7:30:
                    b4:b5:a2:23:ed:34:65:5f:8d:23:74:fc:81:a6:27:
                    7d:f4:5a:b2:f1:26:a2:ea:76:ee:1a:94:cb:ee:76:
                    1b:7f:a5:7e:9f:72:31:9e:8b:8f:63:ce:ba:eb:b5:
                    2a:05:22:a3:c0:1a:c4:3b:61:49:b1:4b:f3:b6:f8:
                    9c:01:13:a6:07:03:4a:ea:2b:45:06:6e:ab:91:ee:
                    69:fe:26:52:54:bf:49:ff:c8:cb:02:65:55:e3:88:
                    34:3b:86:2b:ac:86:8e:6a:6a:79:30:ee:3c:8e:39:
                    31:33:a6:8f:8c:13:92:62:9a:50:b0:1c:f0:a5:89:
                    d4:f6:38:15:ad:ad:c5:7a:89:fb:c2:fe:f1:03:6d:
                    46:a6:b0:74:31:a4:a8:8a:d7:d7:6f:cf:bc:49:26:
                    2e:23:2f:ff:9a:6a:b1:f2:25:8b:9a:81:51:d1:89:
                    1f:d4:46:28:b7:3f:18:4c:71:a7:94:e1:76:b1:1d:
                    26:10:9a:f5:4c:40:e3:5f:00:ae:3b:d7:92:f4:64:
                    02:c1:6c:81:20:57:3b:0f:34:00:b2:c7:1f:4d:fb:
                    1c:3a:71:ae:ae:84:48:88:26:55:74:3b:fc:3e:9b:
                    cf:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:52:25:C9:3D:75:D7:E6:62:69:4E:51:7D:0E:39:32:A7:9E:76:24
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C8340389BAF11F19B5FB6DCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.198.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:ee:9a:67:b1:41:60:78:2e:f8:be:f1:d5:6d:63:7e:b1:e2:
         26:d2:4e:90:84:d5:bb:a0:f9:1d:b5:fe:e8:31:af:d8:ec:57:
         a4:46:54:d5:a0:85:ca:15:4f:85:8a:91:3f:a0:e0:88:a0:88:
         26:62:bb:39:0d:1b:af:78:8a:96:f4:dd:75:3a:7d:d7:31:35:
         95:6b:06:84:23:ba:36:6e:fe:eb:dd:0e:1d:e5:58:23:15:3e:
         36:77:bc:9a:4f:3c:4f:73:08:20:4c:86:3a:16:cf:55:8d:9d:
         46:22:aa:3e:ad:b9:97:93:23:0c:15:15:1c:a7:93:b1:11:d2:
         4b:43:d5:7f:1e:7b:f4:3b:cc:ab:71:9b:69:50:15:d2:34:21:
         69:5a:94:19:10:e1:82:f5:24:b1:e5:46:d0:37:18:2e:84:05:
         27:e3:9e:db:35:51:d4:0d:93:80:01:aa:96:23:54:c6:cb:22:
         23:de:c4:37:9c:da:5e:88:1a:d5:19:ed:31:77:88:e6:1b:36:
         1a:08:14:86:f8:e4:da:6f:b7:cd:4c:d1:32:d9:85:ea:69:dd:
         e8:4c:13:64:5f:e6:46:d4:df:87:00:b9:c5:de:0b:44:87:16:
         81:3f:2e:63:14:c8:9d:68:41:5d:37:35:49:f7:ac:4b:ff:5e:
         ab:c9:ba:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----