Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F1D07B8A1ED11F1954FA4F7CE1D38B0.roa
File:                     0F1D07B8A1ED11F1954FA4F7CE1D38B0.roa (raw, json)
Hash identifier:          xE4tT1q1i84ySMwjatZwsId0sd/iRcgCbERvbbn7dJo=
Subject key identifier:   A3:77:7D:F9:29:6D:3B:75:9B:7F:25:15:98:3B:29:FE:2D:38:77:F6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E3A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F1D07B8A1ED11F1954FA4F7CE1D38B0.roa
Signing time:             Thu 27 Aug 2026 07:58:16 +0000
ROA not before:           Thu 27 Aug 2026 07:58:12 +0000
ROA not after:            Thu 02 Sep 2027 07:58:12 +0000
asID:                     132839
IP address blocks:        154.93.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123813 (0x1e3a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 27 07:58:12 2026 GMT
            Not After : Sep  2 07:58:12 2027 GMT
        Subject: CN=6a8fee18-693a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f8:36:4e:c1:90:9c:f0:6d:e1:1b:d4:1f:15:
                    cf:58:0e:de:a0:81:2c:c0:00:3d:1c:92:7c:45:0e:
                    f0:c8:1b:6d:40:f1:83:71:a4:10:b6:f4:f2:47:35:
                    5f:c8:d7:ef:6d:90:e3:3f:1e:f8:5e:2d:d0:a9:3f:
                    a7:b3:be:0c:ec:cd:1c:c1:fb:56:1f:24:15:0f:1c:
                    b4:fc:d6:7b:38:11:47:10:d3:c4:10:c9:45:c0:9d:
                    3f:0b:77:c3:94:04:d1:a5:ad:1c:99:d9:28:04:bb:
                    08:e7:49:93:06:46:6c:c1:58:95:0c:c1:12:49:25:
                    1d:00:76:53:3d:74:1f:0a:15:b1:57:f1:f8:67:2a:
                    71:05:f1:0b:21:44:69:a8:23:23:97:88:30:52:8e:
                    f2:12:72:c6:d3:8f:db:68:37:1c:be:4a:33:28:f3:
                    60:aa:f7:b3:37:bc:8a:23:cb:13:f7:95:cd:88:78:
                    7f:63:b2:38:e5:69:31:46:71:2b:0f:2b:72:68:2e:
                    f0:16:d7:b3:2d:13:44:6d:c1:b8:1d:de:a0:ed:53:
                    af:d1:fe:2e:17:9a:08:44:03:53:cf:9c:a5:65:7a:
                    6c:7e:ce:29:ca:e1:37:fe:ae:55:55:80:e9:08:4b:
                    11:ae:8e:bc:50:07:3e:90:0f:e9:0c:f3:83:25:f0:
                    6a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:77:7D:F9:29:6D:3B:75:9B:7F:25:15:98:3B:29:FE:2D:38:77:F6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F1D07B8A1ED11F1954FA4F7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.93.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:5c:42:bb:9f:c7:58:8e:27:76:20:d7:72:01:f4:10:de:88:
         ab:14:aa:c6:9c:7a:63:f8:3d:81:f6:bd:76:6b:29:5d:3b:46:
         ad:9a:aa:db:ee:cc:57:dd:56:fd:e6:4c:10:76:b1:9c:a5:03:
         3e:68:24:ba:b7:f3:70:f7:a7:29:2a:01:c6:6b:b7:c2:fe:7d:
         16:20:93:6f:46:6d:83:44:05:c8:a4:9a:2a:90:8f:81:ea:f3:
         c2:e9:cf:48:87:65:2a:85:56:fb:fc:d1:a2:f1:df:63:8c:81:
         08:ac:1b:f8:32:a3:4d:59:24:eb:95:31:51:5e:d8:cd:0b:26:
         be:4a:48:46:e8:c7:03:e8:2a:b3:a0:4d:93:eb:02:61:02:c6:
         56:54:50:5f:b1:e5:96:79:19:0b:b1:05:b2:fe:c3:d3:34:f3:
         b5:00:22:33:4a:6a:73:60:f8:6c:41:6b:10:ca:f8:8a:ac:40:
         fc:44:84:b3:46:e5:4d:07:39:4c:05:96:de:c2:e6:36:5b:c4:
         6d:dd:d0:e7:be:ee:80:14:58:df:ed:06:2e:12:04:c4:58:0f:
         d2:eb:b6:5e:42:88:94:13:7e:37:9c:21:67:e3:78:7a:f9:88:
         26:16:49:1a:01:22:84:e4:4f:2b:d2:87:4f:db:15:2f:3d:ee:
         27:0f:96:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----