Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AC7D4F4AB8D11F1A7C497B1CE1D38B0.roa
File:                     1AC7D4F4AB8D11F1A7C497B1CE1D38B0.roa (raw, json)
Hash identifier:          UG7fOIg5lvW9og+n7WX6/hV55i4lbjn3b9/YRY0BIYg=
Subject key identifier:   C5:90:44:DD:1B:F8:03:F3:3E:6E:C1:05:9F:34:78:DD:68:AC:E3:3E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E67E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AC7D4F4AB8D11F1A7C497B1CE1D38B0.roa
Signing time:             Tue 08 Sep 2026 13:56:36 +0000
ROA not before:           Tue 08 Sep 2026 13:56:30 +0000
ROA not after:            Thu 15 Oct 2026 13:56:30 +0000
asID:                     61461
IP address blocks:        154.95.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124542 (0x1e67e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  8 13:56:30 2026 GMT
            Not After : Oct 15 13:56:30 2026 GMT
        Subject: CN=6aa01413-1155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:05:56:0e:8f:d7:c3:70:7a:db:7b:4d:6c:e0:
                    2c:e8:d0:0e:81:7a:72:e3:9c:7d:ea:ab:20:4c:94:
                    59:2b:49:e3:51:67:bb:80:fb:dd:53:92:96:b3:ac:
                    09:68:fe:cc:ce:3f:1a:2e:cf:f5:a7:8d:ba:5e:4d:
                    81:de:e8:54:2d:7f:95:6c:37:4b:8c:4b:34:d7:3d:
                    70:4f:27:bf:92:8e:6e:bc:fd:86:d5:a1:30:7b:a4:
                    59:07:03:23:49:55:d2:2f:49:94:57:d6:30:81:dc:
                    2d:82:fd:bc:74:cc:73:8d:df:77:c9:ce:63:84:3f:
                    38:70:bb:88:7e:cc:17:10:12:bb:99:bb:38:79:5b:
                    a4:c0:35:c6:78:01:86:1f:d4:79:f2:60:64:c5:20:
                    43:2d:d2:0a:5c:b6:e8:1c:5f:07:48:88:f2:09:14:
                    1e:90:17:30:ae:85:a3:ce:13:c7:23:28:0a:7e:33:
                    64:b9:d1:27:8f:a7:dc:79:f9:c5:ec:1d:21:ae:54:
                    3a:2c:c7:77:2f:c7:0b:3b:fc:f3:b1:e6:b3:e8:cf:
                    81:9b:90:09:2b:f2:d1:bd:03:2b:af:31:19:bf:9b:
                    c3:26:52:3f:44:39:8d:6a:f8:72:8d:bb:ac:25:a7:
                    77:e5:bf:14:74:72:6f:16:43:7a:e6:65:42:bb:1a:
                    bc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:90:44:DD:1B:F8:03:F3:3E:6E:C1:05:9F:34:78:DD:68:AC:E3:3E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AC7D4F4AB8D11F1A7C497B1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.95.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         26:aa:bd:40:6e:a7:e1:88:e4:7a:52:0f:94:66:97:31:02:19:
         97:96:80:30:f9:ec:f0:84:6b:e1:de:51:93:8e:e6:e5:53:e3:
         6f:27:4b:a9:2f:ae:77:66:53:3e:86:77:cd:10:f4:36:16:39:
         89:13:25:43:ec:45:83:81:0d:22:4d:f9:d3:67:76:dd:9d:0e:
         a3:ba:dd:2c:de:56:34:58:76:06:c3:1f:43:35:02:4b:02:47:
         80:f4:25:fb:18:21:c9:f3:3b:53:6b:ee:9a:68:31:52:61:df:
         b1:0b:4b:24:c3:18:62:98:6d:74:24:f5:ca:c6:ee:b3:84:66:
         d4:a9:77:1b:66:a7:b2:f4:ef:30:af:1e:ba:60:cd:25:dd:9b:
         bc:d0:b7:8a:c0:36:df:49:15:ea:9f:c3:9a:32:6d:e5:14:5f:
         06:a9:27:cb:98:2e:c6:3e:24:0f:34:22:72:a9:a9:2e:a5:f8:
         79:42:1f:81:fb:a2:c8:80:af:1a:97:73:25:23:62:ee:59:d4:
         90:4a:5a:25:6e:c7:f8:89:2f:f5:91:27:06:41:d7:0e:e1:f0:
         26:77:14:63:57:55:1d:44:7c:74:b8:a8:80:95:80:35:f9:9e:
         de:c5:f1:fd:09:88:96:f0:ca:8a:08:a9:e4:a9:b6:e5:41:8c:
         63:92:e1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----