Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D5E2876A77611F1945C94F5CE1D38B0.roa
File:                     3D5E2876A77611F1945C94F5CE1D38B0.roa (raw, json)
Hash identifier:          SXFQuK4X6/BQHQ9m2vHY6v6ldF4+rwxJYvzEd7lmaRc=
Subject key identifier:   F9:A6:79:C2:FD:11:FC:5C:85:E7:37:CD:76:D9:68:57:4D:AA:B5:6B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E511
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D5E2876A77611F1945C94F5CE1D38B0.roa
Signing time:             Thu 03 Sep 2026 09:02:50 +0000
ROA not before:           Thu 03 Sep 2026 09:02:47 +0000
ROA not after:            Sat 10 Oct 2026 09:02:47 +0000
asID:                     63139
IP address blocks:        154.95.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124177 (0x1e511)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  3 09:02:47 2026 GMT
            Not After : Oct 10 09:02:47 2026 GMT
        Subject: CN=6a9937ba-0a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f2:5e:81:19:84:a2:18:0a:e9:11:c2:22:9e:
                    f4:66:e8:23:aa:3e:53:a6:d9:93:35:93:c5:77:8f:
                    2c:60:0b:0d:6a:5f:77:f6:78:44:6d:26:02:7e:29:
                    c8:ed:ce:65:88:55:74:84:a7:eb:2a:ce:0a:04:c8:
                    8e:3b:b3:b7:91:8f:c1:21:f6:28:24:2b:3a:0f:0e:
                    d1:b7:65:b4:bb:5a:00:6f:f4:6e:42:88:6d:5f:85:
                    6d:01:09:aa:f7:76:29:08:8d:53:06:e2:c9:f3:ca:
                    b4:85:c7:60:15:66:76:44:40:fc:65:08:e3:8e:dc:
                    27:08:b0:84:b3:ec:1f:4c:64:a5:76:88:4b:3e:20:
                    3c:a5:ab:82:b2:02:a0:c3:bf:f7:0e:1b:e9:00:25:
                    c9:66:f0:25:92:86:bf:49:42:82:02:6b:5d:30:40:
                    fb:b2:7b:ab:89:55:52:0f:a8:17:b9:7a:a5:98:0f:
                    b9:70:0c:b7:0e:66:07:22:cd:5e:c4:a8:aa:5f:d6:
                    5d:2b:6c:b1:f3:30:7f:2c:56:34:b2:80:9a:53:0c:
                    c9:9a:29:7a:99:d6:26:10:24:9b:ae:9e:ce:6a:97:
                    a2:4d:38:31:90:f3:0c:c9:df:eb:02:1f:dc:b0:17:
                    61:15:cd:9e:32:be:90:92:ca:3a:c7:5f:1b:1b:b6:
                    da:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A6:79:C2:FD:11:FC:5C:85:E7:37:CD:76:D9:68:57:4D:AA:B5:6B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D5E2876A77611F1945C94F5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.95.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:e1:e6:b8:ce:f5:ac:f1:b3:4b:4e:fc:36:f2:a0:8f:3c:61:
         dc:90:f4:c0:de:82:77:dd:fd:51:5f:e2:82:0e:c4:5f:55:92:
         97:82:91:8a:9f:b8:34:0e:bb:9e:ae:a3:4f:17:cd:82:58:76:
         5d:46:0e:8c:d0:bf:f7:f2:f8:93:37:54:f3:c3:50:06:a7:31:
         8a:5e:ab:ad:f7:18:52:21:f3:61:39:0a:d2:34:89:81:8c:fa:
         e0:82:f3:85:f3:3a:92:a9:d5:16:2d:32:69:9f:a1:4d:33:28:
         96:fb:52:4e:b8:37:ad:85:e1:2a:96:f1:b8:5f:db:54:3d:2d:
         ad:dd:cf:ac:8b:b3:22:18:ce:9a:81:a4:b2:3a:4a:c1:b8:49:
         cc:6a:5c:dc:1c:0d:f3:c2:59:56:1e:fa:fb:b2:38:01:8a:b7:
         24:43:06:f8:d8:3f:d2:8e:d6:90:f4:29:85:cd:93:07:2c:5d:
         5e:01:f3:67:9e:7e:be:08:6d:5b:4a:5e:d6:fc:07:c2:d3:a6:
         df:d2:8c:6b:52:48:a7:26:8d:0e:e0:a3:f6:15:d1:44:b7:02:
         f0:34:19:65:7b:ce:26:5b:87:2e:31:2b:61:60:99:fb:35:72:
         d0:63:f3:b5:39:f2:ec:94:5c:e1:07:d0:4e:48:4a:aa:ee:7b:
         b0:73:18:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----