Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5945FA80B01511F1941CCDAACE1D38B0.roa
File:                     5945FA80B01511F1941CCDAACE1D38B0.roa (raw, json)
Hash identifier:          Rw/XCq7cN5RM89H4zHqdQBP/PBEGoHCvQ+UFHaMZwyQ=
Subject key identifier:   E0:88:6A:75:9C:44:C5:2E:91:B8:B3:CF:DA:39:C4:57:66:7C:1B:A4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E81E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5945FA80B01511F1941CCDAACE1D38B0.roa
Signing time:             Mon 14 Sep 2026 08:21:57 +0000
ROA not before:           Mon 14 Sep 2026 08:21:53 +0000
ROA not after:            Fri 30 Oct 2026 08:21:53 +0000
asID:                     55933
IP address blocks:        154.201.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124958 (0x1e81e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 14 08:21:53 2026 GMT
            Not After : Oct 30 08:21:53 2026 GMT
        Subject: CN=6aa7aea5-cee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d1:31:f9:0e:c3:14:8f:13:b0:7b:8e:71:c1:
                    ad:51:0d:4b:84:e7:30:5e:4e:83:1e:bc:a8:19:4f:
                    4a:b2:63:b2:48:3c:be:44:2c:d2:cb:e9:76:8a:00:
                    27:1d:78:37:55:ee:6b:31:eb:0a:df:90:b0:55:91:
                    e2:cf:b8:99:87:26:09:5e:77:38:52:5a:c4:80:b7:
                    5f:bf:43:c1:f9:4c:d7:b8:8a:c7:fd:78:84:37:4b:
                    ec:b2:33:37:f1:48:fe:06:cd:63:b7:ae:83:c6:f7:
                    23:4d:bd:23:99:33:cb:af:85:ca:d8:50:51:8b:b7:
                    38:ef:73:b4:5e:55:d4:e7:fd:c0:f4:6a:5c:0d:18:
                    43:f3:ae:d3:b1:d3:cf:24:4f:04:21:fc:cd:f1:86:
                    08:ba:62:73:21:a7:8e:2c:75:5d:f1:24:39:0f:51:
                    59:d5:53:d2:28:a5:57:1e:a1:08:64:d3:16:a9:e7:
                    fe:91:79:9e:34:f3:10:9d:7d:21:b6:8c:54:08:4c:
                    dc:fc:3c:2c:ba:4b:ba:c8:2f:8f:92:91:3f:53:e4:
                    cd:22:16:d9:62:a5:b1:cd:23:f6:3e:02:12:06:5f:
                    fd:cb:af:f2:00:eb:64:30:a5:b0:79:43:da:21:ad:
                    d0:e6:b8:5d:ae:5a:4c:e9:12:41:41:cf:44:7e:50:
                    b8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:88:6A:75:9C:44:C5:2E:91:B8:B3:CF:DA:39:C4:57:66:7C:1B:A4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5945FA80B01511F1941CCDAACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         24:4c:08:56:6b:78:96:f0:ce:ff:ef:64:7c:dd:45:1a:aa:69:
         e5:61:35:5b:85:e5:d1:f7:f0:ed:8a:3e:5c:c7:00:02:b1:1e:
         42:02:cf:31:1c:ae:b9:5e:6b:cf:c3:01:ff:ea:45:2f:84:a7:
         31:6f:4e:40:e9:cf:7f:fd:ed:81:5e:16:f6:f7:c7:bf:43:a8:
         43:53:a0:41:2e:35:11:e5:3d:94:f2:3e:49:3f:1f:14:9e:ee:
         1f:5e:9e:18:c7:2c:61:12:de:73:38:00:cc:94:ec:68:e4:7f:
         c4:b9:38:24:31:43:c6:14:d8:0c:b5:d9:6a:90:5e:3a:90:95:
         77:c3:4d:ed:c1:ca:7b:ea:f1:4e:69:46:8b:02:ee:af:d5:ce:
         86:40:ad:30:a0:3e:b8:59:1d:00:1b:5a:ba:1e:aa:dd:ab:08:
         20:61:41:48:2f:10:84:38:3e:b1:be:a3:f6:00:c3:e5:3a:67:
         9c:c0:c4:52:73:dd:8a:ed:b8:af:a3:30:12:d1:81:72:f2:4b:
         57:90:29:08:5a:35:a1:c1:c2:5c:b2:5b:75:8d:96:5a:8f:fc:
         e6:f4:ce:a3:50:7e:05:1b:8d:00:08:46:77:69:f6:17:40:7e:
         8d:e9:48:06:25:80:e8:7f:b0:0d:d7:5f:1f:a1:78:3c:e3:d3:
         ce:cc:53:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----