Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C2F7FA09ADA11F18F5EB4D4CE1D38B0.roa
File:                     5C2F7FA09ADA11F18F5EB4D4CE1D38B0.roa (raw, json)
Hash identifier:          m8IfKUGs9GUdHNyGN2xmIaeLc/Bae1sWedT9N1mZj1s=
Subject key identifier:   7A:46:08:F1:5D:16:41:00:AA:A3:75:2E:60:92:6B:9B:3C:A1:56:CA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DF7B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C2F7FA09ADA11F18F5EB4D4CE1D38B0.roa
Signing time:             Tue 18 Aug 2026 07:56:47 +0000
ROA not before:           Tue 18 Aug 2026 07:56:43 +0000
ROA not after:            Thu 24 Sep 2026 07:56:43 +0000
asID:                     200758
IP address blocks:        154.83.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122747 (0x1df7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 18 07:56:43 2026 GMT
            Not After : Sep 24 07:56:43 2026 GMT
        Subject: CN=6a84103f-ccbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:eb:01:b0:56:a7:95:c8:76:a2:b7:14:6b:e1:
                    4d:b1:97:74:53:2d:94:c4:fb:f8:fc:e2:6d:b2:46:
                    93:89:44:59:b5:eb:65:05:6a:9f:56:ff:3e:9b:a6:
                    b2:8f:b1:fe:9a:8d:87:05:b3:13:2c:de:47:71:ae:
                    da:b3:77:aa:36:ef:7f:16:0f:61:c1:3f:e9:f6:04:
                    01:fd:40:7d:cf:2c:90:0c:4e:8d:10:dd:72:9b:cf:
                    cf:96:6b:a0:22:2a:01:01:53:d1:1b:72:cd:07:0c:
                    9d:97:6c:7f:78:e0:38:e8:fa:05:50:a7:43:5e:50:
                    c0:2c:34:85:c6:3d:28:d3:50:dd:d2:b8:b7:45:5b:
                    60:d9:89:50:51:a6:67:3e:cd:ea:ef:25:8c:81:ac:
                    bc:62:df:69:0c:19:02:09:e3:e5:6c:b3:6d:23:b8:
                    41:7e:f6:53:a1:9c:9a:2e:6e:a7:cc:8c:37:5f:f5:
                    03:ff:32:74:45:05:4e:0b:15:f0:d9:36:20:bb:f9:
                    54:3c:40:09:81:ab:6c:fa:cc:42:c6:6c:e8:68:cf:
                    7c:87:fa:68:10:9b:38:36:2e:f4:ec:f2:f9:3c:f3:
                    d8:67:fe:a1:9e:c8:34:55:c1:01:14:3c:f7:12:de:
                    9f:f8:06:2f:6c:04:a3:b4:fa:0f:cf:05:38:f4:8b:
                    da:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:46:08:F1:5D:16:41:00:AA:A3:75:2E:60:92:6B:9B:3C:A1:56:CA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C2F7FA09ADA11F18F5EB4D4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:50:e8:bd:cc:d5:73:38:c5:0d:06:6b:3a:45:4c:e4:76:35:
         98:00:71:a0:96:49:5e:55:6b:45:4a:24:83:5f:34:15:8a:e5:
         81:70:c2:73:ad:cd:1a:2e:97:e2:37:f5:0a:fa:3b:2f:f3:e4:
         1d:87:bc:ce:ea:b6:39:6d:d9:44:f6:08:25:8e:f4:a8:4f:8b:
         9b:53:aa:0e:9c:83:5d:5e:a7:b3:aa:c3:9a:46:8e:28:72:89:
         b3:36:9f:cb:c1:55:3b:40:24:f6:21:3c:7f:69:fc:c9:f4:fa:
         28:df:0f:5c:43:41:5a:5e:0d:39:bb:b7:01:e2:9b:7b:e1:d4:
         a3:08:a5:0e:a6:f5:da:f2:e7:ec:34:f8:c0:60:19:bf:cb:c0:
         f7:a2:da:bf:d4:92:0e:30:a2:59:a9:b8:8d:5e:89:03:cb:b4:
         5b:33:08:5e:e2:a5:8c:42:a2:90:ff:5a:6f:52:9b:69:eb:22:
         bc:55:42:f0:a3:0c:af:a1:fc:80:d7:72:e8:85:80:5b:e5:5f:
         88:6b:07:b8:1f:99:0e:cc:ff:8c:a3:38:54:e9:f1:f1:60:e0:
         06:08:bd:13:11:33:dd:f4:d0:d2:6e:7f:79:43:90:31:57:06:
         56:01:f0:30:fc:0a:b8:0c:60:49:9f:35:27:8e:da:dc:ab:e8:
         c9:9b:da:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----