Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F21E28EADCC11F1A5858CD3CE1D38B0.roa
File:                     5F21E28EADCC11F1A5858CD3CE1D38B0.roa (raw, json)
Hash identifier:          sX6F36wRX9rO7eJIVA/8FTOhkvdK/52WtFCi6+RqI80=
Subject key identifier:   F0:6C:D2:2D:06:2C:45:4A:EB:0A:D6:08:B7:FF:4A:CF:04:C5:DF:AD
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E789
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F21E28EADCC11F1A5858CD3CE1D38B0.roa
Signing time:             Fri 11 Sep 2026 10:34:31 +0000
ROA not before:           Fri 11 Sep 2026 10:34:27 +0000
ROA not after:            Fri 16 Oct 2026 10:34:27 +0000
asID:                     151407
IP address blocks:        154.88.64.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124809 (0x1e789)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 11 10:34:27 2026 GMT
            Not After : Oct 16 10:34:27 2026 GMT
        Subject: CN=6aa3d937-d29c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:09:61:34:5d:e8:6b:82:2e:06:46:fa:a9:42:
                    01:03:67:ad:ad:f7:5b:8e:17:bc:a8:2f:fe:20:df:
                    bc:df:80:10:91:34:f9:39:56:c1:a7:02:17:4c:f9:
                    ed:30:49:85:8d:91:9b:e5:f5:f5:5d:f3:6d:cc:b0:
                    57:60:df:38:fe:87:71:3b:a1:4d:38:82:cd:13:a1:
                    85:8b:98:85:ae:5b:89:5f:a7:03:b7:79:14:cd:69:
                    35:f0:cb:4e:99:98:f2:c9:7b:a9:79:e7:26:09:4d:
                    32:15:c8:46:7b:46:29:29:70:9f:55:10:72:6f:5d:
                    6a:64:b5:17:77:d4:b5:55:59:30:4b:2d:f8:04:17:
                    8e:d3:e2:f0:8a:76:30:74:59:58:0d:33:43:80:4b:
                    3b:e2:96:95:7b:57:c2:dc:00:0c:e0:31:ea:96:18:
                    ec:82:d4:85:ac:28:10:b5:d2:00:3e:c3:6e:68:12:
                    65:cc:96:72:99:84:86:66:c4:3e:7a:e7:49:40:35:
                    74:80:73:5e:f3:f1:44:6b:99:6e:74:6c:52:1c:58:
                    7c:39:4b:b9:ec:76:6b:4d:4a:95:1d:0d:13:b3:f3:
                    51:32:0e:56:f3:74:da:ce:9a:c1:19:a8:c8:11:3e:
                    0c:ad:28:d3:a5:e0:b5:15:2d:ea:26:59:fa:aa:aa:
                    93:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6C:D2:2D:06:2C:45:4A:EB:0A:D6:08:B7:FF:4A:CF:04:C5:DF:AD
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F21E28EADCC11F1A5858CD3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:a2:55:f7:88:1c:25:1a:b3:aa:c0:49:4c:3a:65:23:35:b6:
         c8:d6:2f:ba:c9:bd:68:42:eb:2d:ba:f0:98:74:77:e7:2c:a9:
         fb:81:11:c6:f7:e1:4b:89:85:e5:f0:87:26:e0:37:43:9c:db:
         c6:a9:e2:8c:e8:5c:79:d1:f6:ad:8c:93:03:7e:8d:1d:6e:d2:
         24:b8:a9:e0:e1:c1:ac:16:53:3d:25:cf:a5:ad:c2:fa:b7:eb:
         9b:e1:8e:bb:29:d1:7a:61:d2:87:20:4f:ae:80:ac:27:f8:5e:
         d1:41:3a:3a:7a:21:c9:4c:d9:d0:4b:d0:40:11:90:12:c4:3e:
         9b:32:ea:da:04:94:71:b5:d0:42:5b:f4:05:85:82:e0:69:c3:
         5b:94:aa:ba:f1:ac:f0:9d:99:80:20:2a:45:6f:0c:8f:82:8c:
         b1:85:cf:f6:da:6e:86:b8:a9:76:9a:83:98:a9:70:7d:1d:61:
         b8:bb:b3:e8:78:f9:c3:0f:a0:15:f9:30:dc:21:44:5c:3f:a5:
         78:c9:be:ae:f5:84:65:d7:d6:98:82:50:d6:27:6a:28:fa:a6:
         f8:51:ab:24:f4:92:c7:67:b1:11:e7:c9:ac:df:36:86:fa:1e:
         ac:55:97:58:75:0e:b9:6d:91:4a:c6:6e:d6:94:9a:4a:03:36:
         77:e6:54:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----