Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/619D38BEB51111F18DD5F7C5CE1D38B0.roa
File:                     619D38BEB51111F18DD5F7C5CE1D38B0.roa (raw, json)
Hash identifier:          88Nny77lb+gyAqQhrUfYMs4c4KVnYXAgXMnu0q2N39o=
Subject key identifier:   06:AB:E7:34:7B:68:CD:B2:8E:1C:C8:A2:DC:22:54:8A:D0:F4:48:92
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E963
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/619D38BEB51111F18DD5F7C5CE1D38B0.roa
Signing time:             Sun 20 Sep 2026 16:36:08 +0000
ROA not before:           Sun 20 Sep 2026 16:36:04 +0000
ROA not after:            Wed 30 Sep 2026 16:36:04 +0000
asID:                     152179
IP address blocks:        154.193.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125283 (0x1e963)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 20 16:36:04 2026 GMT
            Not After : Sep 30 16:36:04 2026 GMT
        Subject: CN=6ab00b78-4cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d4:85:78:ba:4a:33:52:75:dc:39:1e:9c:a9:
                    f3:01:4f:09:e5:16:3f:c7:cc:55:3e:f2:3d:c4:ae:
                    a5:ce:e4:4f:19:3c:8b:a3:22:1a:07:36:88:2b:2c:
                    cb:aa:51:20:07:c7:be:54:2e:8e:2f:d9:bb:94:52:
                    1b:5d:70:7e:63:23:55:2a:eb:33:98:19:a0:76:a6:
                    6e:69:cf:3f:3d:07:62:92:ab:68:55:68:ca:12:58:
                    2c:61:d7:cb:dd:07:4d:76:c3:c2:13:de:a3:12:b6:
                    52:d2:d2:0a:a5:5d:3e:d9:23:8b:63:4b:7f:23:37:
                    a4:8c:c1:be:10:25:a6:27:06:bb:ea:94:3c:3a:12:
                    57:74:62:62:5d:1d:4f:ff:8d:f1:90:62:95:91:b0:
                    c5:f2:52:91:95:d0:a1:15:53:ad:11:6f:67:b7:9d:
                    07:d9:44:49:9f:3e:f8:b4:36:b2:cc:67:6a:11:4e:
                    32:c3:7f:57:26:1c:c0:a5:a9:48:26:ac:d4:a6:62:
                    27:be:62:f4:c9:ff:69:28:ce:6f:e4:ed:b9:ff:4f:
                    fb:a5:af:2c:8b:59:63:02:52:fd:c9:1d:45:14:29:
                    b6:67:75:21:ae:a9:d1:3b:61:f7:cf:ec:13:a4:9f:
                    4b:83:7f:9e:e5:a7:d4:62:34:e0:ff:2b:28:5c:f8:
                    df:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AB:E7:34:7B:68:CD:B2:8E:1C:C8:A2:DC:22:54:8A:D0:F4:48:92
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/619D38BEB51111F18DD5F7C5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:a9:fd:4d:26:89:4a:27:07:da:8d:cf:f5:26:1f:e9:54:ab:
         b5:b2:a3:b8:c4:20:39:2d:a8:37:b9:ef:1f:3c:8e:89:7b:d0:
         ae:0a:2c:9b:2a:de:cb:cc:fb:da:75:03:26:a6:a4:37:65:b7:
         d6:a3:8d:f1:7b:f7:c0:bc:78:f9:d6:01:bd:bd:d8:88:0c:43:
         05:ff:a2:f3:3b:a9:2b:65:69:d0:90:16:0a:35:37:6d:b3:a7:
         85:5f:01:2e:0c:81:38:65:c3:73:e0:a5:d5:32:12:05:62:7c:
         0e:3b:f9:46:d4:ac:11:05:e8:ee:36:62:64:d3:36:da:78:c5:
         74:21:84:7f:a4:97:c0:28:03:ef:3f:e0:c1:f2:79:4a:82:dc:
         83:2a:cb:d1:5f:37:04:b9:09:f6:af:da:f4:94:df:5c:af:81:
         91:be:7d:b0:79:41:5d:f8:b0:85:89:1c:89:48:2b:3c:af:ea:
         3f:19:54:7a:9b:b7:29:f9:9d:32:62:98:49:ad:da:81:d5:bd:
         2a:40:e2:cc:b0:2b:fe:29:67:cf:8b:8e:cb:70:d1:29:aa:06:
         a2:77:8d:c5:67:5c:cc:2c:53:fe:65:9f:2a:b8:cc:a5:cd:35:
         24:5e:3a:3e:8b:22:b1:ea:4d:7a:b1:0e:d8:81:48:56:fa:22:
         78:a2:6f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----