Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/650298C0B0DC11F1810152E1CE1D38B0.roa
File:                     650298C0B0DC11F1810152E1CE1D38B0.roa (raw, json)
Hash identifier:          +3AnMdt9AkocH7Zs/MEwDxkz7abChmqoB+ezNrMvNEs=
Subject key identifier:   77:09:CB:FB:88:BF:F3:82:A9:5B:30:35:37:42:E5:EE:BD:30:EC:BB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E847
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/650298C0B0DC11F1810152E1CE1D38B0.roa
Signing time:             Tue 15 Sep 2026 08:06:46 +0000
ROA not before:           Tue 15 Sep 2026 08:06:41 +0000
ROA not after:            Sat 24 Oct 2026 08:06:41 +0000
asID:                     214413
IP address blocks:        154.194.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124999 (0x1e847)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 15 08:06:41 2026 GMT
            Not After : Oct 24 08:06:41 2026 GMT
        Subject: CN=6aa8fc96-c34f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4c:32:29:b7:9c:d0:02:75:7d:85:da:ef:a7:
                    52:4a:47:aa:37:ec:9d:45:72:6f:f8:d3:61:8c:58:
                    cd:35:03:61:a3:22:d1:9e:65:81:fb:32:a3:77:03:
                    b5:e7:7b:80:67:51:2b:9f:95:10:27:d1:06:78:4b:
                    af:1b:79:66:b5:a8:c2:08:92:7e:06:b9:2e:c4:d2:
                    8c:26:2b:9f:cd:23:27:cf:54:b7:00:23:6a:b5:64:
                    c0:eb:dc:6a:79:3b:25:41:d4:d2:39:cd:fc:8a:c2:
                    8c:66:1e:69:9b:56:9c:73:8c:54:e4:68:d0:c3:9a:
                    0e:61:7b:59:e2:77:a1:88:43:28:dd:4f:66:3a:e5:
                    59:cb:13:3b:c8:02:3b:14:12:59:6a:fe:3c:73:bd:
                    86:55:42:57:b2:15:49:54:46:71:e6:21:4c:27:60:
                    7d:73:d8:b6:06:39:70:ec:d1:54:28:a0:3c:70:c5:
                    7f:b5:12:fc:15:3d:07:83:05:af:04:0a:10:01:59:
                    2b:38:22:c4:76:fc:4a:12:7c:7b:0a:4f:c5:45:4e:
                    f3:88:3f:bf:f6:bf:cb:eb:5d:7f:b4:9d:db:d5:cc:
                    d4:f9:77:78:9d:5d:9c:16:a8:d1:21:8e:c5:39:c4:
                    cb:5d:47:77:30:67:34:38:6c:49:46:4a:a2:f6:48:
                    5d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:09:CB:FB:88:BF:F3:82:A9:5B:30:35:37:42:E5:EE:BD:30:EC:BB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/650298C0B0DC11F1810152E1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:37:41:f3:70:7b:ac:8b:c0:27:3e:6b:1d:7b:f2:fe:d1:3f:
         62:1c:61:99:9b:48:b7:d6:84:c8:59:67:3a:61:e7:c7:21:c5:
         80:4b:ff:0b:52:d8:e6:fe:f5:db:11:65:b4:27:46:57:7e:51:
         6c:58:23:e7:05:61:8f:87:28:7d:ba:96:9b:35:f1:63:fb:c3:
         86:cf:b8:3e:2d:83:ce:8c:91:43:cb:a9:f9:af:01:75:4b:a3:
         01:4d:03:6f:34:51:42:6d:68:2e:fa:1c:dc:bf:11:e8:5a:da:
         70:b1:0b:0a:e6:dc:e5:e8:e6:d2:ac:b3:16:d6:60:b0:c8:f1:
         0b:51:66:a9:57:ef:5a:d3:9d:48:ec:e5:dc:36:b0:f2:23:45:
         b3:14:07:dc:4a:02:40:b3:4d:80:6d:9d:e7:d6:d0:59:79:88:
         d3:c1:a9:ae:bf:bd:6c:7e:89:9d:a5:01:6d:39:c9:fd:0f:b3:
         78:ae:de:13:fe:7e:d0:b3:61:58:97:74:54:d1:b3:52:df:23:
         2d:13:80:65:23:d0:79:34:97:7d:52:3d:9b:cf:4d:fb:27:70:
         c7:04:54:fd:02:61:d0:a5:d8:9c:af:9a:98:a7:b9:a2:0c:d2:
         58:19:73:f5:48:e7:fd:08:c8:35:e0:d8:d9:a0:c9:ac:61:13:
         a5:32:be:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----