Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66F66E3A9BA711F1951EDBAFCE1D38B0.roa
File:                     66F66E3A9BA711F1951EDBAFCE1D38B0.roa (raw, json)
Hash identifier:          FG1MHlXvXwegKv743EGRO4w2wFj996QillVroMlLPa8=
Subject key identifier:   8B:DF:44:A2:58:EE:C8:CD:77:B9:F3:01:80:8C:C1:0F:F4:1B:71:D0
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DFEB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66F66E3A9BA711F1951EDBAFCE1D38B0.roa
Signing time:             Wed 19 Aug 2026 08:24:32 +0000
ROA not before:           Wed 19 Aug 2026 08:24:28 +0000
ROA not after:            Sun 27 Sep 2026 08:24:28 +0000
asID:                     151196
IP address blocks:        154.90.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122859 (0x1dfeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 19 08:24:28 2026 GMT
            Not After : Sep 27 08:24:28 2026 GMT
        Subject: CN=6a856840-5405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bd:cf:80:67:0b:e0:7f:ae:1f:0d:c5:90:d0:
                    9b:8d:f6:94:9d:63:6d:97:5e:52:e8:15:bf:2d:6b:
                    ca:f5:20:a1:71:10:f6:e3:d4:1d:a4:43:6e:5b:c0:
                    6a:dc:b9:f2:13:0b:42:3f:71:66:b6:89:88:d8:77:
                    3b:86:67:41:bb:f1:ae:48:23:cb:7e:57:b9:79:e4:
                    15:8a:b2:ff:16:78:3d:be:da:7f:b2:ae:e4:18:0a:
                    b7:ad:05:e9:ce:56:75:61:00:27:d4:ac:61:9f:4a:
                    f2:78:59:b3:af:ff:df:51:17:4c:87:1a:76:42:32:
                    0d:52:78:a2:03:19:42:5f:91:80:a1:ca:5f:2b:d5:
                    81:da:b6:b4:6b:e3:18:a8:38:b4:af:ae:87:f1:47:
                    d9:8b:4b:6f:50:22:dc:15:52:27:48:d2:7f:b8:b2:
                    8a:9d:c2:77:bd:4e:e5:93:ac:8a:f2:8f:8d:a1:8e:
                    f8:e0:3a:97:e8:75:1f:0d:cd:8a:1a:b0:8f:ff:2d:
                    a7:0b:9d:9f:20:37:c1:f2:36:d1:2f:c1:93:3c:e6:
                    87:90:5b:c6:1b:f1:03:5b:7b:57:7d:ed:7d:54:85:
                    ba:a6:71:5c:b0:e9:e5:08:7f:e9:0b:a5:50:e4:75:
                    b2:4d:fe:b8:61:17:1c:00:18:62:20:b0:90:35:38:
                    67:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DF:44:A2:58:EE:C8:CD:77:B9:F3:01:80:8C:C1:0F:F4:1B:71:D0
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66F66E3A9BA711F1951EDBAFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.90.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:43:90:b2:ea:bc:6f:10:d5:45:78:54:f3:ec:cd:e9:7a:62:
         b1:89:cb:8c:ac:e7:bf:84:93:a8:5b:5e:f1:af:16:3a:f6:ed:
         db:d7:2a:bc:7b:bf:32:de:a8:70:00:a5:65:c0:7e:e4:1f:5f:
         61:f7:9a:95:1a:4f:43:28:e4:f4:f1:ca:ec:64:bd:22:0a:d9:
         b9:55:e4:dd:6c:b0:90:04:8c:61:d8:b9:a0:d8:cb:d3:c4:84:
         43:c8:97:a7:a5:0d:e5:5d:38:60:22:b6:50:0a:b5:cb:62:2a:
         1b:f5:e3:f5:46:79:b8:ab:ae:78:69:b0:f8:1f:e9:f5:1e:59:
         4e:00:a8:95:98:4e:ef:83:d0:d7:5a:1d:d8:28:7f:00:b5:3a:
         3b:f7:7e:02:e5:a8:3c:a6:67:38:54:34:7d:5f:e8:28:fa:06:
         fd:43:e0:6b:c3:ba:08:14:08:15:06:18:0e:ae:b9:3d:28:50:
         3e:1a:a7:a8:1a:d5:6e:be:ae:0f:f4:c7:89:e4:00:b2:e5:03:
         84:1f:00:75:6d:a2:72:54:c4:1d:a6:b2:c5:ac:b9:bb:d5:15:
         a7:98:18:02:34:9d:bc:77:72:f2:74:3b:0a:34:ba:e4:68:12:
         bd:4e:df:2d:27:66:d0:50:6b:69:93:fc:68:16:4e:e2:aa:db:
         1e:ed:c3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----