Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69B9CD70AD0D11F18CD48BCCCE1D38B0.roa
File:                     69B9CD70AD0D11F18CD48BCCCE1D38B0.roa (raw, json)
Hash identifier:          Eyan4IHJ14WA6V3yTBGjxEa64J2mGbmeeMedTdEUpYw=
Subject key identifier:   32:AE:BE:2A:44:B9:43:B8:30:D8:18:8E:D8:71:B6:77:BF:C5:77:82
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E73D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69B9CD70AD0D11F18CD48BCCCE1D38B0.roa
Signing time:             Thu 10 Sep 2026 11:47:35 +0000
ROA not before:           Thu 10 Sep 2026 11:47:31 +0000
ROA not after:            Thu 15 Oct 2026 11:47:31 +0000
asID:                     397423
IP address blocks:        154.202.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124733 (0x1e73d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 10 11:47:31 2026 GMT
            Not After : Oct 15 11:47:31 2026 GMT
        Subject: CN=6aa298d7-d1f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d0:47:2e:8b:7c:85:75:f5:98:71:c5:27:72:
                    ab:1c:b6:78:d7:7e:27:c5:2f:2e:2e:c4:f3:20:9d:
                    a6:cb:77:e7:75:32:55:ea:9c:7e:63:0e:44:2d:bf:
                    bd:eb:fb:98:ff:95:e2:ad:c5:44:5b:ec:60:96:ea:
                    6a:c0:25:53:f0:c8:ba:8f:c3:c1:9c:6f:67:4f:98:
                    8d:bc:b9:c5:fc:e7:5f:da:25:ec:24:3d:62:2b:36:
                    0c:39:fa:e0:7a:02:11:31:c5:b3:03:ea:be:f7:53:
                    bf:54:2e:e1:2a:8b:f2:6b:f1:54:2d:b8:85:28:9e:
                    ed:cd:e4:cf:d1:6e:c6:85:66:67:7d:ec:2c:29:26:
                    ad:77:35:6e:0a:af:77:7f:a3:9b:3f:d6:0a:6f:78:
                    7b:c9:74:fd:37:17:af:63:64:ba:45:f8:d4:de:77:
                    b9:89:d7:5a:8a:bc:72:cd:8d:0c:32:34:99:a1:15:
                    9f:7f:24:65:2c:43:9d:e2:6b:c1:fc:f6:f7:52:ae:
                    94:a4:f9:a2:95:e2:93:77:49:3f:23:9b:ef:38:1f:
                    7d:98:68:49:98:e5:d2:96:11:f2:27:07:d8:36:08:
                    08:8b:bc:3f:aa:75:73:ef:03:62:3c:36:f5:f2:3f:
                    17:91:0a:35:ff:9d:32:9e:91:48:5a:4f:49:e4:06:
                    e9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:AE:BE:2A:44:B9:43:B8:30:D8:18:8E:D8:71:B6:77:BF:C5:77:82
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69B9CD70AD0D11F18CD48BCCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:68:56:0f:dd:9f:7a:ee:1e:e6:53:1f:02:df:f9:d3:13:93:
         c7:78:81:93:96:36:b7:36:6e:2d:a5:87:d9:dc:1e:57:0a:a2:
         87:76:bd:7f:db:ca:a2:ea:d9:b2:bf:4b:3c:45:df:be:66:62:
         77:1e:eb:f9:48:04:f6:29:97:bd:83:9a:46:88:1b:a6:67:74:
         c2:84:fa:24:05:ee:32:3b:e7:f5:2b:5c:66:ef:9c:3c:9b:fc:
         12:ac:18:30:ae:6e:b0:4d:89:3e:4d:75:cd:80:01:6f:92:69:
         09:4e:72:c2:c9:68:92:f4:a4:69:91:07:6e:8d:c9:cd:88:64:
         d9:9d:43:99:6b:04:35:83:f5:6e:3d:2d:97:7e:b6:55:ec:19:
         12:84:f9:21:b5:cd:64:ba:09:f8:86:b1:c7:bf:53:8a:3c:7c:
         52:2d:d7:a5:b2:d0:60:f2:9a:fc:61:59:c9:a0:16:ec:fb:32:
         99:39:56:f6:51:fd:df:2f:a9:00:16:ae:b1:a5:6d:be:1d:27:
         d1:76:d6:fe:9d:4d:f5:ff:71:33:33:62:96:95:50:0a:e4:b2:
         e2:56:72:2f:4e:b7:8a:92:d6:96:f0:6f:89:0c:42:34:4a:1b:
         ad:89:4e:3d:01:cd:5a:f4:96:0e:22:a5:eb:81:12:55:da:57:
         4c:ce:64:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----