Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7280B0CEAF4011F189645DA4CE1D38B0.roa
File:                     7280B0CEAF4011F189645DA4CE1D38B0.roa (raw, json)
Hash identifier:          9B2iaz4IugjbjSvQGEzR8LHyZ0iYFUrhAmg8jPbTjlo=
Subject key identifier:   C7:F6:5E:C2:D8:17:18:74:F4:14:37:AF:28:21:1E:70:42:3D:B9:31
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E7F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7280B0CEAF4011F189645DA4CE1D38B0.roa
Signing time:             Sun 13 Sep 2026 06:57:56 +0000
ROA not before:           Sun 13 Sep 2026 06:57:52 +0000
ROA not after:            Fri 09 Oct 2026 06:57:52 +0000
asID:                     197574
IP address blocks:        154.86.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124913 (0x1e7f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 13 06:57:52 2026 GMT
            Not After : Oct  9 06:57:52 2026 GMT
        Subject: CN=6aa64974-3ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:70:02:55:6e:cc:bc:9d:dc:85:e0:2a:89:2e:
                    73:1c:95:f0:24:8b:3f:0e:fe:ef:b8:d1:b9:3b:28:
                    4d:02:8f:36:53:0c:18:f2:5e:8b:e3:8d:af:bd:6e:
                    cd:b3:18:fc:72:44:5b:58:7d:e4:61:e3:8a:73:05:
                    79:59:f7:6d:63:ad:6a:2d:31:2d:7e:6c:8a:bb:4d:
                    34:05:c3:c2:36:bb:fa:0f:c6:e3:4e:fd:f6:79:6e:
                    68:9c:bd:49:e1:db:90:e0:cd:18:c7:67:88:58:aa:
                    63:76:06:0d:58:82:6d:ab:56:f4:41:7d:9b:a6:2a:
                    2b:a2:6f:60:50:af:9b:e9:91:54:16:1c:2d:1b:93:
                    a4:3e:f8:eb:46:a0:62:8f:ae:fe:22:9b:f7:6d:7d:
                    a2:fd:15:1c:a7:cb:7b:df:e9:2c:f1:b5:43:71:e1:
                    de:b2:59:4d:26:4c:01:e0:44:40:d6:f4:f1:07:f8:
                    02:5b:00:60:79:98:61:99:9c:2a:36:a2:af:36:60:
                    43:44:6f:0a:04:fd:ac:be:23:2c:c2:97:c4:3e:12:
                    94:6b:e2:01:3c:53:5e:9b:05:e6:b2:2a:b8:cd:ee:
                    44:b7:09:f1:3f:7d:4c:a2:d7:27:fd:5f:8a:99:a4:
                    3c:74:74:f7:84:68:21:61:31:e1:0e:e6:9b:e7:63:
                    61:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F6:5E:C2:D8:17:18:74:F4:14:37:AF:28:21:1E:70:42:3D:B9:31
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7280B0CEAF4011F189645DA4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:6b:fb:ca:0b:e8:28:f0:06:f3:b0:15:72:07:04:e4:76:8f:
         35:9f:e2:5c:31:3e:b1:c4:60:a2:6a:86:4b:e7:77:70:ef:27:
         d5:09:6c:f9:1a:2a:e7:5b:5e:54:2d:c1:a8:d5:38:88:5e:1d:
         90:44:0f:c0:83:95:6e:6d:56:f7:44:39:9e:7f:b7:22:9b:7b:
         df:a1:7c:93:ba:06:f2:8c:b7:ce:49:05:8f:fd:a8:6b:fe:1b:
         3c:ee:35:9f:05:9a:39:4a:cb:2e:79:72:66:a1:9f:93:d9:22:
         e5:17:6a:35:5f:bc:9b:99:f9:da:ec:89:6a:91:53:3d:56:20:
         ab:45:ad:1b:21:d0:b8:e2:1e:39:79:35:03:aa:bc:40:65:5c:
         a8:6f:1c:99:b9:0d:65:a2:9e:b9:b6:3b:ad:28:7a:74:ef:88:
         85:2f:31:60:9c:98:09:c0:ee:a5:5d:b9:98:f7:a1:f8:e2:85:
         e3:2f:05:c6:c3:b0:d4:b6:df:14:75:f4:75:d2:26:dd:b3:26:
         e2:79:2e:13:52:6a:02:f5:33:85:a8:92:fd:2f:35:ca:f1:13:
         43:b9:c1:17:2f:c5:86:2d:13:58:0a:c0:dd:57:28:b2:44:5f:
         4f:4a:93:29:e3:da:0a:c2:cd:63:d7:f8:e1:1d:fd:4e:d1:ce:
         ae:82:99:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----