Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7958A00AA69911F1A21ED1BECE1D38B0.roa
File:                     7958A00AA69911F1A21ED1BECE1D38B0.roa (raw, json)
Hash identifier:          /lcs6jeAaazqJze2wM4qp3ztmLiQX5KkEf8BGlMVDa0=
Subject key identifier:   3D:50:06:31:EC:AC:FE:77:AD:2C:1F:14:F1:09:F5:5F:E2:92:70:DA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E475
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7958A00AA69911F1A21ED1BECE1D38B0.roa
Signing time:             Wed 02 Sep 2026 06:42:32 +0000
ROA not before:           Wed 02 Sep 2026 06:42:28 +0000
ROA not after:            Wed 30 Sep 2026 06:42:28 +0000
asID:                     328608
IP address blocks:        154.91.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124021 (0x1e475)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  2 06:42:28 2026 GMT
            Not After : Sep 30 06:42:28 2026 GMT
        Subject: CN=6a97c558-c597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:df:30:85:7d:97:7e:49:00:c6:d8:a9:b2:e6:
                    f5:67:ac:80:32:68:14:15:83:c1:b3:31:5d:9b:31:
                    d5:19:b5:2a:63:60:b5:3a:4d:ab:3e:68:70:08:83:
                    ab:fd:30:cc:92:e2:06:ae:0f:a2:0f:6b:59:f0:8a:
                    6d:d3:dd:df:a9:d4:c4:1d:e1:2a:9b:46:57:26:27:
                    5e:bc:90:86:40:39:45:7f:bb:de:0c:b5:77:31:b1:
                    37:3f:6d:a4:94:20:3a:fd:0e:de:7d:be:e1:d6:18:
                    71:37:7b:ad:70:ab:f5:1c:7c:a9:06:b9:96:5d:f4:
                    16:18:ba:f0:fe:de:a0:30:55:0f:ad:e9:3c:5f:52:
                    e8:63:c5:fe:2f:fd:ac:f9:df:ea:e3:50:b2:59:94:
                    49:d0:e3:82:21:3b:17:c1:47:7b:7a:27:28:c2:d3:
                    d2:9d:30:59:e2:dd:65:7a:dc:d3:c7:c6:cb:58:42:
                    d7:8a:85:b3:99:85:a6:aa:64:01:23:ee:4f:f3:d9:
                    22:3f:f8:83:95:64:d9:89:f4:89:2c:8d:b9:9e:58:
                    82:cf:f2:f7:3d:ac:9a:98:e3:71:86:4b:0c:85:25:
                    94:f6:df:a5:06:ab:b3:85:ea:73:01:1d:1d:c7:17:
                    29:7c:fa:e1:15:95:aa:62:9e:53:88:4e:4d:3b:d4:
                    81:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:50:06:31:EC:AC:FE:77:AD:2C:1F:14:F1:09:F5:5F:E2:92:70:DA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7958A00AA69911F1A21ED1BECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.91.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:0e:95:43:63:66:60:bd:6f:a1:0b:2f:f1:e3:31:8f:bc:d2:
         26:4b:da:d0:4f:d9:85:d4:ae:08:2e:a2:b8:5f:c2:78:be:0c:
         dc:d6:b7:ae:4f:7b:59:89:ac:f4:9d:20:e4:ea:2d:9c:70:63:
         87:0e:11:75:6a:cb:d4:ff:73:97:92:3f:26:13:f3:a8:ac:0d:
         6e:98:a4:d8:6a:18:b9:2b:df:e9:d5:4c:39:5e:28:20:1e:d6:
         dd:90:b6:0a:39:c5:fa:dd:2d:e8:15:0a:df:52:38:c1:59:de:
         5e:19:94:f7:f8:6b:be:c9:7c:e0:53:f7:f2:90:9c:c8:1a:0b:
         a8:a2:78:70:62:19:44:18:9e:fc:42:de:d9:a8:08:9a:8d:81:
         26:4d:bb:28:ca:5a:c0:ad:97:36:c9:6f:0a:79:e0:f2:a1:42:
         33:f7:93:91:ce:4d:61:22:7e:9b:b4:09:d9:93:aa:12:1b:9e:
         4e:33:0e:eb:ea:2b:cb:7c:35:37:a2:09:a6:73:79:e3:32:53:
         d2:d7:8a:d4:32:40:75:17:ab:47:f9:b4:51:bb:da:c3:6f:56:
         62:c0:9e:62:9a:21:4a:1c:3a:5f:87:ac:41:e6:22:3d:e1:8b:
         64:cd:15:47:38:fe:e3:f2:66:cd:bf:24:2d:5f:e0:21:ae:ed:
         56:e8:cc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----