Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D343D04B00F11F195BB7906CF1D38B0.roa
File:                     7D343D04B00F11F195BB7906CF1D38B0.roa (raw, json)
Hash identifier:          5HXiKPqboPkdD8xlcLKnNdt9paA1XKKbQKXNbH/19JQ=
Subject key identifier:   FC:78:98:9C:BA:60:B6:49:55:8E:A3:3C:18:F8:6D:C4:64:AD:A8:B3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E810
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D343D04B00F11F195BB7906CF1D38B0.roa
Signing time:             Mon 14 Sep 2026 07:40:00 +0000
ROA not before:           Mon 14 Sep 2026 07:39:56 +0000
ROA not after:            Thu 22 Oct 2026 07:39:56 +0000
asID:                     137899
IP address blocks:        154.94.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124944 (0x1e810)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 14 07:39:56 2026 GMT
            Not After : Oct 22 07:39:56 2026 GMT
        Subject: CN=6aa7a4d0-eae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:80:2d:60:56:22:58:1c:bc:32:db:e6:59:da:
                    a1:64:07:ab:13:27:33:52:ae:56:38:67:e5:77:b8:
                    fb:5f:51:18:e3:e2:98:45:56:35:44:41:c1:3f:59:
                    7b:d0:55:15:e7:81:b5:45:0d:ce:9b:70:9e:98:40:
                    60:ec:9f:c9:0f:2e:ac:04:b4:1c:7f:2a:ee:a0:80:
                    e6:78:e3:ab:fa:54:92:03:3c:f4:83:c4:d4:6b:33:
                    96:19:7b:e8:cf:3f:d1:95:37:82:da:12:f3:ec:7d:
                    d2:a9:a2:78:bb:4d:b0:21:f3:4e:05:f4:00:36:1a:
                    8b:0f:1d:f1:ae:1b:65:2b:8a:7f:c5:7c:0f:26:10:
                    00:82:78:0e:ee:b2:09:8c:94:27:55:86:a6:58:cc:
                    52:f4:96:37:fe:79:73:a2:1e:4c:ab:41:ad:0a:45:
                    34:32:d9:fc:e8:11:d1:9c:7c:33:2e:f4:73:58:04:
                    10:ee:a5:ea:67:1f:51:77:ee:a3:73:85:c6:23:3c:
                    8d:ba:f7:bc:a7:20:90:cc:3e:dc:e8:c2:3a:c3:6a:
                    28:bc:57:c0:62:3e:27:21:84:b1:62:2a:c5:17:2a:
                    c4:cb:ea:39:4a:89:49:95:1b:c5:a5:25:37:be:43:
                    4a:4a:8e:45:1e:89:52:d6:89:be:ac:79:1d:c1:e7:
                    a6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:78:98:9C:BA:60:B6:49:55:8E:A3:3C:18:F8:6D:C4:64:AD:A8:B3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D343D04B00F11F195BB7906CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9d:2a:93:4e:00:a7:7c:87:d0:05:a0:31:ae:0c:6a:be:2c:af:
         17:f7:99:0b:4f:ca:fa:bc:9c:5a:63:1a:78:d6:f3:35:ba:ce:
         b6:01:40:12:16:dd:c6:8f:8b:b8:f4:26:f8:10:32:2b:9e:43:
         a7:15:22:2f:68:c1:ac:a4:69:e1:74:5a:f7:4f:d3:4f:b5:8e:
         84:8c:e8:0a:fb:f3:fa:ad:55:2f:8d:29:07:bb:8b:f2:d1:1e:
         c7:30:44:62:02:6e:e9:22:b1:51:91:f7:11:e1:64:24:95:01:
         85:5b:a1:59:ab:04:4d:4c:58:8f:57:4b:83:38:45:ad:59:07:
         c2:60:62:53:4f:1d:48:2a:97:6b:36:77:50:fe:ed:4c:a6:87:
         a3:03:76:14:19:cc:1e:f8:92:1f:f2:8f:99:cd:f5:b0:32:36:
         c9:f7:16:4c:e9:57:ea:6b:09:3a:94:8f:d1:40:ee:a3:58:ea:
         ee:8a:da:b6:d5:bb:30:9a:7e:b8:bb:33:d4:25:26:6a:39:d4:
         17:04:80:3c:0c:1f:7d:c0:91:df:4c:ce:a6:a2:c9:68:e9:c1:
         9b:7f:bc:06:e9:6d:8d:19:53:f0:b4:4c:49:da:72:13:80:8a:
         25:04:f3:12:bb:29:53:d0:51:3a:32:a2:ec:c0:ed:46:8d:e9:
         81:9f:6a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----