Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7ED538FCAE7511F18E7CB4D7CE1D38B0.roa
File:                     7ED538FCAE7511F18E7CB4D7CE1D38B0.roa (raw, json)
Hash identifier:          kaJKxTwDZzRSXsDW/VZc42oHyhnyy0T7D5JfE5IWCvQ=
Subject key identifier:   40:43:99:86:34:9C:D1:89:75:77:56:6F:5A:88:20:89:CC:A6:CC:D6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E7A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7ED538FCAE7511F18E7CB4D7CE1D38B0.roa
Signing time:             Sat 12 Sep 2026 06:45:09 +0000
ROA not before:           Sat 12 Sep 2026 06:45:05 +0000
ROA not after:            Mon 19 Oct 2026 06:45:05 +0000
asID:                     16509
IP address blocks:        154.81.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124832 (0x1e7a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 12 06:45:05 2026 GMT
            Not After : Oct 19 06:45:05 2026 GMT
        Subject: CN=6aa4f4f5-34d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:88:9a:59:46:61:6a:c9:a0:a5:14:7e:7b:f9:
                    8e:2d:76:9c:c4:fd:23:7f:92:f8:d6:e7:bd:cc:44:
                    c6:f8:ff:da:7b:1e:c1:0b:29:0d:37:5a:a7:37:c3:
                    a7:63:7d:fe:dd:b7:b9:d3:4f:38:4b:3d:c3:1d:63:
                    a1:d0:d9:ea:58:a1:d7:5b:13:9f:0f:4b:65:c7:37:
                    e6:78:49:a5:8c:a4:b5:23:45:29:ef:f5:80:7f:0c:
                    fd:d2:f8:26:77:3b:ee:b1:6e:48:1e:3f:fd:8b:95:
                    2f:ce:a4:d1:6d:af:4f:36:e3:77:50:17:f8:3b:77:
                    f1:54:9b:ad:43:11:f2:db:d3:27:d3:a8:47:d7:53:
                    71:10:e4:1f:da:57:4b:a5:54:b1:92:e0:36:eb:d0:
                    38:04:9e:8b:c8:0e:4e:25:03:d2:b7:9c:35:13:f4:
                    1c:43:d0:de:ca:01:73:9c:ee:84:77:a6:9f:31:b6:
                    b7:5e:78:05:d5:38:33:07:d3:c5:91:bc:3a:01:5f:
                    71:94:85:4a:2c:ea:02:7b:28:24:61:23:69:07:d0:
                    de:34:1c:cd:0a:79:a3:a6:b9:89:48:aa:69:5a:69:
                    9e:e4:7e:54:23:f7:f3:4c:56:ff:96:92:69:02:14:
                    26:f3:e8:6e:5a:e1:85:5b:2c:10:53:6c:f3:1b:cd:
                    33:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:43:99:86:34:9C:D1:89:75:77:56:6F:5A:88:20:89:CC:A6:CC:D6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7ED538FCAE7511F18E7CB4D7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:db:e5:21:41:0a:37:f1:c7:2e:66:76:58:17:ff:31:0d:72:
         21:81:13:7a:6a:43:29:bf:49:00:67:db:14:72:6f:ca:30:26:
         ec:98:51:1d:8c:7a:c8:f0:07:c7:d0:39:a7:fd:75:07:61:d6:
         4b:6b:4f:dd:c2:e3:de:7a:f9:d6:03:9d:2d:25:5b:d1:a6:e4:
         3e:f5:f0:b1:f3:ef:56:a1:17:5c:ba:fb:7e:09:53:03:64:b4:
         90:91:04:11:9e:4c:f8:83:81:21:cb:da:f7:d0:54:04:3a:a6:
         64:43:cb:f9:6b:17:87:ca:cd:f9:c6:66:7e:18:92:38:11:ee:
         6d:64:ab:a0:cb:23:d0:3f:2c:31:2e:30:10:12:17:93:89:19:
         9e:88:b8:d6:db:34:be:bf:b1:a9:15:81:8b:fc:53:37:50:bc:
         0c:15:9d:6e:c9:a5:29:80:2c:8a:e4:de:15:b0:60:90:d9:8a:
         64:90:af:d6:e4:d4:59:76:75:ec:45:de:93:ca:cd:d7:a9:6e:
         89:80:ad:a4:d4:f3:13:71:d6:09:08:1c:47:93:e2:8b:7c:5b:
         f2:5c:2b:12:12:61:cb:aa:c4:c4:26:6a:ac:f3:e0:8c:69:9a:
         5c:c0:46:44:32:a6:63:f6:9b:67:39:d8:dd:4d:f3:61:51:5a:
         37:e1:ee:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----