Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CDD1C7EAF5311F19BA2FC13CF1D38B0.roa
File:                     8CDD1C7EAF5311F19BA2FC13CF1D38B0.roa (raw, json)
Hash identifier:          bSeAEspYI3K4rG7noap60mGpa0BZ13pJ6DieGqBSmg0=
Subject key identifier:   A6:B5:90:E0:BD:1F:EA:A4:AD:92:2B:AD:57:32:73:60:D3:86:1A:B4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E7FB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CDD1C7EAF5311F19BA2FC13CF1D38B0.roa
Signing time:             Sun 13 Sep 2026 09:14:41 +0000
ROA not before:           Sun 13 Sep 2026 09:14:37 +0000
ROA not after:            Sat 10 Oct 2026 09:14:37 +0000
asID:                     197574
IP address blocks:        154.86.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124923 (0x1e7fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 13 09:14:37 2026 GMT
            Not After : Oct 10 09:14:37 2026 GMT
        Subject: CN=6aa66981-eafd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:37:2b:58:e3:c1:38:04:ca:ac:73:74:6c:ed:
                    c4:b5:8c:9b:6a:b0:47:64:0d:37:2c:d4:1a:20:0b:
                    93:51:28:f9:7c:45:fe:83:8d:75:f8:66:59:b7:96:
                    1a:6b:61:5f:18:e0:bc:ce:9f:42:8d:5f:32:2a:ee:
                    98:44:de:2e:33:49:de:11:d6:bf:a2:74:40:1d:8e:
                    b7:6f:1b:df:bf:5e:19:b9:ea:8c:bc:6a:1d:ef:2b:
                    4a:5c:c7:d5:80:23:6b:be:8d:61:a6:4e:16:9c:54:
                    d1:a4:0e:43:d1:50:01:a0:21:77:29:81:c4:58:88:
                    ea:6d:6b:bf:03:b4:41:7c:07:2f:d6:db:10:c9:dd:
                    cb:91:41:6d:84:ed:60:79:ec:00:ad:d9:63:c2:dc:
                    cf:e1:28:89:97:9f:e5:1a:25:77:c7:69:ce:bc:37:
                    ec:51:f9:83:dc:85:ae:f3:ff:1f:93:dc:ff:d3:76:
                    ff:2d:4a:9e:35:6d:bd:e0:90:7f:bb:87:0b:15:10:
                    f0:24:38:a6:d1:48:70:38:cb:b7:bb:08:5b:3e:68:
                    37:cd:21:8e:af:5d:8a:68:e9:a1:d7:75:f1:f7:0a:
                    ba:d3:66:8a:29:87:13:16:ad:88:f2:3d:b4:b7:ea:
                    fc:11:12:16:3b:a4:a5:b4:ac:bf:be:1f:18:13:89:
                    1d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B5:90:E0:BD:1F:EA:A4:AD:92:2B:AD:57:32:73:60:D3:86:1A:B4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CDD1C7EAF5311F19BA2FC13CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:f4:94:4d:69:ae:06:36:c9:f8:cf:2b:e7:fa:f0:11:15:2d:
         db:f9:28:d5:1b:65:31:f7:56:40:06:ea:29:86:24:73:09:b8:
         00:a6:15:89:a0:68:ab:9d:4e:8d:92:cc:c4:77:ed:3e:3a:2b:
         58:1c:c8:d6:5f:53:ac:e2:6e:71:d9:28:e1:72:8e:0d:b7:af:
         9d:a7:fb:70:a4:7f:13:b8:4d:1c:ed:53:47:58:53:05:6e:80:
         5c:3c:43:4c:ef:dd:a9:3d:76:19:e3:28:d5:82:9e:f5:e5:07:
         a7:66:43:05:f2:21:5d:3e:3e:b8:d9:c4:fc:4c:2f:c2:be:04:
         bb:34:da:bb:f6:0b:3a:f0:86:f8:ce:73:7f:d4:ab:85:6b:1c:
         cd:40:8e:3e:21:56:d8:84:36:e2:40:5c:72:0c:b7:6a:88:c2:
         35:61:19:77:66:3e:e1:e4:90:85:bd:2e:a3:55:e7:16:9b:38:
         0a:02:39:28:8c:47:0a:e5:b0:92:33:2e:c5:b9:80:b9:cb:cb:
         a9:32:b4:5b:ab:eb:76:a4:28:b6:45:4a:82:45:84:e7:be:79:
         18:f4:f6:77:75:fa:55:53:f8:f7:94:2f:bd:57:23:12:87:3f:
         87:72:f4:c1:f7:85:b6:18:9c:91:5e:00:d0:e5:b6:86:b5:88:
         f2:4b:15:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----