Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6C8FE90A8F111F19CD50EF1CE1D38B0.roa
File:                     A6C8FE90A8F111F19CD50EF1CE1D38B0.roa (raw, json)
Hash identifier:          pnC6qF7GjlA9hjqFZpHmSEp2EoXeaVD7raW8S7BfZR8=
Subject key identifier:   FB:C2:85:E0:D8:49:47:F2:14:36:40:AD:BD:B5:07:29:C1:07:70:9C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E59D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6C8FE90A8F111F19CD50EF1CE1D38B0.roa
Signing time:             Sat 05 Sep 2026 06:18:47 +0000
ROA not before:           Sat 05 Sep 2026 06:18:43 +0000
ROA not after:            Tue 13 Oct 2026 06:18:43 +0000
asID:                     20457
IP address blocks:        154.198.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124317 (0x1e59d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  5 06:18:43 2026 GMT
            Not After : Oct 13 06:18:43 2026 GMT
        Subject: CN=6a9bb447-bcc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:29:47:da:7d:69:21:a6:5e:af:f9:40:3f:28:
                    34:09:f9:15:3c:ee:cd:bb:3d:70:73:2d:e4:7e:af:
                    a1:a6:a0:28:4b:e7:44:38:d5:cb:d7:09:f1:e4:55:
                    2a:b8:cf:71:74:bf:90:43:a8:06:2e:7c:e6:6b:92:
                    78:b0:78:5a:23:5b:af:13:cb:c1:de:d5:e5:e2:6c:
                    72:6e:e9:cc:28:e7:62:2c:bb:49:f5:0f:85:70:76:
                    67:46:94:51:5c:66:8c:d3:b8:8d:95:32:68:75:42:
                    6d:b7:01:78:2a:a5:91:f2:62:5e:b2:40:0f:b0:47:
                    7f:d4:48:ba:d2:92:83:93:97:50:dc:f3:75:11:c3:
                    e4:7a:5d:37:38:d2:49:56:c8:d1:fb:79:a7:e1:35:
                    77:4c:2f:69:cc:db:05:45:b6:ce:03:da:ef:70:72:
                    ba:d2:16:24:05:3a:8b:21:1c:e0:8d:e6:11:22:47:
                    83:27:9f:01:c8:a7:44:f1:88:9c:f8:c8:ed:1f:92:
                    05:51:d1:e5:79:12:3d:d7:8f:19:d4:81:ce:73:39:
                    9e:81:a5:55:43:42:5a:d3:1a:3e:ea:6c:69:98:d1:
                    e5:3d:76:64:6c:ca:e1:1c:b3:8d:0f:94:99:4c:be:
                    2b:f9:a4:d7:6b:7e:ad:5b:e4:a1:90:e1:de:09:ba:
                    70:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C2:85:E0:D8:49:47:F2:14:36:40:AD:BD:B5:07:29:C1:07:70:9C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6C8FE90A8F111F19CD50EF1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.198.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:cc:42:86:d8:29:b0:7c:d4:61:fa:10:d1:6a:09:6a:a4:00:
         27:10:01:59:ee:18:43:24:c3:fe:f0:eb:70:80:45:14:90:2a:
         a8:04:48:26:06:a5:12:62:ef:a6:ba:df:75:e5:84:9d:69:72:
         f4:11:2d:fd:23:7d:e2:a1:b5:92:33:e0:02:99:ad:0b:a2:d9:
         32:34:0c:da:35:9c:43:2f:81:ee:b6:85:01:07:d3:ae:42:94:
         3d:e8:db:bb:a0:2d:0d:71:f4:7d:34:b9:00:9b:f3:dd:56:62:
         03:9f:94:7d:3a:18:9e:03:ac:03:72:8f:80:59:78:df:c2:02:
         0d:a6:53:c0:c4:0d:e2:d8:5d:08:eb:59:7b:9a:a1:7b:96:bb:
         75:e4:c0:d9:bd:20:74:39:87:cc:1a:02:22:a7:d3:a5:9b:9a:
         92:58:7a:94:85:32:ca:69:1f:54:0d:61:10:87:3c:ee:1d:74:
         e8:20:d3:65:42:05:05:ec:3e:9b:4c:80:45:56:70:19:cd:2c:
         c3:9a:18:49:eb:fd:b4:1d:0f:36:14:4f:cf:2e:bc:db:25:18:
         38:02:46:82:0c:29:e2:bd:f4:3c:de:11:a9:92:7f:77:35:e9:
         17:a5:a2:0c:06:2c:2f:f7:99:0e:da:96:e2:fa:bb:aa:ac:00:
         23:6c:8f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----