Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7A027C8AC2311F1BAD28FC7CE1D38B0.roa
File:                     A7A027C8AC2311F1BAD28FC7CE1D38B0.roa (raw, json)
Hash identifier:          Rw1SevPWvExCgUAJZ3rUKe6aojnqSqZSPjBY8jxcCBk=
Subject key identifier:   02:88:EB:11:04:84:56:AB:80:45:2F:AB:8A:94:9C:46:B1:6F:AE:FA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E6A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7A027C8AC2311F1BAD28FC7CE1D38B0.roa
Signing time:             Wed 09 Sep 2026 07:54:16 +0000
ROA not before:           Wed 09 Sep 2026 07:54:12 +0000
ROA not after:            Thu 16 Sep 2027 07:54:12 +0000
asID:                     150293
IP address blocks:        154.223.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124580 (0x1e6a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  9 07:54:12 2026 GMT
            Not After : Sep 16 07:54:12 2027 GMT
        Subject: CN=6aa110a8-787a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6e:11:ff:13:c8:6f:dd:70:4b:a0:c2:39:30:
                    d5:4c:66:cb:da:22:71:02:91:65:0b:42:80:9e:39:
                    0a:f5:26:c6:44:61:98:28:a2:06:76:29:73:3b:81:
                    f5:c2:12:b2:5c:4e:d0:55:89:0a:68:4f:0a:d2:61:
                    97:ee:ef:0c:1d:ef:f2:b4:37:6b:dd:fb:6e:a7:d1:
                    5d:ae:d0:e6:18:c7:47:8b:86:07:47:48:8d:ce:49:
                    78:30:42:39:d4:c0:77:64:2b:e2:f5:e7:c1:de:ca:
                    53:82:b0:09:58:6a:52:25:d9:9a:57:bb:27:7d:1f:
                    db:82:94:03:be:7d:65:4d:19:ce:63:29:53:d8:84:
                    1c:f6:ee:f4:ec:89:c4:a9:ab:3a:fa:d4:69:7a:aa:
                    fc:0c:8a:25:c9:74:47:ab:27:04:21:00:a7:6f:7c:
                    dd:a9:80:00:7e:47:e1:f1:cc:d9:03:f3:56:b0:96:
                    90:85:e4:f6:0f:ef:65:71:43:5d:1e:b4:0d:3f:00:
                    c1:c1:93:62:3d:0b:0d:fb:79:a4:84:cd:2c:87:36:
                    5c:bd:bc:28:91:5c:6a:da:b8:aa:33:39:a1:f8:3a:
                    ae:81:7b:9d:bb:67:2e:f7:16:dd:4e:ad:bf:e2:f8:
                    de:75:07:b7:1b:97:cd:b4:5d:b4:9d:2c:a2:05:28:
                    b2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:88:EB:11:04:84:56:AB:80:45:2F:AB:8A:94:9C:46:B1:6F:AE:FA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7A027C8AC2311F1BAD28FC7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.223.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:40:d8:dc:91:27:61:fd:28:d7:ff:6f:ab:bc:75:b9:90:21:
         28:ff:f2:45:88:64:28:7f:40:a1:28:06:c7:d7:dc:e6:c2:0f:
         10:b3:64:97:23:5a:aa:ce:89:f4:1b:4e:09:de:7a:54:2d:2d:
         44:77:61:1b:7a:3e:6d:29:8d:9d:d6:9d:48:99:18:ee:8e:5b:
         5f:2a:94:ca:5e:e5:33:86:43:bd:8d:ca:4a:e5:88:fb:28:53:
         ed:7d:a2:92:6d:4d:90:f7:88:63:e4:d4:d4:06:3d:fd:6b:55:
         9f:27:3c:28:bd:22:1b:98:74:cc:b5:55:2a:ce:61:3f:f7:b2:
         35:9d:ae:fa:9a:ed:fb:9b:4e:ea:da:5f:63:56:59:3c:b5:d3:
         4e:0a:71:ed:3d:f3:12:00:98:a9:6f:e9:76:3d:84:26:da:c8:
         fc:f8:41:4b:68:04:75:45:18:50:5e:d8:27:08:52:69:61:59:
         4b:ff:f5:31:2f:04:49:b0:77:50:a6:93:fc:73:d5:ca:7e:ab:
         27:98:2f:0d:00:f5:99:04:b5:df:5b:90:3d:f2:7d:d1:2b:ee:
         0c:70:d2:02:e6:4d:ae:25:fd:57:62:02:b5:38:9b:ae:70:f1:
         ad:d0:12:5f:53:fd:83:df:dc:bb:bd:93:12:d3:0e:cd:53:e6:
         3b:2a:c3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----