Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC71C580ACFB11F19805B0E1CE1D38B0.roa
File:                     AC71C580ACFB11F19805B0E1CE1D38B0.roa (raw, json)
Hash identifier:          vALxLE5raKJ8OkilBpNPV/8WZMaz2j6j2x01m1bF4bg=
Subject key identifier:   C1:5C:0E:A0:D3:93:ED:DA:16:57:EA:8F:E9:27:93:14:84:1B:73:41
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E71C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC71C580ACFB11F19805B0E1CE1D38B0.roa
Signing time:             Thu 10 Sep 2026 09:40:36 +0000
ROA not before:           Thu 10 Sep 2026 09:40:32 +0000
ROA not after:            Fri 09 Oct 2026 09:40:32 +0000
asID:                     147176
IP address blocks:        154.212.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124700 (0x1e71c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 10 09:40:32 2026 GMT
            Not After : Oct  9 09:40:32 2026 GMT
        Subject: CN=6aa27b14-6ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ee:15:0a:8a:91:61:7a:e5:b6:aa:b8:34:c7:
                    5b:92:5e:72:27:fa:51:81:ac:20:98:66:57:32:5f:
                    c9:82:aa:e8:00:49:86:2a:42:84:5f:f1:b2:21:64:
                    aa:84:c1:bc:7c:9c:b3:5d:9d:e4:25:c5:50:72:d3:
                    fc:aa:55:69:89:76:a0:a7:6c:c3:f8:9d:bb:e8:32:
                    0e:02:68:6b:04:64:e0:2e:53:6e:c9:c5:0e:57:94:
                    9d:62:d1:19:5b:af:df:e6:75:61:da:a4:da:21:be:
                    ed:6c:cf:30:0f:e7:70:ac:7a:fa:f3:0b:e2:54:fe:
                    2c:90:67:f0:a7:5f:5b:f0:df:2d:0b:54:02:32:57:
                    7a:a5:b7:66:21:3b:1e:a1:a7:ae:0e:8c:78:26:66:
                    b4:44:bc:00:b8:3d:6f:f8:c1:b1:28:4a:af:9f:db:
                    50:60:89:6e:c7:83:dc:0a:43:2c:97:81:cf:1b:2c:
                    48:a8:80:cc:e0:03:66:c0:dd:c4:20:5e:c1:f8:05:
                    20:94:89:5e:01:9a:d9:36:44:39:e2:82:1d:ea:e7:
                    bd:43:d5:9e:09:8a:32:eb:25:5a:c6:68:6f:71:43:
                    e3:6c:06:2b:26:c0:6c:9b:3f:0b:1e:42:b2:6c:c7:
                    7b:d2:81:36:ce:c5:85:6e:3b:76:fc:ab:0e:73:1d:
                    ee:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5C:0E:A0:D3:93:ED:DA:16:57:EA:8F:E9:27:93:14:84:1B:73:41
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC71C580ACFB11F19805B0E1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.212.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:76:40:df:34:d1:40:93:4f:6b:d2:b0:9a:cc:19:e2:35:b0:
         7a:6b:b8:a9:44:47:6d:58:d2:3a:fa:d4:11:57:b8:87:d7:f7:
         e7:b4:77:26:86:55:ef:5f:79:87:34:fe:c9:de:c7:53:ab:29:
         d1:eb:c1:3d:29:2a:eb:bc:ea:e8:39:27:cd:63:2a:6e:da:53:
         f8:89:c1:c8:45:25:73:16:c4:74:6a:ee:08:49:95:c1:18:a7:
         b1:f0:0e:a9:f7:52:f0:a5:85:e6:bf:60:d3:be:1a:98:4f:91:
         a9:26:40:6e:e6:b4:7b:54:6d:9c:d7:57:cf:75:d4:3e:93:63:
         da:59:b4:75:71:32:cd:93:03:dd:f9:e6:67:bf:04:34:8e:40:
         34:25:92:0a:8b:58:49:c8:60:5b:7c:63:d0:62:df:e7:f8:f0:
         17:ed:67:54:78:ce:5d:a3:9a:7c:b9:a8:15:4a:60:94:6f:2f:
         9a:d0:4b:f6:d6:85:83:03:00:e7:a0:40:c7:3b:0f:c1:32:c5:
         67:15:3a:95:04:bd:26:d2:71:64:6d:46:af:ba:11:3c:95:01:
         2f:67:e4:93:c7:03:92:9a:39:2d:c1:fd:51:95:c3:3b:5a:46:
         82:90:8f:5e:c6:c2:2b:9f:0f:15:75:58:b1:20:d9:ea:05:59:
         51:b3:fc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----