Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA6BA372AB7E11F1AE3054DACE1D38B0.roa
File:                     CA6BA372AB7E11F1AE3054DACE1D38B0.roa (raw, json)
Hash identifier:          N9kSPhedw4oGGKixgm3t9vlR/V07d8VpPtYh2CYYEX0=
Subject key identifier:   E0:80:A2:3A:27:53:64:3F:0E:D4:2D:A2:47:5B:33:1C:C2:82:39:10
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E66A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA6BA372AB7E11F1AE3054DACE1D38B0.roa
Signing time:             Tue 08 Sep 2026 12:14:08 +0000
ROA not before:           Tue 08 Sep 2026 12:14:04 +0000
ROA not after:            Wed 04 Nov 2026 12:14:04 +0000
asID:                     214143
IP address blocks:        154.194.208.0/22 maxlen: 24
                          154.194.212.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124522 (0x1e66a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  8 12:14:04 2026 GMT
            Not After : Nov  4 12:14:04 2026 GMT
        Subject: CN=6a9ffc10-dd50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:28:ce:f8:19:3a:28:78:7b:3d:42:2f:f2:4c:
                    74:6d:b4:e7:8f:f2:97:a2:b2:ea:11:4e:67:65:52:
                    a0:38:61:20:25:b8:13:f0:f7:86:ae:85:3c:6c:f6:
                    2b:c9:82:db:3b:b1:ab:fa:32:b8:41:02:fb:0e:83:
                    fc:7d:7f:fe:5e:aa:d7:90:7d:2b:dd:ab:f8:38:d7:
                    2e:6b:a4:64:cc:bd:32:e9:70:5a:da:af:d4:1b:b3:
                    04:40:97:1c:50:24:8d:3b:b7:71:77:57:50:37:27:
                    0d:7f:ba:29:0c:6d:2a:8c:0e:58:d1:20:06:d6:2e:
                    fa:84:f7:6a:04:fc:a9:34:2a:40:fe:e2:55:fe:3e:
                    42:8f:6c:65:cf:26:48:a7:75:a3:a9:b4:4c:95:a1:
                    cd:cc:90:82:72:3e:05:60:a2:84:08:1c:ac:e9:bc:
                    18:37:f0:f7:19:87:dd:52:c1:91:85:82:d0:eb:1b:
                    81:f4:61:35:f2:9f:dd:82:4d:93:85:ff:74:97:2d:
                    2e:ab:08:83:2b:11:5c:c2:49:e7:8b:ac:15:67:dc:
                    eb:48:7e:76:5b:68:6e:0d:b4:84:98:09:22:16:27:
                    9d:1a:f7:b4:4c:25:48:bc:b6:0b:40:bc:c6:22:63:
                    7b:3e:48:3b:6a:df:bb:8d:ed:92:9c:57:dc:30:e4:
                    24:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:80:A2:3A:27:53:64:3F:0E:D4:2D:A2:47:5B:33:1C:C2:82:39:10
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA6BA372AB7E11F1AE3054DACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.208.0-154.194.213.255

    Signature Algorithm: sha256WithRSAEncryption
         3a:43:75:f6:2d:90:1e:22:5f:bf:a0:22:21:ed:cf:16:8f:83:
         4e:7c:e7:6c:d9:76:52:f4:09:f8:72:e0:52:96:17:22:e6:49:
         0b:18:fd:3f:90:c6:6b:08:74:c6:8f:4d:1c:94:0c:31:64:c6:
         fb:e0:d3:25:af:0d:9e:36:41:e7:3c:cc:ca:3c:5b:e7:df:2f:
         8c:b4:78:8a:7e:f6:4b:75:3b:ff:ac:47:69:c9:bd:09:fa:40:
         b2:62:c9:24:7d:0c:13:a2:17:5d:9b:8c:81:6b:aa:fc:9e:8e:
         24:04:3a:fc:f7:5c:18:e3:95:80:15:30:fb:06:f8:40:2c:c3:
         f4:b1:d4:a7:48:59:3b:23:7b:43:0c:2d:07:1a:7f:2b:16:ce:
         3f:40:48:2e:22:f9:a5:65:9f:fa:ab:46:a7:1b:24:1c:1b:81:
         de:16:67:84:a7:83:b9:e0:8b:43:0c:79:fc:14:fe:38:56:eb:
         cd:29:3e:ef:ab:3d:6f:f3:75:05:1e:89:06:22:96:4a:29:ab:
         c1:69:68:ba:dd:14:5f:97:c3:df:b9:24:d6:34:b7:55:ee:a0:
         6a:52:34:02:49:e8:94:e2:64:b4:ff:37:d3:15:aa:c8:e4:11:
         ce:2b:a7:d9:77:43:d8:37:c7:12:8f:e6:c1:f4:c9:78:2a:ac:
         8d:03:17:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----