Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7C01BFCB0E611F1BBBF7B1ECF1D38B0.roa
File:                     E7C01BFCB0E611F1BBBF7B1ECF1D38B0.roa (raw, json)
Hash identifier:          4oXx3kamHJwYy1n+aI4QNFl3eX88qwodyAqJ4AWtQQY=
Subject key identifier:   3D:72:95:32:D9:68:9D:08:CC:50:24:EB:BD:98:D3:CA:B3:A4:87:19
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E863
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7C01BFCB0E611F1BBBF7B1ECF1D38B0.roa
Signing time:             Tue 15 Sep 2026 09:22:01 +0000
ROA not before:           Tue 15 Sep 2026 09:21:56 +0000
ROA not after:            Wed 21 Oct 2026 09:21:56 +0000
asID:                     59711
IP address blocks:        154.83.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125027 (0x1e863)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 15 09:21:56 2026 GMT
            Not After : Oct 21 09:21:56 2026 GMT
        Subject: CN=6aa90e38-2a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:31:93:00:ad:85:eb:0a:4b:12:30:71:59:0f:
                    99:f6:66:3c:c2:ea:71:9f:b3:f4:29:c1:24:75:75:
                    e6:3e:b7:0d:90:3e:17:30:2d:e7:74:e9:e4:33:da:
                    59:47:00:eb:b6:22:22:2f:2c:25:ed:fc:2b:0d:05:
                    32:16:9c:2a:73:52:7b:39:2b:eb:ab:09:80:96:9b:
                    bc:93:b6:cc:98:7c:3e:9e:33:82:63:3b:89:c0:7b:
                    c7:26:4c:fb:16:c3:37:ac:b6:00:7b:75:70:a3:64:
                    af:16:ab:50:01:da:59:0b:0e:a7:1f:b6:21:ea:3d:
                    6f:13:70:33:71:a4:16:07:52:4d:ff:a3:07:75:2c:
                    7b:7d:f9:e7:43:37:8a:d3:3a:05:16:a0:40:50:55:
                    0c:44:90:53:85:74:04:66:6e:35:85:19:a5:04:6b:
                    14:c0:de:ed:88:a3:26:82:9e:da:a3:a4:5b:f0:5b:
                    77:9f:3c:8a:8b:00:b5:40:4f:fd:0a:62:bd:e8:8f:
                    ec:17:85:cc:86:23:ee:73:ed:01:60:d5:c9:a2:17:
                    74:5a:2e:fa:13:a1:98:d9:99:db:45:4b:d5:b8:a3:
                    49:2d:20:9b:a5:4e:95:0a:22:f7:65:2d:d3:b7:ad:
                    97:79:f7:8e:2b:0c:e2:ec:42:cd:66:89:2d:e9:81:
                    cf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:72:95:32:D9:68:9D:08:CC:50:24:EB:BD:98:D3:CA:B3:A4:87:19
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7C01BFCB0E611F1BBBF7B1ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:cd:20:8b:a2:70:5f:09:b8:0f:20:1c:52:2d:59:58:dc:49:
         06:d8:04:db:79:f3:a9:77:d8:96:3b:d3:2b:90:33:8b:6b:10:
         b1:00:53:7d:95:01:d8:5a:e0:c3:53:d5:ce:f2:e7:92:93:12:
         03:70:5f:30:ee:53:56:c6:b1:d0:4c:05:7b:26:7f:d6:b5:92:
         19:a1:81:81:44:f9:8c:94:a1:dd:8e:b8:2c:e0:06:7b:14:4b:
         56:bb:d8:49:1d:b7:39:09:31:bc:27:4b:a1:c5:48:2e:2d:07:
         b6:7f:ba:5e:f2:3a:6e:ae:30:12:e0:b8:21:99:83:8f:f3:cd:
         b6:b8:dc:3c:46:47:d9:55:a4:4d:38:0c:c0:59:4c:df:f6:33:
         e5:ec:ad:71:62:73:5a:28:f1:bc:dd:8b:2d:f2:22:0b:fa:da:
         f1:c7:cd:e8:42:51:18:08:b9:17:a1:43:3f:fb:a1:ae:3c:b7:
         33:07:7c:32:b7:f8:67:23:5c:c2:7a:65:44:bf:f6:ec:db:c6:
         e4:e7:f0:06:20:a1:46:5b:38:14:1a:ec:16:b7:b9:8f:5b:4b:
         ae:05:f4:7f:b3:4f:f1:c4:df:f9:c6:95:fe:c7:a2:db:46:9b:
         49:9b:ab:0d:17:47:84:83:3f:4e:66:dd:77:e2:52:f0:e9:d8:
         8a:fb:8c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----