Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F313AD22B32811F1BC24C2CCCE1D38B0.roa
File:                     F313AD22B32811F1BC24C2CCCE1D38B0.roa (raw, json)
Hash identifier:          yeZcgfYdScTCFfzYQgaq36XhIsY0zdxUUiCdBVnQL0U=
Subject key identifier:   DA:A9:F0:46:2A:B2:80:6A:C0:59:A4:8B:D9:72:DA:9B:53:4F:2D:69
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E8B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F313AD22B32811F1BC24C2CCCE1D38B0.roa
Signing time:             Fri 18 Sep 2026 06:19:49 +0000
ROA not before:           Fri 18 Sep 2026 06:19:44 +0000
ROA not after:            Sat 24 Oct 2026 06:19:44 +0000
asID:                     200758
IP address blocks:        154.83.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125109 (0x1e8b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 18 06:19:44 2026 GMT
            Not After : Oct 24 06:19:44 2026 GMT
        Subject: CN=6aacd804-18f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:13:48:6c:af:6a:c5:b6:6d:26:a8:5e:e2:8f:
                    07:c4:7a:cf:81:68:26:79:d3:3e:0b:37:f5:ce:a9:
                    1a:fc:44:69:e2:9c:15:a2:17:1f:97:fe:e0:6e:ca:
                    f3:e2:09:35:16:5b:ca:1e:4b:59:00:3c:00:29:3d:
                    7e:53:dd:9e:c4:fc:50:47:04:35:00:16:39:fa:56:
                    b3:12:8c:55:64:98:9d:8e:53:60:0d:71:5a:d2:7b:
                    4b:2e:27:68:11:86:52:3e:ca:e0:6c:35:4c:fe:01:
                    a4:09:f3:9a:c8:b1:82:a7:ab:46:e3:a7:4b:69:4a:
                    2d:e5:2d:06:6f:4c:c5:30:e0:24:b5:56:a5:74:33:
                    e8:e1:79:10:93:1b:c6:9f:aa:39:e6:a3:30:71:0e:
                    57:fc:66:4f:ba:4d:47:a5:f2:dc:a2:ac:30:f4:cd:
                    41:04:ee:0a:b8:2e:80:1b:8f:6d:e6:1f:d2:e0:81:
                    ae:fd:43:a1:db:4d:c6:5b:9e:4e:35:df:11:8a:31:
                    11:14:c4:bf:d3:9f:80:68:85:a5:61:3d:77:44:b4:
                    14:9b:df:6c:c1:86:5e:9e:47:0b:62:05:7f:24:bb:
                    e7:4d:2e:a6:79:ad:c9:f1:f7:12:73:41:34:f3:4c:
                    e0:33:c0:b2:8e:f2:03:6b:b9:5c:3f:bb:4b:a6:2b:
                    99:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A9:F0:46:2A:B2:80:6A:C0:59:A4:8B:D9:72:DA:9B:53:4F:2D:69
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F313AD22B32811F1BC24C2CCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:5a:56:f9:01:20:3f:9a:c4:9d:55:7a:ea:56:4f:2c:31:40:
         d9:8e:93:44:62:41:44:ab:e5:2c:4d:99:70:10:2d:a2:b8:be:
         e1:01:44:49:06:23:0a:63:d9:c3:ae:74:91:41:2a:2a:aa:33:
         60:ff:0a:54:fd:ce:c4:8c:1d:a8:85:13:e8:96:e4:c4:d7:f2:
         fd:a5:aa:76:53:32:a6:8a:b3:69:95:59:a6:1f:6b:4d:ee:4a:
         c1:3b:83:24:19:82:84:f8:aa:5a:d2:57:ea:c9:dd:01:30:2f:
         d6:a5:fb:69:0e:5f:08:b6:16:12:e2:bf:f2:73:57:cc:6b:d6:
         46:f2:3d:4c:6e:65:2c:03:99:55:cd:e5:63:dd:5c:e4:56:3c:
         d2:48:6d:45:4a:c3:08:ea:66:3f:b2:37:a0:46:ac:b3:1c:f1:
         2d:d0:0b:30:5f:4b:1f:a0:3c:1c:a7:41:d2:a6:71:37:df:2f:
         4a:66:5e:6d:4a:92:87:a3:95:93:14:54:27:cd:ba:12:fe:76:
         2c:46:63:00:2b:fa:0d:e1:fe:e0:5d:b7:86:38:58:75:51:92:
         0d:e4:31:2e:e5:3f:c0:a1:c3:c4:d7:7d:c1:a6:8b:8d:13:08:
         dd:c1:a0:25:ef:57:54:91:13:74:03:b9:bc:79:23:fa:3f:28:
         a4:0b:b1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----