Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F343D8D8989A11F1ABDBD3B2CE1D38B0.roa
File:                     F343D8D8989A11F1ABDBD3B2CE1D38B0.roa (raw, json)
Hash identifier:          2oKqcUzD3IEsm/7wuHSSbchNW3mYE5nCglZ9iTMlJbo=
Subject key identifier:   2D:0A:AA:45:44:77:D2:33:0B:67:4B:96:BA:8E:05:20:42:DF:FD:62
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DF3D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F343D8D8989A11F1ABDBD3B2CE1D38B0.roa
Signing time:             Sat 15 Aug 2026 11:17:50 +0000
ROA not before:           Sat 15 Aug 2026 11:17:46 +0000
ROA not after:            Thu 24 Sep 2026 11:17:46 +0000
asID:                     214413
IP address blocks:        154.194.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122685 (0x1df3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 15 11:17:46 2026 GMT
            Not After : Sep 24 11:17:46 2026 GMT
        Subject: CN=6a804ade-0d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8d:2e:50:14:46:84:ff:95:43:42:23:f3:d2:
                    9f:56:08:90:76:9f:c6:ea:01:9d:e5:e2:3a:3b:cd:
                    64:1b:5e:c1:ec:62:d3:2f:3b:b0:80:5f:d9:2f:9b:
                    50:76:4f:3e:7f:a6:6c:51:58:c7:30:fc:3b:32:34:
                    2d:7a:d8:eb:8d:02:9b:a6:65:cb:15:51:0c:82:72:
                    b4:61:c2:48:44:6b:a0:6b:27:86:de:bc:aa:29:9f:
                    ad:5e:a1:fb:54:3f:f8:81:3f:86:1c:11:5c:b2:b1:
                    a7:d1:1c:75:a7:22:a3:e5:4f:9f:f4:e9:c1:81:d9:
                    4a:67:44:0e:50:24:3b:8d:54:71:32:4d:41:95:35:
                    e6:ea:16:8b:38:b4:fc:22:4c:1f:a1:e2:1e:d8:06:
                    e4:f8:be:b3:98:d7:00:ee:5f:b1:43:1c:65:a4:40:
                    7f:38:a8:a1:25:96:4f:4a:fe:8a:5b:b3:b6:85:12:
                    7c:61:a1:ef:01:07:e3:fa:0f:65:7a:14:73:6d:01:
                    83:27:5e:4e:d1:87:7a:01:29:17:6e:37:92:ec:b2:
                    f7:db:25:89:18:21:17:96:14:aa:a4:c9:63:8e:cd:
                    35:8f:62:ff:3e:f8:d4:75:5d:33:4b:25:d7:f8:8e:
                    96:99:fd:bf:f9:5f:84:a2:81:ca:bc:a7:48:7f:da:
                    d5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0A:AA:45:44:77:D2:33:0B:67:4B:96:BA:8E:05:20:42:DF:FD:62
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F343D8D8989A11F1ABDBD3B2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:73:a5:d8:fd:d9:16:dc:a2:42:6c:1c:f2:ce:d4:82:d2:60:
         fd:37:b1:85:0d:04:31:9a:72:9e:39:8b:4b:6b:f2:1a:be:f6:
         86:2b:52:39:4b:15:20:1d:3a:b9:31:36:1b:ee:fb:b7:f9:55:
         b7:5d:96:e4:8d:ec:cc:e1:5d:4d:17:6f:65:19:dc:64:23:da:
         af:21:a3:61:9b:66:f2:f8:2b:dd:3a:9c:90:62:c7:8e:7e:06:
         0f:f3:c4:db:a5:f5:d3:45:15:4b:4d:53:47:5c:e2:f3:cf:2f:
         cb:84:5a:c0:7f:b4:87:d5:e2:aa:86:d7:6c:49:5d:41:44:79:
         4e:8d:9d:1e:2b:c7:e5:53:2e:20:4f:c2:3a:55:b7:7c:9e:f3:
         b6:44:ee:da:47:b1:5a:b5:f8:5d:a1:eb:fd:77:19:20:c8:a0:
         f6:21:45:9d:c6:3e:23:8b:f0:42:13:5c:fc:2c:bd:d1:17:7f:
         05:2a:60:cd:bc:c3:69:52:f5:9a:7a:e4:9c:bb:35:b1:28:6d:
         e8:b4:9b:7b:96:c1:59:f5:ad:70:40:a6:fc:26:55:d8:66:b4:
         a8:0f:38:31:4c:9b:9c:32:05:f6:8e:99:87:1e:10:e2:36:a1:
         b1:13:0e:57:5f:15:5b:30:b8:41:80:8a:ba:a7:f5:b9:a5:85:
         2e:b0:55:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----