Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F69FDFA8AE7611F19EA9D4E0CE1D38B0.roa
File:                     F69FDFA8AE7611F19EA9D4E0CE1D38B0.roa (raw, json)
Hash identifier:          3kBx5OJAt3RySFWHd4Md+/iWxmmUNIOcH2N24AgLfV8=
Subject key identifier:   47:DB:8C:6E:1F:4C:00:B2:AF:76:75:95:13:F2:A7:57:36:E0:F8:3D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E7A2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F69FDFA8AE7611F19EA9D4E0CE1D38B0.roa
Signing time:             Sat 12 Sep 2026 06:55:39 +0000
ROA not before:           Sat 12 Sep 2026 06:55:35 +0000
ROA not after:            Tue 20 Oct 2026 06:55:35 +0000
asID:                     273155
IP address blocks:        154.200.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124834 (0x1e7a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 12 06:55:35 2026 GMT
            Not After : Oct 20 06:55:35 2026 GMT
        Subject: CN=6aa4f76b-ff14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:56:24:f1:bc:d5:35:dc:39:e1:19:91:4a:37:
                    48:9f:6f:c5:8b:60:b3:16:87:50:de:e3:8a:1b:5d:
                    4e:10:4b:34:73:c5:f4:c8:5c:44:81:bc:7c:3d:71:
                    ca:d7:fd:3a:81:25:ca:79:e4:22:63:7c:58:c7:4b:
                    75:77:97:a0:78:e8:6a:dc:f1:25:2f:90:56:14:46:
                    4d:4f:ea:38:4e:74:0e:22:2b:cc:63:5d:5b:8c:ee:
                    34:7e:b0:46:f6:d5:fb:1f:39:48:f6:99:37:24:94:
                    2a:d6:bd:84:07:36:bc:df:6d:ac:67:a0:aa:b9:9f:
                    26:88:bc:63:47:4f:ba:a2:6d:c1:b0:cd:01:4b:f7:
                    78:69:eb:31:9b:5b:c7:57:7c:11:39:e7:ab:fd:15:
                    c3:c4:18:25:43:0b:3c:05:21:22:1d:65:29:f9:11:
                    a0:67:df:31:6d:ac:ca:c6:d9:88:cd:d4:20:b0:bb:
                    69:62:26:c8:86:32:9e:9b:cc:c6:7a:b2:57:f6:07:
                    cb:92:fd:c2:9d:da:fe:a6:47:96:75:3f:f1:db:b2:
                    ef:44:bd:b7:4d:6c:bc:df:a4:37:25:16:91:8f:c9:
                    db:c3:6f:e7:d8:c3:82:3f:f2:55:8b:c4:78:d1:27:
                    84:aa:88:b6:a3:f2:5a:6d:f4:5c:b1:6b:fc:f2:7c:
                    3d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:DB:8C:6E:1F:4C:00:B2:AF:76:75:95:13:F2:A7:57:36:E0:F8:3D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F69FDFA8AE7611F19EA9D4E0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:20:bc:5f:40:47:7d:d9:a0:bd:3d:95:34:2e:71:9b:88:f6:
         19:d3:c0:b0:8e:ab:b2:c6:9c:be:c6:38:30:ab:d2:88:7d:45:
         16:4c:f0:0c:76:8f:9a:2d:b2:7b:e0:8d:d8:16:30:b3:82:84:
         d3:09:14:5d:51:68:f6:1a:ef:0a:08:82:f4:97:5a:cb:72:8a:
         b0:36:80:c3:18:c5:d3:3b:d0:0f:8f:43:bc:4e:85:57:f5:5e:
         a4:5f:25:14:5b:22:26:ee:0e:1b:43:05:4c:b3:bf:5f:37:b5:
         34:e0:02:51:27:3c:8a:a7:0a:c3:1f:43:9f:95:b7:d2:fc:48:
         e8:4e:7d:97:c0:af:7a:17:52:2d:a0:8e:db:1d:e1:a1:4b:96:
         28:04:2d:e9:7b:13:43:c0:79:cf:03:4b:da:bf:c3:e5:82:f8:
         b4:ea:3d:4f:3e:1f:22:f0:5a:6d:67:4d:7d:47:d7:f7:8a:7e:
         1d:3f:24:57:b8:6a:2f:be:e7:f9:0e:68:1b:b6:a5:99:58:ef:
         72:7d:b1:b1:77:f0:68:2c:4c:28:f4:1f:7c:da:2c:a5:ce:87:
         0c:a9:e0:5a:d2:23:6e:a3:27:cf:51:4f:1f:eb:bc:b4:1d:06:
         6e:e9:ed:fa:08:76:30:2f:f6:34:69:70:40:c0:27:9c:f4:66:
         8b:5c:8b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----