Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F74DBB28AD0411F19F58E719CF1D38B0.roa
File:                     F74DBB28AD0411F19F58E719CF1D38B0.roa (raw, json)
Hash identifier:          fIlz07wTFKbCqk6q+jwAUy6nCtEJTJg3P/1MV35Ayf4=
Subject key identifier:   1E:48:F8:B3:77:74:D3:9C:72:DE:6F:BD:FF:2E:79:81:8C:82:E8:1B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E733
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F74DBB28AD0411F19F58E719CF1D38B0.roa
Signing time:             Thu 10 Sep 2026 10:47:07 +0000
ROA not before:           Thu 10 Sep 2026 10:47:03 +0000
ROA not after:            Sat 10 Oct 2026 10:47:03 +0000
asID:                     54801
IP address blocks:        154.86.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124723 (0x1e733)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 10 10:47:03 2026 GMT
            Not After : Oct 10 10:47:03 2026 GMT
        Subject: CN=6aa28aab-ec19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d4:97:fc:b5:a0:cd:08:91:3d:7d:a9:7f:a0:
                    e8:21:1b:79:3c:88:39:1c:b2:f8:a3:1c:2c:f7:2d:
                    9f:fa:a5:79:e1:88:aa:82:8c:df:d4:d1:b1:71:22:
                    e7:1f:0d:b7:8a:2e:47:d1:75:13:00:4d:cb:32:3f:
                    4f:39:a7:ee:f0:11:f8:fa:e6:f0:95:7c:df:8a:f1:
                    37:c6:c9:8a:22:84:1c:08:b8:ea:3f:5f:68:f4:ae:
                    a0:ed:38:9a:a0:6e:ed:2b:ca:70:a4:2c:9c:d0:18:
                    0d:5b:b8:72:c8:02:ce:f5:37:7b:61:fe:f2:bb:cd:
                    73:85:19:b5:ca:3b:75:1a:6a:bb:04:34:94:5d:67:
                    7d:ae:63:0b:d1:d7:00:77:3b:b7:a5:d1:b2:b8:1e:
                    46:9f:e8:ff:a3:cd:c6:46:5a:26:4c:56:04:ec:78:
                    51:e3:66:0f:e7:ee:4c:b7:b2:fb:3a:d3:6f:21:58:
                    79:0e:c9:6c:88:3e:d7:25:fd:4e:48:d1:eb:2a:7c:
                    73:1e:a9:41:aa:c0:ab:25:ac:89:14:45:e7:6e:02:
                    fd:df:fc:00:19:8a:96:17:47:11:0d:06:8d:59:47:
                    e0:53:e1:4b:64:07:91:a0:d3:73:4f:45:60:a1:5d:
                    86:61:ae:a6:29:68:12:45:11:c9:0d:7c:54:86:46:
                    c1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:48:F8:B3:77:74:D3:9C:72:DE:6F:BD:FF:2E:79:81:8C:82:E8:1B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F74DBB28AD0411F19F58E719CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:d9:fe:54:c4:f0:5c:d9:4e:20:58:3e:a7:1c:7d:12:07:bc:
         9e:84:50:f6:92:d0:15:58:ec:b8:a7:84:57:95:7d:3a:d9:4c:
         a5:00:29:76:5d:4d:49:0b:61:29:7f:aa:32:14:b4:fa:9d:2b:
         0a:9e:d1:9c:0e:55:9e:1b:e5:e9:87:ad:4b:05:40:ba:60:20:
         36:05:63:ca:53:00:3b:8a:1c:51:f1:1c:64:a7:5e:dd:8d:a4:
         f2:2e:6d:bf:de:d9:73:cd:5d:16:4b:bb:b4:fa:ab:ea:dd:fd:
         26:b5:6b:8d:ce:c5:d4:f5:09:3a:e0:52:1a:ba:a8:cf:6a:f9:
         ab:7b:9b:00:5a:ef:a6:59:b4:97:03:4e:9d:59:0b:ee:a3:bc:
         a5:9b:69:9a:02:94:81:69:06:03:54:79:83:7d:c7:c9:80:cd:
         1e:d1:8c:32:aa:14:8d:de:0e:6a:8b:f6:7f:b6:6e:fa:b4:98:
         52:c9:f3:25:20:ea:80:0f:c3:82:ef:c2:93:23:de:a3:72:96:
         22:b9:90:c7:09:59:48:f9:93:a1:0b:1a:c2:ed:63:e9:a8:64:
         10:6f:bf:7e:3c:34:a1:51:99:7e:2f:66:c9:bc:2d:95:4f:44:
         e8:ce:b9:bc:0e:db:28:32:ca:b0:35:4d:f5:ad:f4:91:cb:bf:
         54:44:52:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----