Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9513E1CA8F011F19BE409EDCE1D38B0.roa
File:                     F9513E1CA8F011F19BE409EDCE1D38B0.roa (raw, json)
Hash identifier:          /mpv+FBq3yW6KvTkwPsYqYqUdCteFYNEuqAyJoWoS3E=
Subject key identifier:   F3:DD:1D:6A:23:29:41:A0:C0:12:68:9D:F6:8A:9C:4D:89:CE:26:8C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E59B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9513E1CA8F011F19BE409EDCE1D38B0.roa
Signing time:             Sat 05 Sep 2026 06:13:56 +0000
ROA not before:           Sat 05 Sep 2026 06:13:52 +0000
ROA not after:            Tue 13 Oct 2026 06:13:52 +0000
asID:                     200758
IP address blocks:        154.84.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124315 (0x1e59b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  5 06:13:52 2026 GMT
            Not After : Oct 13 06:13:52 2026 GMT
        Subject: CN=6a9bb324-46c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d1:f0:47:df:80:03:29:af:06:61:cb:89:e4:
                    3c:e4:52:ec:4b:cb:89:df:72:b6:80:28:12:59:e8:
                    3a:92:e1:85:4c:2a:29:ff:14:a5:2d:ca:34:90:84:
                    29:2a:71:d6:c4:2f:c8:44:f9:08:e2:78:0d:50:60:
                    14:a7:b4:dc:b3:04:fb:1c:0b:86:fb:f9:1a:00:4d:
                    20:4b:8e:1a:3b:6e:ff:e2:d7:c9:4e:e7:ea:4f:65:
                    4e:de:d6:39:73:cb:1e:41:fd:7f:de:4b:4c:ab:79:
                    93:67:2d:7d:40:b0:e3:6d:35:b7:85:19:1e:14:f4:
                    be:13:d3:a6:58:6e:ee:d5:3f:9a:06:c8:a5:32:39:
                    09:73:0b:b7:11:14:9f:ef:bd:74:7e:48:17:44:aa:
                    a7:9a:fc:85:b9:1c:86:e1:13:2d:6d:64:36:92:f9:
                    a4:07:70:8e:9e:46:8a:3a:b8:56:97:03:8a:4c:27:
                    bf:ab:1d:ff:1e:3e:f1:0a:dd:2e:51:af:d5:b6:0e:
                    b6:d4:5b:d1:12:41:06:0c:a0:80:ce:65:7a:7b:1b:
                    ce:ec:25:6c:68:a4:09:2a:d6:42:d4:65:19:77:34:
                    33:1d:35:83:f0:01:13:98:b1:fc:34:3c:46:db:85:
                    bf:fd:2d:51:50:86:f1:de:25:ce:26:74:01:25:52:
                    01:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DD:1D:6A:23:29:41:A0:C0:12:68:9D:F6:8A:9C:4D:89:CE:26:8C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9513E1CA8F011F19BE409EDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:bd:59:09:83:fe:00:0f:36:a7:49:fa:bb:f2:4c:5f:07:6b:
         ec:79:1f:ef:e9:86:50:a9:01:43:60:ba:4b:fc:e4:5e:e6:7d:
         d5:69:10:e5:4b:3f:ef:d5:b3:c3:07:24:7e:79:27:5a:3f:99:
         ac:9b:64:91:f0:80:af:9b:78:c2:9b:fb:ee:6f:79:c4:5d:54:
         03:58:40:10:6e:1d:d5:7b:e8:0d:e3:a8:21:a3:6b:b5:9d:1a:
         ed:36:6a:fd:e6:d1:27:71:3a:5e:2a:cd:14:a0:9f:24:f0:80:
         7c:a3:c3:2a:4f:bc:cb:d4:ec:da:db:4d:41:11:99:87:14:9a:
         98:20:3b:b0:b2:98:9b:05:f3:7c:7e:28:e4:1d:d2:eb:5f:0e:
         e5:b0:62:af:b6:78:95:43:c2:96:7a:1c:39:0d:c1:98:c9:4b:
         67:68:d2:de:37:56:d8:87:77:5e:56:c9:76:2e:95:25:89:f5:
         42:e5:23:33:52:93:73:3b:12:9d:e0:10:cf:79:e6:0a:1f:81:
         ef:24:cf:a4:8e:95:c6:6c:75:30:00:0b:1d:65:e1:8a:57:74:
         b7:59:80:3f:85:72:e6:4b:36:bf:ff:18:6b:34:e4:b6:6f:4e:
         c8:32:b7:7a:3a:32:c2:d0:be:e5:66:22:86:f4:a1:a4:95:76:
         96:bc:74:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----