Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E8A36BAAB5E11F18190E117CF1D38B0.roa
File:                     1E8A36BAAB5E11F18190E117CF1D38B0.roa (raw, json)
Hash identifier:          qxqyzlUMVyYcHcDlutE1Jd2GTJMB3mp1WhOSEQDnCHg=
Subject key identifier:   EF:30:7A:5C:F3:0A:73:ED:47:2E:FB:2C:B3:8C:EC:D3:40:01:3B:FE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E64E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E8A36BAAB5E11F18190E117CF1D38B0.roa
Signing time:             Tue 08 Sep 2026 08:20:15 +0000
ROA not before:           Tue 08 Sep 2026 08:20:12 +0000
ROA not after:            Tue 13 Oct 2026 08:20:12 +0000
asID:                     4515
IP address blocks:        154.92.10.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124494 (0x1e64e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  8 08:20:12 2026 GMT
            Not After : Oct 13 08:20:12 2026 GMT
        Subject: CN=6a9fc53f-defc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5b:22:44:0c:05:bf:03:4a:db:65:28:2a:c4:
                    0e:f4:59:02:bf:ce:e1:95:9d:fd:52:4f:02:d3:7e:
                    12:63:44:27:3d:90:50:b7:d8:81:fc:22:93:7d:a7:
                    a5:97:36:45:a7:56:bf:4b:c4:c6:e6:7a:a6:52:fb:
                    5d:08:ff:c3:47:e4:18:9c:4d:67:9a:0e:81:a2:0e:
                    ae:c5:76:ab:25:98:0e:2d:2d:13:bb:3c:59:14:30:
                    43:2d:df:87:e6:d3:5e:a1:bd:c7:99:7a:ee:77:8c:
                    75:a8:e3:e3:77:fb:68:c0:6b:d9:2c:0a:e0:14:24:
                    d1:2f:d4:0c:f1:eb:5f:c8:e6:13:1e:34:ba:7e:a8:
                    e8:e4:a3:4e:2a:9c:f3:b1:c3:e5:a3:e8:ec:6d:e0:
                    d1:a0:46:d0:25:fc:66:a7:e6:ee:01:b6:83:b3:31:
                    25:28:a7:0f:24:06:e8:ea:d1:47:77:c9:ed:66:08:
                    cf:39:7a:9b:6f:2e:14:b8:e5:83:d3:44:5b:d9:ce:
                    9a:f6:5f:6b:a6:0f:f9:99:f1:a3:aa:38:b5:4e:03:
                    27:68:f7:08:2b:b9:58:ce:bd:4d:d6:83:46:f8:fa:
                    d3:c7:2d:a6:b8:c2:ea:8c:fd:44:3f:82:bf:a4:b9:
                    bf:44:fd:08:e5:72:10:9e:df:a4:34:a8:de:aa:7b:
                    f4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:30:7A:5C:F3:0A:73:ED:47:2E:FB:2C:B3:8C:EC:D3:40:01:3B:FE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E8A36BAAB5E11F18190E117CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:12:08:04:5f:d1:b8:c1:e0:60:f1:2b:fb:a3:e6:77:12:91:
         75:5f:c9:dc:7f:61:fe:5f:5b:69:04:ac:8f:a0:b5:6d:db:0b:
         c6:6f:5b:95:78:92:59:68:13:87:1d:38:d2:3c:96:df:6f:ea:
         53:2a:3d:b8:52:d6:32:97:3f:11:d9:f7:5e:40:09:11:bc:f6:
         a0:3f:32:d3:b7:a0:f2:3e:23:a0:23:6b:7e:a6:d8:1a:98:db:
         cb:08:09:10:1d:97:ce:b2:c7:5d:48:0d:37:d7:1d:ce:63:ea:
         35:51:e5:68:64:75:43:7c:35:e9:c7:5f:56:90:6f:6b:38:57:
         8f:22:d5:5b:05:dd:2d:31:a1:d7:84:c6:43:0e:19:00:e8:aa:
         06:97:f6:2d:11:bb:ff:aa:1b:7c:20:7a:71:6e:77:2d:b1:1b:
         40:37:a6:27:9f:25:d1:a4:94:6f:f6:05:59:2b:da:68:08:31:
         15:06:ec:11:6f:a4:ad:dd:80:4d:d2:b3:80:b4:c6:25:92:35:
         ed:f8:09:be:1a:04:f2:72:ed:51:73:35:e0:2e:30:03:78:3e:
         17:b7:96:e9:f9:8e:88:46:b5:06:84:7a:38:d9:1d:1b:4f:4a:
         1c:fd:45:c0:13:52:7d:f8:63:53:cc:49:64:ff:f3:26:a0:14:
         b3:d4:ab:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----