Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4203AA64B67511F189ACCFE0CE1D38B0.roa
File:                     4203AA64B67511F189ACCFE0CE1D38B0.roa (raw, json)
Hash identifier:          wJr9uJ53csuMCQYx7rOLya3OHGRThGRaiJ2v2hYyNoY=
Subject key identifier:   01:00:F0:60:A9:C4:D5:A6:85:AC:B8:3D:20:6B:23:93:13:95:55:27
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EA1E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4203AA64B67511F189ACCFE0CE1D38B0.roa
Signing time:             Tue 22 Sep 2026 11:03:36 +0000
ROA not before:           Tue 22 Sep 2026 11:03:32 +0000
ROA not after:            Sat 24 Oct 2026 11:03:32 +0000
asID:                     40605
IP address blocks:        154.197.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125470 (0x1ea1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 22 11:03:32 2026 GMT
            Not After : Oct 24 11:03:32 2026 GMT
        Subject: CN=6ab26088-4756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:61:59:6c:ea:7d:e3:79:57:3d:70:81:54:1e:
                    23:69:f1:88:bb:cb:36:13:51:81:12:ee:2b:e1:63:
                    6c:b8:9e:ab:75:4c:2c:f1:17:11:3c:55:8d:9c:e8:
                    75:ea:80:a7:71:b9:0c:12:f9:4e:95:e6:0b:42:c2:
                    bf:23:9b:3f:e8:a8:4c:7f:25:46:3d:46:68:07:07:
                    be:08:58:9d:67:c0:46:bb:9a:52:65:8a:96:9a:3f:
                    88:ce:31:31:3c:64:c2:65:ad:a7:63:73:b0:3a:58:
                    c5:20:0b:13:8d:28:92:1d:9b:0e:0b:92:50:49:3a:
                    ec:0d:03:bd:d4:d1:34:0c:ca:cc:f8:80:6d:dd:6c:
                    18:dc:d1:dc:22:ca:65:31:5b:6b:cf:af:37:5e:39:
                    36:c8:19:d7:07:de:74:ad:33:3c:db:08:3e:60:ca:
                    42:83:a0:5d:a7:66:e5:82:06:ab:d6:2d:50:f0:e0:
                    5d:ec:8e:b1:b1:72:11:52:af:72:e7:4b:d4:8b:95:
                    96:01:5f:9d:be:90:7e:a3:c8:35:11:af:b3:6a:9a:
                    fe:2c:08:78:ee:55:da:be:da:50:34:d9:18:87:5b:
                    47:d6:d9:72:5c:42:2b:92:6c:d6:5b:53:f0:73:49:
                    54:9e:9f:89:2a:94:4b:77:40:f0:e1:fa:9e:7a:c4:
                    62:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:00:F0:60:A9:C4:D5:A6:85:AC:B8:3D:20:6B:23:93:13:95:55:27
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4203AA64B67511F189ACCFE0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:05:c2:7d:d9:14:7f:62:d3:93:80:2c:37:a5:93:25:15:62:
         19:09:56:10:09:b4:51:e6:7e:82:e2:fb:ff:c7:06:71:ef:2a:
         07:6e:cd:3a:28:16:d8:c7:c9:73:ec:b4:81:75:87:06:9c:03:
         cd:f8:d5:11:1d:14:7e:b5:01:7d:64:c7:fe:bd:fa:9f:8b:04:
         dd:00:bb:5b:df:0a:77:70:8d:ce:e5:78:b8:54:92:a6:01:53:
         b3:36:09:95:86:d6:db:16:d3:c1:a7:89:0b:42:c7:b6:fc:50:
         69:52:17:e3:10:dd:ea:3e:85:98:59:2d:04:c5:88:4e:61:2e:
         2b:15:f1:2b:80:52:ba:98:bc:df:e6:ff:7d:30:2d:06:65:e6:
         4c:91:f3:2e:8a:b9:b7:56:75:a5:a8:b3:89:c0:ba:de:dc:e6:
         e7:72:f8:e8:cc:8d:75:a2:10:55:d1:56:69:ec:07:da:fc:02:
         da:9e:a5:e6:e2:19:ec:56:31:40:e4:6b:88:82:c7:f3:a7:d5:
         36:85:be:1c:ed:d5:9d:53:34:14:e1:31:3a:23:e7:ef:c5:7b:
         f6:e0:ab:00:ba:c1:04:a9:97:13:50:b2:19:d7:a1:ce:ff:7d:
         5f:e0:1e:f7:95:fc:76:e4:c7:7f:de:19:22:b0:63:74:c4:02:
         e5:86:80:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----