Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B330900B65A11F19554BBB5CE1D38B0.roa
File:                     5B330900B65A11F19554BBB5CE1D38B0.roa (raw, json)
Hash identifier:          3zlYRYVAJudVLf/WdMzk5jQWZ/uGwmeeay3x6B8+VC0=
Subject key identifier:   0F:AB:5F:CE:3F:C2:53:35:A5:40:47:82:AC:64:6F:1C:6B:79:7F:EA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E9F2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B330900B65A11F19554BBB5CE1D38B0.roa
Signing time:             Tue 22 Sep 2026 07:51:02 +0000
ROA not before:           Tue 22 Sep 2026 07:50:58 +0000
ROA not after:            Thu 24 Dec 2026 07:50:58 +0000
asID:                     136476
IP address blocks:        154.211.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 12:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125426 (0x1e9f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 22 07:50:58 2026 GMT
            Not After : Dec 24 07:50:58 2026 GMT
        Subject: CN=6ab23366-82e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f8:75:78:97:2e:1b:99:21:0a:a0:ee:34:3c:
                    e2:f0:3f:73:cd:ed:9c:b3:16:00:c1:36:91:47:6e:
                    64:d8:9a:b6:20:c0:44:72:3f:72:92:a3:af:88:4a:
                    83:ca:68:ae:3f:bc:19:48:26:74:27:8e:1b:08:9c:
                    6e:9a:01:2e:46:27:f4:47:be:11:88:15:6d:a6:87:
                    37:0b:5b:26:21:49:8a:0c:56:7b:22:5a:70:bc:03:
                    15:7b:04:36:c6:95:e0:ad:26:da:6b:07:c8:9d:cf:
                    de:42:f6:91:45:6f:77:53:0d:63:58:52:19:44:d4:
                    cb:9f:b2:80:3a:c7:7f:ad:df:c0:22:3d:2e:fa:41:
                    25:4a:e0:88:e3:83:fa:d1:cc:ff:2f:57:c5:f7:eb:
                    7a:2f:01:b4:16:a4:96:dc:db:3f:f0:ec:18:26:28:
                    00:4c:04:67:7a:95:4c:3d:5d:10:61:c7:ef:39:26:
                    2c:e8:62:80:fc:a8:86:c4:42:52:31:f3:b9:9a:96:
                    13:b6:7d:1c:fc:fb:f1:eb:0b:fd:4c:e5:11:89:49:
                    fe:90:38:a0:1e:cd:4a:1c:1a:5d:e2:a3:1a:91:a2:
                    d3:aa:cb:bc:96:36:1c:f5:98:97:33:eb:e1:ad:54:
                    77:65:57:a2:58:48:37:35:1f:34:15:14:90:5b:de:
                    19:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AB:5F:CE:3F:C2:53:35:A5:40:47:82:AC:64:6F:1C:6B:79:7F:EA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B330900B65A11F19554BBB5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.211.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:45:88:07:20:08:ba:95:ba:59:8a:22:62:67:17:48:07:cc:
         f1:72:d7:93:ee:13:d8:6c:c0:f9:9b:89:60:78:26:44:ce:eb:
         5f:23:b3:4d:a1:1c:46:8a:95:df:aa:ac:d3:1f:e4:51:38:02:
         09:2d:ba:af:46:f1:b3:fd:63:14:a2:ec:e6:09:fd:13:f5:e4:
         10:46:5f:6d:d6:28:68:8b:d3:b1:cc:01:22:86:9c:b7:2a:1e:
         c5:a6:d8:9c:0c:5a:e1:17:66:de:74:5a:ac:aa:3c:50:71:c7:
         ae:c9:3b:a0:bd:3f:30:38:99:28:f9:13:a3:11:c0:72:56:e0:
         8a:b4:07:1d:bc:b5:b9:29:69:43:73:77:38:c8:c6:54:22:10:
         24:8a:49:35:45:15:c3:50:b7:26:0b:10:3a:34:ec:0f:b3:1d:
         ac:34:71:4a:79:54:00:e7:75:41:61:85:8c:29:97:45:b8:5b:
         f5:60:06:94:01:da:67:e6:5d:59:a7:99:69:85:f8:a6:86:3a:
         eb:8d:84:75:28:28:9c:92:b9:7e:b2:62:4d:a5:a3:db:a1:3d:
         02:25:ec:de:c5:ef:c7:93:74:26:1c:51:3a:ba:e0:61:7e:3b:
         9b:9d:e6:41:bb:9b:94:59:67:15:13:ce:e3:2f:7c:1f:26:03:
         31:40:c7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----