Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70561DACAB5D11F1BD37D313CF1D38B0.roa
File:                     70561DACAB5D11F1BD37D313CF1D38B0.roa (raw, json)
Hash identifier:          hAkLejtJhcjYmqU97queZ2DW4CykTW7HUr4vxA05c44=
Subject key identifier:   F0:AE:FC:82:08:B2:1F:DF:D1:63:80:7C:C1:B5:7D:CB:56:34:18:3C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E64C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70561DACAB5D11F1BD37D313CF1D38B0.roa
Signing time:             Tue 08 Sep 2026 08:15:23 +0000
ROA not before:           Tue 08 Sep 2026 08:15:19 +0000
ROA not after:            Tue 13 Oct 2026 08:15:19 +0000
asID:                     9304
IP address blocks:        154.92.10.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124492 (0x1e64c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  8 08:15:19 2026 GMT
            Not After : Oct 13 08:15:19 2026 GMT
        Subject: CN=6a9fc41b-7021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9a:c6:5e:b5:09:96:0f:fd:e3:a0:68:8c:7e:
                    c7:05:dc:f3:29:20:ae:81:7d:6b:22:c6:0c:c0:d1:
                    1a:89:5d:50:8b:a1:89:22:a3:3d:9c:bf:96:fa:28:
                    73:a5:7e:4a:0c:71:c6:70:cf:6e:45:c5:c3:b8:09:
                    86:bb:7a:27:bd:7c:82:1e:19:d5:b6:a9:e7:4d:95:
                    85:39:44:bd:1f:67:e3:9a:d6:15:5b:5d:5b:a0:a2:
                    fb:9f:58:1f:f3:4d:3a:c7:1a:44:3f:3f:ea:aa:6f:
                    13:5e:3c:4d:d6:a4:8e:c5:05:e8:c7:9d:ff:47:2c:
                    69:8e:82:68:2b:f8:d9:69:8d:f5:48:11:53:f2:be:
                    26:39:92:7b:6d:06:c6:2a:bd:72:dc:cc:dd:36:12:
                    6d:8c:48:d1:58:cc:c5:35:bc:26:43:d5:15:20:1b:
                    7f:66:9b:13:04:24:31:c1:88:8e:b0:96:01:db:51:
                    c1:ee:68:6f:f6:a2:7a:3f:e2:b6:e3:2d:50:5f:be:
                    5a:77:67:33:bb:7f:c4:91:62:c4:b3:b2:30:42:93:
                    4f:f0:76:d1:5a:92:03:b6:25:ac:b1:80:0e:82:ae:
                    81:15:da:c8:05:6e:27:a7:c7:a0:d8:c2:cb:e4:b0:
                    ca:1d:d0:77:0e:90:1c:b6:dd:61:61:bf:ec:28:53:
                    93:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:AE:FC:82:08:B2:1F:DF:D1:63:80:7C:C1:B5:7D:CB:56:34:18:3C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70561DACAB5D11F1BD37D313CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:11:b0:e1:e3:89:21:7e:5a:42:34:89:18:dd:71:eb:ba:bc:
         db:61:ec:e1:b3:1a:0e:b2:83:d1:09:51:1d:f1:55:e9:45:11:
         36:71:e4:78:58:88:0f:e8:20:4b:7a:66:01:db:5b:5e:a6:12:
         a8:9f:6a:79:cf:6d:82:d5:9c:99:a8:77:78:53:a7:ff:e2:a6:
         80:fa:c3:41:49:ee:25:d0:cd:ad:9b:94:06:46:61:f8:d3:c6:
         24:0f:18:b6:69:bd:08:73:2e:ea:47:45:fc:5c:8a:9f:aa:d1:
         93:eb:ca:97:12:69:31:00:9c:bd:45:29:73:a5:02:80:65:e6:
         31:27:e7:a5:bf:96:9a:36:37:57:47:79:56:69:00:e7:f3:b9:
         1f:79:18:fd:3e:44:d3:e8:88:28:f3:18:03:af:92:59:bd:e9:
         1b:93:aa:76:ac:46:b8:f6:b8:1a:20:66:72:54:66:89:a5:c8:
         ce:da:f4:de:5e:07:52:12:c3:9b:35:5e:e8:13:ff:8f:61:31:
         61:1e:2a:48:59:29:c1:b8:76:1f:ed:e4:9e:e9:14:41:89:12:
         22:15:3f:7d:19:eb:e9:5b:54:14:b4:c9:64:56:af:59:38:71:
         72:1b:8a:52:0e:86:f3:35:2f:cb:34:c4:ac:7a:c6:82:7e:65:
         c3:f0:32:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----