Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F3B6D5CB66711F1A8D3EE07CF1D38B0.roa
File:                     8F3B6D5CB66711F1A8D3EE07CF1D38B0.roa (raw, json)
Hash identifier:          E9Rh5GEDDBZ6NmyVbBv9qPTJRxB0+6AleE6C3Ub8HyA=
Subject key identifier:   51:6D:B9:B6:5F:CA:D4:D3:31:50:14:F8:7E:1D:63:DB:7C:44:9F:9E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EA08
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F3B6D5CB66711F1A8D3EE07CF1D38B0.roa
Signing time:             Tue 22 Sep 2026 09:25:33 +0000
ROA not before:           Tue 22 Sep 2026 09:25:29 +0000
ROA not after:            Thu 29 Oct 2026 09:25:29 +0000
asID:                     54801
IP address blocks:        154.213.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125448 (0x1ea08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 22 09:25:29 2026 GMT
            Not After : Oct 29 09:25:29 2026 GMT
        Subject: CN=6ab2498d-5414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6e:39:62:23:9b:4a:b9:ab:a7:dd:f7:a6:ee:
                    04:34:41:3f:01:0e:c9:5c:ed:24:96:26:93:e0:19:
                    68:0b:bd:d3:6a:5e:80:ba:59:57:87:b3:ff:73:c6:
                    11:a7:5f:0f:d7:08:91:59:dc:dd:aa:a9:97:a7:36:
                    a0:a8:b7:07:f2:a1:b8:81:4d:d7:58:3e:df:a3:1c:
                    fa:ce:f5:53:cf:ac:5b:af:03:2b:cc:54:e0:18:65:
                    e4:55:a3:01:4c:c6:3c:e0:99:31:c6:9f:2d:e3:0c:
                    3f:5e:98:b2:64:c9:5e:f2:c9:81:0a:e1:1d:25:c1:
                    b6:db:3b:42:08:56:78:33:9c:da:85:5e:dd:27:df:
                    e4:20:7f:ca:65:d5:a7:07:eb:4a:16:33:15:fa:b6:
                    c1:cd:cb:94:00:f9:95:ee:ae:53:c0:20:42:5f:ef:
                    12:6c:ca:d2:9f:bb:ac:7c:8e:f2:6a:8f:41:82:01:
                    68:b9:70:94:7c:8e:2e:1d:15:23:e4:de:16:a4:4f:
                    8f:66:f4:61:81:16:68:54:9c:b9:36:12:5f:79:cd:
                    e8:c6:85:d5:f7:36:f0:77:30:50:23:ba:9f:d6:8f:
                    ac:35:5b:29:48:53:0d:0b:06:5e:a2:29:f4:43:4c:
                    66:fc:ce:73:0a:31:98:59:bc:43:57:c7:8a:14:b6:
                    31:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6D:B9:B6:5F:CA:D4:D3:31:50:14:F8:7E:1D:63:DB:7C:44:9F:9E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F3B6D5CB66711F1A8D3EE07CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.213.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b7:58:cb:82:80:0a:0b:c0:84:71:98:16:72:c2:9a:41:ae:65:
         81:0d:8e:3a:e0:ec:cf:2d:b1:53:dc:12:d4:d0:e0:e3:db:3f:
         de:e1:fa:60:fa:8e:d0:a0:57:89:7b:45:ef:e6:1a:35:b6:fd:
         70:31:7c:e4:64:4e:b2:b1:07:43:c8:c0:fa:e0:72:23:9a:05:
         7b:90:2b:f4:cf:38:de:d9:9e:d6:c2:cf:0b:5e:85:92:b3:a5:
         0e:a6:94:30:2f:0f:2f:18:05:ba:cf:e6:f4:c5:32:1c:54:67:
         79:aa:cd:04:90:c3:5b:72:42:55:6f:85:9c:cb:18:49:3b:8b:
         b6:9e:f7:00:72:de:a1:94:0b:e5:ee:08:1c:4c:64:d3:eb:e9:
         54:6e:fb:ed:a9:fe:af:bf:9c:b1:61:18:e5:8b:c5:43:23:56:
         0a:1d:3b:6f:3c:88:7f:c2:dc:5f:a0:c2:87:7a:df:73:b3:11:
         7d:ca:58:42:e8:12:ea:bb:36:84:c8:05:76:1b:a3:91:33:b6:
         83:b8:e4:14:ce:2c:c9:b0:a9:ef:a0:d1:0b:4c:b7:10:88:6c:
         77:60:4c:82:51:0d:4f:17:71:8e:d9:69:30:c5:29:9f:07:9f:
         5e:92:da:d9:bc:d0:06:e5:b8:9a:7c:3c:10:85:ce:05:97:93:
         af:ba:28:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----