Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A84278DCB26A11F1A1F899CBCE1D38B0.roa
File:                     A84278DCB26A11F1A1F899CBCE1D38B0.roa (raw, json)
Hash identifier:          tXXJLpcVYg+tRKH3Q/B68xXP7WB6gB3y82fK09mRMQE=
Subject key identifier:   E9:AA:35:09:61:AE:41:F9:8D:0B:9E:B4:C2:D5:AB:6B:F0:C2:3F:D0
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E8A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A84278DCB26A11F1A1F899CBCE1D38B0.roa
Signing time:             Thu 17 Sep 2026 07:37:39 +0000
ROA not before:           Thu 17 Sep 2026 07:37:35 +0000
ROA not after:            Sat 17 Oct 2026 07:37:35 +0000
asID:                     153671
IP address blocks:        154.81.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 12:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125092 (0x1e8a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 17 07:37:35 2026 GMT
            Not After : Oct 17 07:37:35 2026 GMT
        Subject: CN=6aab98c3-7d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:41:6c:be:ee:40:4f:d2:da:2e:b3:a9:27:08:
                    ab:e5:a3:b5:f8:c6:24:04:26:e3:95:25:45:2d:fd:
                    f9:18:b7:a4:99:1c:32:42:c5:65:a1:e2:34:53:8b:
                    44:74:5f:4c:9e:3b:dc:ca:13:de:f0:09:8f:00:d7:
                    3b:83:dc:fb:ac:fe:bc:28:0a:16:40:ee:18:f9:76:
                    e7:1a:bd:cf:3e:43:3b:06:38:81:b4:18:f3:9f:c7:
                    15:67:72:62:d9:b4:65:b3:62:e4:36:89:0a:06:a8:
                    b0:24:12:83:28:fe:0a:2c:3a:21:f9:c0:56:ee:80:
                    3c:18:da:de:54:0c:b2:93:58:f7:49:15:de:a4:fb:
                    3b:25:53:3d:ea:52:7c:93:f3:1f:b4:88:d9:03:3b:
                    a4:63:23:59:bb:48:ee:97:fd:e4:5c:86:2a:c0:9c:
                    56:45:b1:ff:6b:8a:62:9c:80:49:5a:42:a3:ff:c5:
                    9f:34:f0:bf:d0:84:0b:fc:29:58:c8:67:70:dd:27:
                    bc:f4:86:1f:f3:02:0c:34:c3:93:d0:0c:dc:90:97:
                    ee:89:a9:63:fb:80:bd:e5:69:a0:09:0f:fe:8b:86:
                    cf:7b:c0:68:cc:0e:d6:ca:da:01:4a:61:ad:19:4c:
                    9e:f4:41:2a:56:a7:e5:0c:1c:9b:6f:1b:08:37:7d:
                    05:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AA:35:09:61:AE:41:F9:8D:0B:9E:B4:C2:D5:AB:6B:F0:C2:3F:D0
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A84278DCB26A11F1A1F899CBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:ca:8d:88:39:af:35:65:f3:0b:f7:70:4d:dd:84:6b:f3:3e:
         d7:84:46:eb:ea:93:8b:7a:1e:be:4c:61:ef:92:05:f7:8b:ec:
         67:9c:ea:88:35:2e:ec:aa:25:9f:1e:bc:b0:50:2c:9d:43:94:
         4a:de:0a:db:f8:14:5f:a3:e0:be:f0:b8:8c:b4:20:ce:6e:78:
         b5:b0:f0:d9:1d:b2:55:82:25:e4:0f:5b:1c:e1:4b:50:19:9c:
         ed:a6:be:48:32:f1:1e:5e:9f:2f:ee:13:38:1d:39:e7:ac:58:
         5a:43:43:b4:3e:87:09:03:73:70:fe:e0:53:e6:55:55:fb:94:
         30:31:48:9c:66:6f:f9:a9:41:74:1f:ed:a4:44:b6:69:36:cd:
         45:62:0d:d4:88:f7:7f:b4:85:9f:bc:f3:ad:36:4b:bf:25:e3:
         dc:bd:78:d2:3e:e5:7f:87:2a:61:3f:63:4b:14:65:57:d7:ea:
         05:ef:01:c4:d8:b6:ad:15:3d:f2:59:3a:e2:30:87:86:da:03:
         eb:94:eb:91:c3:66:d6:b5:f8:90:0f:42:0c:84:8a:24:09:f1:
         7c:78:d7:9b:2e:c6:36:58:f7:7d:7e:18:fe:08:dd:30:be:8a:
         0a:50:a0:99:80:71:b0:f8:e3:60:79:5f:c0:9f:0c:d4:0d:63:
         e0:26:2b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----