Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAB47E1AAB5511F1B75FFBE5CE1D38B0.roa
File:                     AAB47E1AAB5511F1B75FFBE5CE1D38B0.roa (raw, json)
Hash identifier:          86n5lDVbY7+KQWSPmHqIfLxxysumUZij0RJyIu1L8RA=
Subject key identifier:   CE:8E:C2:34:FD:DB:CC:CC:CF:76:8A:AE:3D:C8:0E:B9:21:18:03:71
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E640
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAB47E1AAB5511F1B75FFBE5CE1D38B0.roa
Signing time:             Tue 08 Sep 2026 07:19:45 +0000
ROA not before:           Tue 08 Sep 2026 07:19:41 +0000
ROA not after:            Wed 14 Oct 2026 07:19:41 +0000
asID:                     17561
IP address blocks:        154.200.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 07 Oct 2026 11:53:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124480 (0x1e640)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  8 07:19:41 2026 GMT
            Not After : Oct 14 07:19:41 2026 GMT
        Subject: CN=6a9fb711-ef2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0a:f2:0b:9b:71:b6:8a:46:7d:91:4d:d8:a0:
                    63:26:d4:ac:5c:a2:cb:bc:75:a4:51:07:35:d1:9c:
                    36:93:0a:62:e0:b8:fa:ae:3f:5c:7b:e6:80:75:ae:
                    a4:8e:aa:f7:0b:8e:ea:9d:b6:e5:4b:ea:94:16:38:
                    1a:a8:18:5d:0c:83:4b:f3:5f:00:6e:d9:62:47:d0:
                    e5:81:94:82:5a:66:d4:93:e6:1e:ac:4f:ba:78:0b:
                    98:a0:29:90:41:ac:dc:63:88:81:eb:85:16:08:5b:
                    62:f0:75:97:2a:2c:fd:33:31:0e:a9:ee:3e:1d:cc:
                    bd:87:69:9e:7c:9b:c5:58:f4:8d:61:14:5b:55:6f:
                    7e:9f:56:d1:3c:9e:b5:8f:8a:c4:86:14:3c:74:66:
                    c7:6c:14:e8:1d:68:c6:6c:d6:10:c3:92:a9:f4:0f:
                    e9:36:79:e9:09:bd:02:ef:78:32:60:0c:77:a5:d1:
                    39:06:69:d2:f7:bb:c1:e0:76:1a:38:f7:35:ac:cc:
                    e9:b1:7f:87:1b:dd:f3:1e:31:63:22:49:1b:cc:87:
                    16:6d:3b:20:bc:29:b8:7d:90:bd:bb:3b:cf:5c:87:
                    c5:25:8f:34:4d:61:bb:dd:c2:87:64:31:3e:35:9b:
                    91:46:65:a0:d1:12:b3:26:71:3f:0c:e6:55:87:35:
                    44:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8E:C2:34:FD:DB:CC:CC:CF:76:8A:AE:3D:C8:0E:B9:21:18:03:71
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAB47E1AAB5511F1B75FFBE5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:7b:4a:28:bc:b1:5e:e5:31:aa:a3:44:3e:11:92:d6:26:31:
         e9:e9:70:6f:77:9e:eb:76:c7:6c:d4:c8:4c:b2:f2:84:4a:b6:
         21:1b:2f:47:e1:e0:dd:bd:14:73:0e:cd:24:90:46:7f:eb:f8:
         47:88:94:5d:63:8a:10:ee:c6:3e:b9:9a:81:e9:6d:b6:a3:76:
         7f:06:ba:1f:36:cb:e5:c0:e0:62:7e:c0:d9:9d:e2:f9:21:7a:
         1d:2a:07:08:a6:5d:8c:b8:58:6f:be:a4:2b:19:df:67:9a:4a:
         72:60:50:f4:c3:d3:40:67:4a:49:1e:a3:56:33:72:97:6f:dc:
         02:da:ba:8c:9f:a7:cf:4b:96:c0:ed:b0:1a:8b:20:d3:33:e6:
         92:d7:1f:f9:cb:85:fb:7a:93:0f:a0:ea:84:9b:71:70:79:47:
         47:69:a0:75:ea:a7:f7:a4:07:7e:5b:2e:29:27:68:d2:e8:6a:
         fe:af:b8:99:0f:8e:7e:a8:30:ca:23:7f:ba:8b:60:31:92:07:
         fe:00:fb:12:64:c0:c9:97:c5:4c:c9:3a:62:e0:ae:a1:02:69:
         ff:9b:23:2d:bc:ae:d8:a2:1c:b6:42:c7:11:e4:c4:e7:c5:6d:
         58:3f:b2:bb:6a:19:be:03:df:b0:5b:0e:5c:6b:45:9c:93:f9:
         a9:b0:03:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----