Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F21D06D6B59711F1B699C6BDCE1D38B0.roa
File:                     F21D06D6B59711F1B699C6BDCE1D38B0.roa (raw, json)
Hash identifier:          3yqb7G6vHjOmhuA0Uwc5mJIJa9/gyAxJgdBNQ/J3ojk=
Subject key identifier:   3E:7C:5C:E7:D3:D0:97:DA:52:04:8C:97:5C:3A:6F:8F:37:8D:0C:E4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E97E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F21D06D6B59711F1B699C6BDCE1D38B0.roa
Signing time:             Mon 21 Sep 2026 08:39:23 +0000
ROA not before:           Mon 21 Sep 2026 08:39:19 +0000
ROA not after:            Fri 19 Mar 2027 08:39:19 +0000
asID:                     13335
IP address blocks:        154.193.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125310 (0x1e97e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 21 08:39:19 2026 GMT
            Not After : Mar 19 08:39:19 2027 GMT
        Subject: CN=6ab0ed3b-c8ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c4:26:69:17:e7:e3:ec:61:ee:e1:69:95:25:
                    86:34:df:4b:e0:e4:50:75:68:d9:20:07:2b:e5:9a:
                    f7:e1:41:bf:7c:29:a6:df:cc:72:a1:69:20:c2:dc:
                    07:f9:71:d6:e9:5b:c5:75:bf:0a:3c:9e:eb:7b:97:
                    86:95:72:0a:92:1a:d0:29:1c:d5:54:cb:bb:12:b9:
                    a9:04:25:3f:fd:27:8c:1b:9c:0e:c2:5f:d7:9a:1c:
                    d4:0c:fa:f4:c3:98:cd:7d:3c:19:54:de:15:d4:4e:
                    de:43:69:06:af:25:24:27:79:8b:ee:3e:8f:d8:73:
                    b0:28:d0:92:7c:55:19:ff:25:61:71:a4:bb:31:f9:
                    7a:c8:73:76:41:88:9f:d4:3d:8f:ce:66:9c:29:d8:
                    f8:47:3f:d3:7d:45:d4:3c:b2:ee:9f:04:0f:b5:8d:
                    69:a5:f4:33:4b:6c:ba:11:60:8b:3d:66:aa:e9:d7:
                    a5:59:20:55:1f:e0:fa:b5:76:3a:2f:60:2b:81:f5:
                    79:e2:17:f1:2f:ba:09:35:e9:9e:8b:01:19:03:a8:
                    38:c4:8d:dc:3c:ee:b7:c5:7a:c1:01:8f:a6:c9:23:
                    f9:a5:1c:e8:ec:e2:6c:94:ae:fc:d4:b9:b4:ba:20:
                    34:2c:16:1d:be:00:53:cf:4a:6f:18:ab:9d:0b:b6:
                    2f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7C:5C:E7:D3:D0:97:DA:52:04:8C:97:5C:3A:6F:8F:37:8D:0C:E4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F21D06D6B59711F1B699C6BDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:7a:dd:0d:1a:3b:59:f6:7a:13:d8:3e:a8:23:a9:ac:ba:7c:
         96:03:68:47:e5:34:6e:47:d9:12:e1:b7:b9:7e:db:35:0a:0a:
         02:ac:40:f5:e4:2d:34:c6:94:2e:ef:09:6a:c4:f6:5e:78:0b:
         f4:43:fc:c9:e5:e7:b5:ca:18:93:1c:61:04:a8:44:37:c5:cf:
         06:dc:87:fd:3b:77:7d:9c:7c:1b:f5:73:da:c3:87:cf:c4:f4:
         44:12:82:53:6f:b8:e0:25:f0:31:c7:00:e2:b1:c6:94:1d:c9:
         26:f5:2f:9c:35:f2:60:00:53:84:53:be:04:8d:c4:8a:f0:59:
         eb:f1:53:d5:e1:35:8e:ff:fa:f1:81:d8:68:30:04:c7:5f:45:
         b5:06:39:b1:3a:a1:67:cd:2a:eb:f4:5a:91:c8:33:96:f7:85:
         1c:f7:73:a5:c7:c5:62:35:e4:16:09:a0:4b:09:16:0f:7d:b6:
         0e:3b:16:a4:5f:2d:72:75:87:e6:6c:d8:23:5b:89:b3:70:06:
         c8:82:87:90:71:d3:71:a1:16:fe:c5:24:b3:4d:64:a7:6b:a3:
         e3:8f:8d:a1:12:8f:b4:59:cf:07:10:6e:ab:86:d3:eb:96:22:
         8b:29:68:d8:f0:92:68:fb:68:3a:52:74:79:a9:70:e4:0a:68:
         f0:d5:bf:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----