Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/024409E4A6A511F19562E000CF1D38B0.roa
File:                     024409E4A6A511F19562E000CF1D38B0.roa (raw, json)
Hash identifier:          cdMOrjmnnROooP/p4oPfBaftsx8wRB35d+jqC7cS2nQ=
Subject key identifier:   61:F8:D4:B6:5D:1F:51:1C:7C:23:13:D5:C5:67:E6:AE:58:56:06:CF
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E487
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/024409E4A6A511F19562E000CF1D38B0.roa
Signing time:             Wed 02 Sep 2026 08:05:07 +0000
ROA not before:           Wed 02 Sep 2026 08:05:02 +0000
ROA not after:            Fri 09 Oct 2026 08:05:02 +0000
asID:                     48031
IP address blocks:        154.210.239.0/24 maxlen: 24
                          154.219.94.0/24 maxlen: 24
                          154.219.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 12:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124039 (0x1e487)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  2 08:05:02 2026 GMT
            Not After : Oct  9 08:05:02 2026 GMT
        Subject: CN=6a97d8b2-b586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:38:d4:38:8e:87:b5:2e:42:4d:2a:9e:9d:6a:
                    15:22:1a:34:28:6b:87:d1:cf:46:1f:8a:43:7f:cb:
                    67:10:e8:8a:4a:8d:59:bd:8d:d2:99:d0:c6:ff:8d:
                    81:39:30:7f:6a:b8:30:f6:78:d7:70:99:f3:e7:21:
                    84:99:e0:80:05:a1:c1:8e:6a:fd:e3:0d:cf:09:40:
                    aa:33:43:72:d7:ce:ad:c8:36:b5:a8:1e:b2:86:6f:
                    e7:e0:45:e0:4b:57:9b:9f:f8:80:78:9f:cf:72:c6:
                    81:ff:a6:cf:a7:2e:7b:b2:e5:ab:c8:b4:d0:e4:cb:
                    76:d1:13:05:9c:f9:e3:e3:d8:eb:11:0e:d6:b9:6f:
                    95:38:f7:22:1c:d1:e9:c2:4e:b4:c8:d3:a5:cc:a3:
                    a5:69:aa:5e:ab:72:14:b3:87:8d:c8:ff:9d:c4:29:
                    d2:0b:e3:b1:12:b4:e4:54:3e:e9:98:cb:6a:01:bf:
                    66:3d:60:f3:ff:89:31:ae:b8:9e:8c:32:e6:40:d7:
                    db:5a:31:e7:15:24:8c:8c:db:7e:73:d9:7e:bf:3d:
                    26:de:d0:8b:fc:ca:43:7d:eb:86:86:82:d3:73:a6:
                    54:0b:a0:ef:21:c1:c8:d1:b1:d6:7b:a9:d1:94:0c:
                    2b:86:2d:c6:f8:b8:d3:82:55:3b:23:3c:07:c1:37:
                    c6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F8:D4:B6:5D:1F:51:1C:7C:23:13:D5:C5:67:E6:AE:58:56:06:CF
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/024409E4A6A511F19562E000CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.239.0/24
                  154.219.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:4b:6a:ef:5e:ac:b2:1f:58:7e:b2:70:11:57:76:7b:5b:2e:
         b5:1f:85:7f:c7:ac:fc:77:76:73:7f:7a:cf:15:19:b4:53:61:
         31:18:85:17:4f:37:c4:02:38:33:d8:d7:83:79:1c:0a:12:cf:
         31:97:9e:b9:28:48:64:75:d2:1d:18:c8:ac:0b:f2:0d:c5:89:
         a2:5b:14:50:90:bb:53:ec:14:63:5b:c2:15:bd:fa:c3:1e:04:
         e7:f9:b0:64:f0:fe:64:ff:8c:7c:c5:dd:92:f2:dd:3d:57:cf:
         89:36:06:aa:02:c8:41:21:fa:b3:c8:3c:b1:5d:1d:0e:04:6c:
         48:8b:0d:d0:5a:91:66:4e:03:29:f9:54:12:ae:fc:f5:20:e2:
         e8:85:0b:94:ae:fd:4d:97:54:5d:89:26:09:bb:06:85:8e:0b:
         12:66:53:f0:2e:62:82:56:98:36:2c:fb:15:ee:55:2a:a2:3e:
         40:95:b1:6c:6d:d1:05:0b:c6:03:29:f3:ba:d6:6d:b5:5f:7c:
         7b:bd:eb:a0:26:c5:8e:27:9b:b4:63:59:c7:05:fb:9b:13:f8:
         5a:b2:86:53:ea:36:2c:e6:31:1c:1a:80:d2:80:e4:e8:53:49:
         44:b6:1b:b9:b9:2f:f9:7d:e8:0d:a6:71:b8:a9:d9:b2:76:c4:
         ba:32:37:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----