Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2823B488B19611F1B8364FC8CE1D38B0.roa
File:                     2823B488B19611F1B8364FC8CE1D38B0.roa (raw, json)
Hash identifier:          nxweqPbox9GYt/TUHTd3fK6YU97NrRnGDcnIWYBz10k=
Subject key identifier:   CC:5B:4C:36:6D:DF:AF:2C:EF:A5:6B:59:05:B0:EF:BA:E7:48:A4:82
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E886
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2823B488B19611F1B8364FC8CE1D38B0.roa
Signing time:             Wed 16 Sep 2026 06:16:30 +0000
ROA not before:           Wed 16 Sep 2026 06:16:26 +0000
ROA not after:            Sat 15 Sep 2029 06:16:26 +0000
asID:                     17561
IP address blocks:        154.94.48.0/24 maxlen: 24
                          154.94.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125062 (0x1e886)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 16 06:16:26 2026 GMT
            Not After : Sep 15 06:16:26 2029 GMT
        Subject: CN=6aaa343e-f2c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bd:b0:77:70:3f:de:ca:69:28:83:00:5d:aa:
                    cf:70:9e:ad:d6:4b:7b:40:a5:48:6c:0b:21:d5:07:
                    1f:f7:4d:65:73:02:d8:f6:b2:46:50:6a:82:20:15:
                    13:9f:ad:f4:ef:f1:75:c2:10:0e:21:c4:1d:d9:b8:
                    a7:9d:5c:7e:7b:3b:a0:b0:63:d3:f9:c6:27:fa:07:
                    12:20:b0:2d:39:1b:0a:10:b0:6b:7f:b8:b3:30:91:
                    3f:c5:b2:8e:84:87:42:0d:46:f3:90:b3:42:d9:e1:
                    90:73:44:e1:46:81:2c:76:ef:2a:7c:ee:b6:fc:31:
                    a7:1e:7b:7e:1e:0f:36:4b:89:c4:9e:d6:f8:02:ae:
                    18:8d:5d:2b:36:4d:1f:64:0b:cd:9d:d2:27:df:f7:
                    0e:d1:af:23:66:6a:15:64:5f:97:a3:8a:55:83:33:
                    6b:7b:b9:41:74:e2:3f:01:6e:c5:ae:18:84:49:a3:
                    ab:bf:ec:ee:f1:dd:3e:25:a1:c5:54:8d:b0:f7:dd:
                    68:31:3a:05:b2:f2:88:98:79:bf:61:ac:ab:32:d7:
                    3d:55:c5:e3:7d:0c:62:dd:18:15:02:0c:d3:5b:a7:
                    27:c5:b0:f9:36:5f:4e:5d:63:1a:15:aa:73:96:5f:
                    00:38:36:3b:df:7b:23:2d:97:20:fb:9b:09:40:a6:
                    1d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5B:4C:36:6D:DF:AF:2C:EF:A5:6B:59:05:B0:EF:BA:E7:48:A4:82
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2823B488B19611F1B8364FC8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:d0:7e:43:91:4b:22:52:10:0a:4a:47:d9:3f:d0:76:f6:4a:
         58:86:b9:b8:19:7f:5c:31:f0:46:c4:54:5c:7e:e7:7a:ef:10:
         81:ce:65:3e:e1:50:48:0e:a0:7f:85:db:63:92:b3:aa:82:f9:
         a4:42:76:67:40:39:ca:b0:d9:24:b3:24:1e:92:7a:70:d1:a0:
         82:9d:4c:90:a2:d5:b1:28:d3:22:a0:22:07:05:00:a7:db:d3:
         c9:bd:d0:54:22:15:5d:6f:3f:78:85:0c:96:c6:1f:d8:1a:1a:
         86:f9:bb:55:76:6d:ec:bc:16:51:e2:8f:51:b0:a2:d4:08:b8:
         d5:e2:b7:36:1c:9f:43:75:38:b5:03:02:6f:94:e0:a1:cb:97:
         47:c3:3b:c1:f6:53:a4:3f:09:04:27:4c:91:80:88:3c:08:79:
         5a:19:ea:65:11:3a:72:59:71:b9:16:af:a0:92:df:7c:d8:92:
         44:c3:2b:99:e8:0b:39:f8:ff:49:90:4e:5d:87:fa:9d:d7:f5:
         53:7b:e7:3c:78:28:41:eb:64:5d:3b:66:58:03:8f:bc:22:5f:
         fd:31:29:1b:34:5a:57:8b:9e:98:4c:5c:97:92:c4:47:a6:fc:
         a9:12:9e:77:a1:52:0b:23:b4:c0:f3:63:a4:68:9d:44:4a:c6:
         ce:88:29:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----