Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E38B69EBA4B11F19E79B4E9CE1D38B0.roa
File:                     2E38B69EBA4B11F19E79B4E9CE1D38B0.roa (raw, json)
Hash identifier:          Fgagn8Kky5Y4dtSc5U9uDyp7QGyGERtJ8VcFTqqInzc=
Subject key identifier:   11:63:A3:79:B1:77:D1:53:D8:A0:15:9C:55:3D:D8:F8:5E:AE:1E:31
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EB02
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E38B69EBA4B11F19E79B4E9CE1D38B0.roa
Signing time:             Sun 27 Sep 2026 08:12:29 +0000
ROA not before:           Sun 27 Sep 2026 08:12:24 +0000
ROA not after:            Wed 26 Sep 2029 08:12:24 +0000
asID:                     17561
IP address blocks:        154.215.15.0/24 maxlen: 24
                          154.218.15.0/24 maxlen: 24
                          154.222.36.0/24 maxlen: 24
                          154.222.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125698 (0x1eb02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 27 08:12:24 2026 GMT
            Not After : Sep 26 08:12:24 2029 GMT
        Subject: CN=6ab8cfed-cb49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bc:0b:c5:4b:fa:31:3e:7b:6a:64:58:52:1c:
                    ec:e0:91:f5:55:97:87:8a:e4:6e:41:e4:eb:8d:63:
                    09:2f:90:d5:ab:26:50:5a:ec:76:9d:4e:cd:9d:47:
                    44:1e:7c:c2:9e:7f:eb:7d:36:7a:d9:25:29:19:e6:
                    99:c5:80:e9:b9:53:ee:e2:58:b1:94:e4:06:c6:f4:
                    ef:71:61:b8:ac:b1:28:23:78:e1:29:02:b0:ae:8e:
                    8c:dd:e8:d2:0e:e2:5b:86:1a:53:1e:a4:9e:a2:bb:
                    61:40:90:fc:4f:61:52:46:b7:47:60:59:75:d3:ec:
                    ed:89:66:f9:97:07:c3:a4:78:82:32:dc:3d:be:ee:
                    80:97:5f:78:36:11:5b:d3:cd:a1:09:7d:13:a9:04:
                    c5:4b:30:0b:e8:08:fb:04:35:df:2b:7e:ed:32:77:
                    f7:14:2b:51:7c:98:af:c2:e3:9a:c1:79:b1:64:0e:
                    83:dc:00:65:69:8a:55:18:70:30:87:12:7d:10:df:
                    34:02:00:50:bb:26:9c:22:1c:5c:89:a0:e3:58:ea:
                    b9:6d:1d:35:3d:fd:26:8b:4e:d9:04:c1:63:19:ad:
                    eb:54:5f:7d:32:3d:40:b5:f3:6e:93:12:7b:39:c2:
                    d0:91:46:4f:00:ec:2f:b3:37:c1:83:50:27:cc:d5:
                    84:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:63:A3:79:B1:77:D1:53:D8:A0:15:9C:55:3D:D8:F8:5E:AE:1E:31
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E38B69EBA4B11F19E79B4E9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.215.15.0/24
                  154.218.15.0/24
                  154.222.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:6b:38:d2:5c:1a:8c:2e:a7:d8:4f:81:6d:e9:30:19:0d:d4:
         9e:fe:d2:77:d2:ce:39:87:a6:da:a9:86:ea:0d:4f:ee:84:f2:
         dd:04:bc:98:dd:3d:d6:1b:86:34:d3:49:bd:ae:b8:f6:c8:5a:
         0c:47:aa:6d:d1:77:2e:a7:a8:7c:a1:e9:99:54:03:09:9e:cf:
         b0:16:b5:05:31:3b:5c:30:73:8f:c3:c2:bd:af:9e:7d:27:a3:
         7e:50:13:ad:0b:7a:d1:c7:d1:6c:5e:06:a5:74:e6:11:5c:db:
         a6:2a:ee:99:d0:f7:eb:47:07:1d:48:01:48:cc:37:b8:c8:8e:
         a6:2d:8d:0f:19:2c:17:bc:fd:ba:3c:5b:05:f1:44:98:03:1b:
         4b:74:71:e7:fd:80:57:35:02:53:ee:bb:a5:fb:08:ee:9d:72:
         c0:d7:37:80:92:3b:cf:a0:7e:f8:2a:97:30:08:e3:c8:a3:f6:
         25:4a:9b:f1:c9:98:69:69:8d:82:1f:5d:04:02:c8:a3:d7:0c:
         83:46:3c:12:e6:66:b6:72:b5:6a:ed:c2:09:07:18:6e:e0:b4:
         ed:32:64:bb:52:66:c6:3e:f3:d4:bc:89:76:97:d0:c4:f5:bb:
         70:64:e0:cc:2c:48:2f:6c:cd:63:68:0f:bc:46:d5:16:4d:70:
         11:97:cf:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----