Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33DFFA3CC4B711F1B015FDF7CE1D38B0.roa
File:                     33DFFA3CC4B711F1B015FDF7CE1D38B0.roa (raw, json)
Hash identifier:          lq95uj2E+Oc7eCQ16UgQsWvoDsk1T0R7QXtgY4e2+y8=
Subject key identifier:   23:40:40:30:F6:25:6D:C8:6B:B2:1A:51:65:D9:5F:CF:43:9E:E0:63
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ED71
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33DFFA3CC4B711F1B015FDF7CE1D38B0.roa
Signing time:             Sat 10 Oct 2026 14:30:56 +0000
ROA not before:           Sat 10 Oct 2026 14:30:51 +0000
ROA not after:            Tue 09 Oct 2029 14:30:51 +0000
asID:                     17561
IP address blocks:        154.222.4.0/24 maxlen: 24
                          154.222.5.0/24 maxlen: 24
                          154.222.6.0/24 maxlen: 24
                          154.222.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126321 (0x1ed71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 10 14:30:51 2026 GMT
            Not After : Oct  9 14:30:51 2029 GMT
        Subject: CN=6aca4c20-d938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f4:06:ff:d5:52:a2:0d:cb:89:ed:17:58:f0:
                    29:e6:16:11:18:99:bf:db:ed:27:25:d7:fb:cd:46:
                    ea:a6:cb:4a:93:2e:c8:66:68:df:5b:f0:13:c4:dd:
                    be:bb:3f:0c:00:f0:9a:6c:37:f6:f5:18:43:0d:88:
                    08:0e:7e:50:1f:d6:fc:d0:cc:6a:fc:c6:ce:54:1c:
                    fb:5e:11:77:a1:92:cd:40:4b:9a:08:4a:8f:ce:a7:
                    b9:74:84:80:72:8c:80:b4:6f:cb:a2:50:b5:20:78:
                    f4:0e:d4:38:2a:f4:d1:36:fb:7e:71:cb:36:94:58:
                    ee:96:49:49:76:e3:f4:1a:bd:79:f6:4e:20:83:c7:
                    0e:36:07:c1:e7:8b:6d:96:69:8e:a1:57:28:e7:70:
                    cf:e5:9d:bd:bb:e9:a4:23:1b:69:44:5e:c2:a8:3d:
                    6c:91:ee:f5:0d:46:d6:47:fe:4d:9e:e5:c2:ff:6b:
                    80:59:ba:ef:9f:ee:fb:79:34:2a:51:93:db:bb:f0:
                    14:c1:7a:3a:49:69:8b:5b:e9:d1:a6:c2:44:db:83:
                    19:37:54:fb:84:69:22:e1:a2:64:b5:41:32:a7:b6:
                    47:3b:74:25:13:6d:f7:2a:0e:fe:ff:e1:4c:44:d6:
                    9e:e6:2e:d1:cb:aa:d0:02:b3:3c:53:f3:b0:8c:11:
                    2f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:40:40:30:F6:25:6D:C8:6B:B2:1A:51:65:D9:5F:CF:43:9E:E0:63
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33DFFA3CC4B711F1B015FDF7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:2d:35:bd:5a:5d:ba:31:ec:97:0e:d6:fd:29:c6:23:cc:b1:
         43:ca:e4:c1:14:44:e4:af:a4:ac:65:b1:8f:cd:9e:58:c2:7a:
         e0:d6:c5:58:ba:86:dd:ed:a8:79:6f:cd:de:41:e4:79:ac:f1:
         23:8c:6d:37:65:0f:b9:87:1f:0d:42:34:a4:19:99:95:5b:8b:
         b2:cf:c7:ce:4a:6e:78:42:24:96:ea:27:0d:2d:e9:ec:bf:9c:
         87:db:1a:3f:8a:c4:23:50:b8:64:4b:bc:7c:35:24:64:ce:ba:
         68:68:a0:ba:b1:3e:5a:52:54:e9:45:51:05:0c:b6:8b:5a:eb:
         cb:ed:a2:c8:36:a3:b6:54:db:fc:c0:1c:ea:cf:ae:af:be:ba:
         10:51:cf:ef:47:9e:22:53:88:71:0c:c9:8b:a1:3f:36:8a:cb:
         38:c0:23:3c:49:51:c6:e5:d7:92:28:e9:5b:08:a0:b0:3b:ef:
         08:04:1c:53:5d:fe:96:6b:e7:35:56:0e:fc:dc:68:28:89:ca:
         6d:61:77:1d:a3:af:54:0d:93:08:f1:b2:ed:9e:b4:38:ec:28:
         0a:8a:c5:42:3f:50:cd:76:b0:03:2c:b4:a5:0a:4f:2b:12:81:
         db:68:d3:0c:b0:36:cc:92:3e:78:cb:59:03:43:11:ad:d9:25:
         23:be:13:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----