Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48272CB4B62911F19F0A41E1CE1D38B0.roa
File:                     48272CB4B62911F19F0A41E1CE1D38B0.roa (raw, json)
Hash identifier:          HToAaVnxEmxU83YaA7nSwuoEHNeLNp2/bOKNIigSUeg=
Subject key identifier:   61:5D:3D:AB:2B:D5:74:DF:DB:8C:D8:CF:20:F7:20:BE:3F:13:67:EC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E9D5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48272CB4B62911F19F0A41E1CE1D38B0.roa
Signing time:             Tue 22 Sep 2026 01:59:45 +0000
ROA not before:           Tue 22 Sep 2026 01:59:41 +0000
ROA not after:            Wed 30 Sep 2026 01:59:41 +0000
asID:                     131618
IP address blocks:        154.222.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125397 (0x1e9d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 22 01:59:41 2026 GMT
            Not After : Sep 30 01:59:41 2026 GMT
        Subject: CN=6ab1e111-f32d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:33:bb:49:47:26:33:3d:4b:08:27:44:02:64:
                    83:9e:46:0a:f2:9d:3c:ee:c6:f3:f9:61:52:f7:50:
                    a6:3b:b8:01:03:9c:27:cc:56:7f:9b:bd:30:fa:79:
                    ed:6b:e4:9a:97:15:44:08:73:97:47:88:3b:c6:19:
                    63:27:d9:24:14:71:78:f2:63:89:cd:54:ef:7c:28:
                    07:5e:a8:10:7b:1e:fa:96:80:1b:01:6d:3c:87:aa:
                    1a:e4:73:00:07:6a:5f:43:ac:8e:d0:bf:74:dc:6e:
                    9a:eb:c9:df:05:28:0f:45:f0:35:34:9a:46:5e:44:
                    12:ca:10:eb:64:16:1a:57:e2:3f:35:0d:37:bd:58:
                    4e:09:dd:b5:79:12:fe:8e:82:fe:5e:a2:4d:0a:e1:
                    ec:57:8e:2d:7b:b1:13:c8:6f:91:f7:50:72:b2:65:
                    02:76:9d:e7:1f:78:c6:7f:51:03:a1:af:18:6e:39:
                    b2:88:a5:59:7d:5e:12:99:e4:13:15:2e:f2:09:b7:
                    f5:a2:76:03:ac:94:f8:b6:75:dc:f8:8f:3e:79:43:
                    6c:0f:1c:37:5b:b2:c8:45:79:7d:bf:46:df:05:39:
                    39:7c:64:e0:24:a8:b8:c8:8c:af:ea:a8:cf:41:e6:
                    b7:a5:50:c0:d6:21:ac:93:49:30:5b:d1:88:d0:e9:
                    94:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5D:3D:AB:2B:D5:74:DF:DB:8C:D8:CF:20:F7:20:BE:3F:13:67:EC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48272CB4B62911F19F0A41E1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:9c:7d:11:da:9e:bd:2f:25:e7:f6:c1:a8:09:fd:1c:da:c2:
         9d:af:d7:46:19:36:65:34:fb:6f:44:32:e7:f0:3d:a9:74:82:
         79:7e:9e:c4:d1:cf:6c:e0:71:e6:c2:e4:d5:d7:d9:a0:98:09:
         16:35:03:ce:0e:bc:56:03:62:61:b7:a9:a4:3c:80:ba:c4:3f:
         5a:48:3e:e1:33:64:a1:33:df:1a:be:f5:ae:36:5a:d4:17:d1:
         32:55:0e:be:b7:84:10:93:27:1a:eb:85:b6:46:22:5f:34:f8:
         72:6a:d9:f6:3e:c3:4e:90:6f:40:9f:1c:de:dd:cc:34:72:66:
         78:43:b8:d6:5d:f1:2b:f6:e8:c9:29:09:e9:de:b4:c7:e6:97:
         2a:81:57:df:c0:5c:57:1f:fa:b4:a6:43:d6:d7:43:fb:b6:ae:
         eb:8c:ad:0f:46:be:8c:88:ef:6f:bd:ba:b9:a3:87:6b:36:c8:
         26:37:35:be:5b:8e:cf:67:71:5f:39:29:75:01:5a:26:c0:77:
         bd:60:37:3f:e3:ca:0b:8e:b9:f0:04:28:12:51:f5:c7:40:4a:
         f8:c6:e7:c5:f4:e4:1b:0f:ec:c0:9a:e1:38:1d:17:32:8d:9c:
         4c:d0:a8:4e:10:9a:ea:f9:9a:95:f7:16:02:70:7a:04:01:b5:
         51:3d:8f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----