Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/498229EAA05511F1A4F65DCBCE1D38B0.roa
File:                     498229EAA05511F1A4F65DCBCE1D38B0.roa (raw, json)
Hash identifier:          O0hqPcoo2nfwnk3vOHaUVVYf+Xj5ssOMXP7jI/wTXXo=
Subject key identifier:   1E:45:4E:65:EB:3D:81:E7:21:EB:F3:7A:C2:D1:D8:59:B9:4B:BD:31
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E283
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/498229EAA05511F1A4F65DCBCE1D38B0.roa
Signing time:             Tue 25 Aug 2026 07:19:19 +0000
ROA not before:           Tue 25 Aug 2026 07:19:15 +0000
ROA not after:            Wed 16 Sep 2026 07:19:15 +0000
asID:                     17497
IP address blocks:        154.82.19.0/24 maxlen: 24
                          154.94.2.0/23 maxlen: 24
                          154.94.2.0/24 maxlen: 24
                          154.94.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 11 Sep 2026 10:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123523 (0x1e283)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 25 07:19:15 2026 GMT
            Not After : Sep 16 07:19:15 2026 GMT
        Subject: CN=6a8d41f7-8650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3c:22:4f:f0:e0:0c:2b:37:4e:f0:3a:13:eb:
                    c0:c4:19:37:67:8b:8d:3c:1f:aa:1f:b5:42:80:71:
                    a5:58:cb:9e:f6:5e:17:19:55:21:7e:f9:a2:32:24:
                    bd:e5:8d:ba:4f:0f:fd:41:0b:95:90:09:af:48:57:
                    b1:51:50:57:57:9e:0b:2e:73:d2:be:83:81:2d:20:
                    0d:9c:ee:eb:29:d5:0d:7d:4f:10:93:d5:1c:f6:d5:
                    af:19:35:6e:21:a7:1d:6c:83:5a:f7:b4:1f:da:67:
                    c5:83:fb:63:6e:4c:15:e4:62:8c:4f:ee:6e:a0:5f:
                    14:8c:47:5c:57:fa:f7:4d:34:b1:12:0f:fa:26:7d:
                    77:61:fe:34:c1:dc:de:62:dd:79:2d:e7:47:9a:d4:
                    1a:56:96:0a:1d:97:75:88:f0:44:de:64:88:62:f6:
                    c4:8d:c6:fa:43:af:de:47:c5:72:a4:88:81:95:8a:
                    f9:b4:d3:e1:1f:9a:9b:15:f9:28:51:ee:cf:49:17:
                    56:19:26:65:4d:59:a2:2e:a1:ce:ea:85:fc:a0:92:
                    e0:f1:8f:36:d5:8e:83:d0:d1:d3:0f:22:9b:73:7f:
                    cc:3e:75:b1:26:6f:bc:36:97:3c:3e:a6:bd:7e:ac:
                    30:aa:48:41:62:00:c4:fa:02:d0:25:b2:6d:13:af:
                    e7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:45:4E:65:EB:3D:81:E7:21:EB:F3:7A:C2:D1:D8:59:B9:4B:BD:31
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/498229EAA05511F1A4F65DCBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.19.0/24
                  154.94.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:87:3a:c8:97:4e:25:c4:bc:ef:cf:8d:ec:48:45:39:62:09:
         29:78:ab:9b:10:48:78:74:4e:02:08:73:32:08:84:b0:a5:62:
         60:3a:2c:cc:79:df:4d:4b:04:8b:87:0c:5e:87:d2:26:e6:cf:
         54:cd:9d:b3:df:df:7e:df:64:ac:82:91:04:bf:6d:07:43:b6:
         8f:a6:2e:c0:88:28:1d:3a:a0:7d:b9:10:61:00:b8:6f:f2:7a:
         31:16:12:d9:9d:ad:75:af:e9:5a:44:de:0c:cf:ad:c3:cf:7d:
         63:6f:fa:f4:f6:26:c7:93:72:05:87:a7:0d:88:8b:da:be:2b:
         fc:83:26:56:0f:e1:31:27:18:25:6e:2a:93:a8:54:2c:70:ba:
         fa:28:4f:70:da:82:07:a8:cb:9d:9d:71:cb:61:65:27:c1:c5:
         08:1f:ef:82:9d:49:38:b1:97:41:d5:89:8c:67:1e:e9:14:4c:
         4c:f4:b9:cf:11:0d:30:4b:7c:97:13:0c:c6:08:3b:9c:bb:6c:
         b9:70:55:c8:c7:00:76:28:94:c2:be:52:54:14:11:d3:cc:c6:
         8e:cf:d8:a7:20:ad:f3:7c:32:2b:2f:db:13:ae:93:a2:d9:99:
         72:ca:b9:15:ac:0e:20:2a:2e:e8:c0:a9:6d:90:8b:3d:38:47:
         bb:7e:2a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----