Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7146BDCAAA9A11F1A80FC5F6CE1D38B0.roa
File:                     7146BDCAAA9A11F1A80FC5F6CE1D38B0.roa (raw, json)
Hash identifier:          wu8hoZaEYMfUGMjnfzssHXdjKihxrRdzdlbsmKT4C/4=
Subject key identifier:   8D:D0:E2:AB:25:66:EF:2F:50:1E:62:7D:E5:32:54:8B:89:1A:16:8A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E628
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7146BDCAAA9A11F1A80FC5F6CE1D38B0.roa
Signing time:             Mon 07 Sep 2026 08:59:33 +0000
ROA not before:           Mon 07 Sep 2026 08:59:29 +0000
ROA not after:            Mon 12 Oct 2026 08:59:29 +0000
asID:                     154820
IP address blocks:        154.203.249.0/24 maxlen: 24
                          154.204.38.0/24 maxlen: 24
                          154.204.39.0/24 maxlen: 24
                          154.204.44.0/24 maxlen: 24
                          154.204.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124456 (0x1e628)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  7 08:59:29 2026 GMT
            Not After : Oct 12 08:59:29 2026 GMT
        Subject: CN=6a9e7cf5-0819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:69:d9:90:7a:57:3d:e1:0d:62:94:72:37:20:
                    49:63:a8:e6:22:75:46:3d:8f:dc:f6:0c:c8:89:e4:
                    5d:07:56:fd:15:83:f5:61:2d:39:73:f6:ce:e1:79:
                    76:b6:6d:85:42:86:44:a4:4a:54:83:ee:f0:d4:55:
                    4a:ad:71:65:70:1c:08:dc:57:29:fc:be:05:19:4a:
                    3b:d1:39:2a:ab:12:7a:a2:ba:b6:cb:a9:c6:62:1c:
                    13:72:34:44:76:87:fd:79:d7:fb:11:b8:e9:71:4a:
                    6e:1b:e9:5c:72:b2:40:77:fb:51:de:63:ed:03:bc:
                    fd:e8:71:5c:7e:74:dc:f7:34:6d:16:74:78:c7:f1:
                    a1:fc:65:ac:ce:31:43:7f:78:d9:18:e6:95:a1:19:
                    a2:32:93:3f:81:05:f2:9f:2d:29:73:f6:83:26:7a:
                    5c:3b:ed:73:e8:ca:bc:d0:51:04:72:38:e2:8f:67:
                    ff:3a:8d:24:ca:8d:20:ba:65:9f:7e:f5:97:54:ad:
                    a3:54:b5:b0:2b:91:be:71:b4:56:a3:3f:8f:52:35:
                    90:e2:2a:b1:b0:9e:92:79:17:c0:b5:16:84:c5:ab:
                    88:6b:4e:9b:d6:a7:d5:70:13:89:dd:95:63:12:c5:
                    dd:98:74:2d:a4:9d:a1:07:a7:24:af:8c:83:1f:49:
                    c1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D0:E2:AB:25:66:EF:2F:50:1E:62:7D:E5:32:54:8B:89:1A:16:8A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7146BDCAAA9A11F1A80FC5F6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.249.0/24
                  154.204.38.0/23
                  154.204.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:53:a6:af:a7:83:20:83:32:5d:9e:64:35:d6:17:10:8b:22:
         fc:04:21:96:f1:62:f8:be:ad:92:a6:9e:98:be:04:28:50:8a:
         27:d5:bd:44:85:41:3f:05:db:c7:4b:0c:a0:3d:e5:c4:20:69:
         9a:86:df:57:4b:82:e0:55:3e:2e:18:2b:4c:1f:56:37:7e:e5:
         98:99:40:12:10:76:e2:22:76:b6:a6:8f:fe:5c:3b:f5:fe:95:
         e1:98:e2:da:7b:30:21:a7:23:93:f7:a3:b1:a2:0f:1e:c7:13:
         90:67:55:a9:40:1c:f1:06:3c:80:f9:7b:e4:99:70:7e:8f:9d:
         b5:fb:96:ae:82:72:c7:c9:ea:c0:e1:30:1b:a2:b1:00:ee:b7:
         9d:ce:be:af:63:39:c3:5b:3a:f1:95:37:2e:36:7c:25:de:88:
         33:7d:b5:45:4c:c5:40:ec:29:d2:f2:61:d4:56:54:36:83:d0:
         66:62:45:0f:fd:07:bc:5e:51:4c:c9:1e:43:80:07:c0:03:b6:
         04:7a:df:3e:eb:8b:a8:17:5e:30:ed:bf:eb:b6:cf:89:27:2e:
         5a:df:e7:a7:30:e7:2c:27:97:a6:c8:b5:5a:ab:2c:97:e6:b7:
         5c:28:e3:5c:a5:c2:dd:11:9d:a2:01:a1:31:56:a5:41:b3:9d:
         69:ea:ed:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----