Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/729462B0B8AD11F1814CD8DFCE1D38B0.roa
File:                     729462B0B8AD11F1814CD8DFCE1D38B0.roa (raw, json)
Hash identifier:          zFnLtqxR8DdvQ3Vm/ElyTdg0eQbrTSwJvz2IMMEc74I=
Subject key identifier:   72:79:CD:D0:1C:F3:6D:D5:4C:B9:7D:0A:98:A9:F3:53:71:99:87:9D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EAB6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/729462B0B8AD11F1814CD8DFCE1D38B0.roa
Signing time:             Fri 25 Sep 2026 06:50:52 +0000
ROA not before:           Fri 25 Sep 2026 06:50:48 +0000
ROA not after:            Sat 31 Oct 2026 06:50:48 +0000
asID:                     202656
IP address blocks:        154.200.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125622 (0x1eab6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 25 06:50:48 2026 GMT
            Not After : Oct 31 06:50:48 2026 GMT
        Subject: CN=6ab619cc-3351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:38:2e:82:eb:81:b0:64:69:1a:c9:0d:38:5d:
                    b1:49:aa:30:2e:a7:e0:cf:e9:36:1b:f0:6a:b3:a3:
                    1a:20:34:be:84:b5:8f:3f:93:76:79:03:b3:f9:52:
                    80:f7:b1:e7:c0:75:06:69:77:8e:45:0c:0e:59:20:
                    8f:c3:73:94:89:a4:f4:33:3d:0c:ec:65:c5:af:85:
                    09:5d:0a:af:04:86:b7:c0:0f:19:7c:5a:28:30:eb:
                    60:1e:b2:c4:a8:63:2f:a3:14:4f:7c:a3:7c:a9:c6:
                    a2:e6:69:66:f4:af:8e:97:6e:16:2a:2f:56:70:50:
                    83:60:9f:50:19:8d:11:70:dc:cf:85:32:a7:e5:09:
                    3b:d5:c1:ad:fe:6a:3d:9b:1c:d1:95:83:6e:a1:2c:
                    87:50:09:fc:f9:9b:dc:7f:01:92:cb:78:e0:69:8a:
                    d5:2f:09:35:0b:3c:77:9d:0c:78:e7:0a:bd:da:cb:
                    bc:58:7d:76:f5:2b:95:a0:58:91:65:3d:d7:71:e4:
                    89:d7:f0:3e:02:8a:3c:91:c5:e1:97:ba:2e:38:f4:
                    9c:2f:b6:9a:ad:d9:c3:1d:aa:c3:95:5c:af:d9:be:
                    86:ed:3c:a5:dc:89:5e:f5:04:8d:b8:07:0e:67:cc:
                    4d:32:b7:42:41:cb:33:43:04:37:f5:bd:25:f0:cb:
                    08:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:79:CD:D0:1C:F3:6D:D5:4C:B9:7D:0A:98:A9:F3:53:71:99:87:9D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/729462B0B8AD11F1814CD8DFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:c4:f4:32:65:12:2e:ee:85:86:dc:00:1a:dc:a7:c4:f1:7c:
         a2:9b:1f:fb:48:a9:fa:fc:55:4d:e7:7f:36:be:61:32:44:c7:
         68:7c:95:37:ca:09:19:ff:27:38:c2:dd:4a:f9:5d:60:84:e7:
         f1:db:91:7d:1b:79:6b:81:3b:13:f9:83:e6:f4:00:ab:08:a2:
         66:67:4c:34:3f:11:07:9f:52:8e:9c:de:e1:88:de:00:25:78:
         71:07:2e:ae:d8:32:d9:60:d1:9d:cf:a8:94:04:33:68:32:73:
         c4:bb:7f:98:a2:75:77:71:ea:99:5c:14:ea:d2:9c:df:67:d8:
         50:4e:e0:62:6d:cf:99:cd:38:ce:a3:18:12:da:57:cd:11:dd:
         58:00:50:de:2e:66:cc:22:4d:d6:bf:96:ca:ea:81:aa:57:f3:
         63:a6:7a:c1:c1:9f:23:c9:52:8d:64:78:0d:3a:23:90:ef:3a:
         82:84:f9:ca:09:f0:4e:bf:13:ca:75:b8:e7:0a:20:ff:ca:27:
         6d:7d:aa:c6:b6:e5:06:b8:3f:3a:25:9d:a6:2f:14:53:ca:39:
         1f:d0:fa:29:12:b4:b1:89:08:4f:be:99:3b:25:61:e2:87:05:
         04:fe:a3:d8:c4:81:86:7a:61:b9:f9:1c:b2:7f:67:ec:56:8b:
         00:d1:aa:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----