Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C7F96D8AD2111F19B583BC3CE1D38B0.roa
File:                     7C7F96D8AD2111F19B583BC3CE1D38B0.roa (raw, json)
Hash identifier:          ckI48t797bxmN7mMt6Y8cIRGy451nuPbOstJ33vm3Ok=
Subject key identifier:   35:8F:3B:37:B6:56:4F:F5:9E:22:03:2D:BB:0B:68:DD:EC:E7:E1:F6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E747
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C7F96D8AD2111F19B583BC3CE1D38B0.roa
Signing time:             Thu 10 Sep 2026 14:11:16 +0000
ROA not before:           Thu 10 Sep 2026 14:11:12 +0000
ROA not after:            Mon 21 Sep 2026 14:11:12 +0000
asID:                     135845
IP address blocks:        154.210.226.0/24 maxlen: 24
                          154.210.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 10:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124743 (0x1e747)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 10 14:11:12 2026 GMT
            Not After : Sep 21 14:11:12 2026 GMT
        Subject: CN=6aa2ba84-4a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4a:86:92:3e:2a:4d:da:f7:98:4f:9c:1f:41:
                    e0:4c:73:e2:2c:4a:88:c8:99:90:e4:e8:80:d4:5d:
                    f4:dd:a5:ea:38:15:d2:52:b4:b6:7a:1b:75:62:ca:
                    b2:d8:c8:ea:6d:21:25:c1:8f:66:00:a3:d4:3a:28:
                    ad:40:98:9c:96:49:20:2c:f9:65:1d:12:57:3e:b2:
                    3a:17:45:9e:d0:c1:74:e5:5a:ab:e7:fd:eb:cb:5b:
                    3a:a1:2f:8d:bd:01:dc:3b:47:ee:f4:53:bf:50:0c:
                    78:95:a5:aa:3b:56:5a:50:f5:1f:4b:78:9c:ea:d0:
                    3f:f3:f3:1f:16:cc:3d:c9:1c:18:94:9a:d1:e5:c3:
                    67:cd:43:6c:d5:eb:0a:bb:eb:18:0d:6c:89:bc:fe:
                    69:e1:65:26:1a:28:ad:de:ec:5a:65:af:30:f1:14:
                    cc:ff:7e:8f:5f:16:ae:6c:96:a0:29:b6:14:ef:0b:
                    e3:d8:0d:4e:2a:fd:2b:73:d0:69:ab:06:5e:83:9a:
                    dc:2a:eb:eb:5f:00:b8:2d:1a:9f:1c:60:c7:11:79:
                    ac:83:74:d1:eb:d1:b3:7b:ee:50:9e:d7:f8:a7:e8:
                    4e:d7:f1:8f:f8:ec:f6:93:42:d9:0a:74:56:36:39:
                    f1:e2:17:e5:ca:3b:0a:47:4e:3f:dd:b6:70:7f:a2:
                    14:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8F:3B:37:B6:56:4F:F5:9E:22:03:2D:BB:0B:68:DD:EC:E7:E1:F6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C7F96D8AD2111F19B583BC3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:75:19:9c:ea:e7:fe:ac:bc:cd:69:33:68:d0:d2:6a:f3:ff:
         e6:4b:eb:bc:f2:09:35:b7:c5:85:96:63:eb:8e:72:44:16:41:
         a7:8e:e5:c9:7d:90:81:08:5c:4c:6b:90:0b:b2:d8:5a:85:f7:
         e6:43:b3:47:ed:68:34:5f:78:6d:0a:dc:6e:6b:8a:e6:02:6d:
         f3:2b:b3:e6:38:49:2f:e4:75:27:5c:84:b8:62:c6:49:91:35:
         aa:92:51:ee:b2:66:86:3c:90:f5:c3:22:a4:1b:20:e2:18:ca:
         a8:6f:12:cd:c7:bb:53:fa:6a:a9:4e:92:04:70:01:3c:96:e1:
         50:6d:6e:9e:b0:ea:ff:9f:0a:87:ef:07:81:f1:6c:ba:e7:50:
         1b:25:b6:d0:3c:d4:67:82:e3:4e:7c:98:08:c4:48:02:8f:a8:
         ab:55:04:23:3f:b1:ad:8d:43:a9:f4:66:4d:92:d3:c5:77:fe:
         d3:04:09:33:79:c4:7c:e4:c1:8a:4c:1a:44:19:1d:50:93:9e:
         40:59:75:0f:3c:45:48:73:96:80:16:49:b7:79:50:dc:78:71:
         9f:1d:55:7f:2e:2c:c1:43:8c:df:30:28:cf:ab:14:81:5d:89:
         d4:63:b6:05:f1:49:68:61:28:95:bb:eb:3a:9c:c3:e1:ab:14:
         2e:ff:69:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----