Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B58475CBBD311F1BDD945E9CE1D38B0.roa
File:                     8B58475CBBD311F1BDD945E9CE1D38B0.roa (raw, json)
Hash identifier:          xj5XtfdhybsLnTHT4/D0+uBE5nwkBlJWIwRSdOWdMU4=
Subject key identifier:   6F:C8:3A:EC:58:97:EC:80:48:D3:80:3F:A8:C3:A6:50:66:1E:99:2E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EB41
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B58475CBBD311F1BDD945E9CE1D38B0.roa
Signing time:             Tue 29 Sep 2026 07:01:08 +0000
ROA not before:           Tue 29 Sep 2026 07:01:04 +0000
ROA not after:            Tue 13 Oct 2026 07:01:04 +0000
asID:                     151347
IP address blocks:        154.84.244.0/24 maxlen: 24
                          154.84.245.0/24 maxlen: 24
                          154.84.247.0/24 maxlen: 24
                          154.84.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125761 (0x1eb41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 29 07:01:04 2026 GMT
            Not After : Oct 13 07:01:04 2026 GMT
        Subject: CN=6abb6234-cf6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:33:1c:89:e8:7c:81:72:57:31:fa:b5:e1:63:
                    5e:6e:9b:ff:bf:6e:92:d6:b9:ab:ac:a4:28:66:ca:
                    22:a6:8e:cb:4c:2a:c9:04:13:70:b3:b0:9a:c9:60:
                    a0:4e:69:cf:6b:23:df:5f:e1:65:d9:d1:07:b2:90:
                    50:06:68:8d:00:84:9c:eb:31:95:33:bf:4e:2a:ff:
                    b0:9f:d4:25:75:52:cf:27:2e:e4:dc:b5:68:a6:0c:
                    5e:1c:86:5b:2f:b9:c7:4c:59:51:06:24:c5:d9:eb:
                    f4:5d:a1:de:14:c0:62:7f:b8:5c:dc:8d:74:b8:8e:
                    45:ed:f1:77:7b:0a:dd:0e:50:5c:be:9c:c3:f6:8a:
                    f4:3f:00:22:e6:e0:b1:b3:29:05:39:f9:5a:32:00:
                    e8:56:e8:1a:ae:31:75:f6:88:57:97:2d:94:5c:45:
                    64:13:c8:73:ea:01:92:39:a9:d7:e2:84:0c:ae:47:
                    d7:91:8f:83:5c:cc:a9:b0:94:11:0a:83:b1:37:e2:
                    b5:f1:1a:b6:92:cd:49:3b:2b:79:ed:c4:24:4f:8e:
                    31:ac:e9:ec:aa:9f:f8:1b:23:d3:29:1f:c3:ae:de:
                    59:c4:46:b1:d3:2d:bf:b4:f8:57:09:97:36:ab:c7:
                    86:8c:6c:d7:44:94:c3:34:c9:4a:7f:d7:24:5f:3e:
                    ca:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C8:3A:EC:58:97:EC:80:48:D3:80:3F:A8:C3:A6:50:66:1E:99:2E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B58475CBBD311F1BDD945E9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.244.0/23
                  154.84.247.0-154.84.248.255

    Signature Algorithm: sha256WithRSAEncryption
         27:b5:6f:76:b1:f7:6a:4b:34:a4:52:f8:1f:ee:99:11:db:1a:
         96:25:82:d2:96:f0:5d:2c:b3:6f:ff:9d:60:16:9d:af:0c:91:
         1e:7a:d5:bf:33:e6:6a:97:e9:12:4a:e7:b7:94:be:08:77:88:
         43:6b:4e:45:2a:df:00:c8:32:c4:0e:c7:f0:79:88:b7:1e:1a:
         b9:8e:07:de:4a:08:30:2a:12:3b:32:40:48:d6:9f:40:df:d5:
         06:a1:9a:e8:b6:2e:8a:cd:bd:fa:9e:40:36:4c:34:96:7a:7b:
         75:3e:6d:ed:77:2c:79:bb:af:b9:ad:1e:2c:37:79:a6:40:6c:
         40:84:ae:e3:f9:fd:ef:d9:7e:a5:2a:fe:ea:0e:39:4e:f0:4b:
         f7:bd:4d:54:7e:39:b4:9c:9b:a1:ae:a8:89:b1:fb:e3:07:17:
         73:bc:dc:ab:6a:6c:03:a2:13:6d:c0:dd:d5:c2:78:75:e1:2e:
         5c:2b:9b:0a:9c:56:6c:07:fb:7d:f9:e8:dc:14:cc:5a:c1:ed:
         18:cd:7b:d5:34:fc:e8:4f:d3:e2:8c:c8:09:58:12:07:a9:07:
         d0:26:a7:04:41:52:dc:d1:62:e8:9a:a4:46:c9:92:e3:41:54:
         f5:95:2b:45:7e:15:dd:9d:1b:dd:37:27:2e:62:44:5d:f1:95:
         f6:b0:90:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----