Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3F2B828965411F19400C9DFCE1D38B0.roa
File:                     A3F2B828965411F19400C9DFCE1D38B0.roa (raw, json)
Hash identifier:          gtcmd5I108jh3kwZ367EnBgz2bDntXE1InlMN8fOXfU=
Subject key identifier:   E5:41:C1:DF:A7:CE:6E:DB:04:50:D9:09:23:A2:8B:F4:C0:77:3C:14
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DEB6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3F2B828965411F19400C9DFCE1D38B0.roa
Signing time:             Wed 12 Aug 2026 13:49:30 +0000
ROA not before:           Wed 12 Aug 2026 13:49:26 +0000
ROA not after:            Sun 12 Aug 2029 13:49:26 +0000
asID:                     17561
IP address blocks:        154.199.5.0/24 maxlen: 24
                          154.199.6.0/24 maxlen: 24
                          154.199.7.0/24 maxlen: 24
                          154.199.8.0/24 maxlen: 24
                          154.199.9.0/24 maxlen: 24
                          154.199.10.0/24 maxlen: 24
                          154.199.11.0/24 maxlen: 24
                          154.199.12.0/24 maxlen: 24
                          154.219.62.0/24 maxlen: 24
                          154.219.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122550 (0x1deb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 12 13:49:26 2026 GMT
            Not After : Aug 12 13:49:26 2029 GMT
        Subject: CN=6a7c79ea-e009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e9:9f:32:db:6f:06:65:1c:5c:34:0c:0c:ce:
                    37:83:6a:57:37:1b:80:2e:0d:45:60:e9:2d:5a:11:
                    69:0a:64:d1:4c:82:84:9e:94:67:13:c9:58:6f:74:
                    a5:7d:1c:f5:0f:97:30:4f:75:ff:72:e4:61:42:7b:
                    f5:d2:e3:c0:d0:8c:53:19:e0:43:49:69:04:1d:55:
                    59:ca:27:68:9b:82:1f:9d:26:e2:b4:92:fe:02:1c:
                    84:c5:74:c5:d8:23:4c:c0:b9:76:20:27:00:88:3d:
                    78:48:36:45:8b:00:cd:a9:1d:4e:54:b6:72:37:86:
                    67:50:7c:01:01:84:41:e8:41:6d:15:9a:98:24:75:
                    9a:c8:23:4d:00:a9:e9:74:48:67:6e:05:f6:f5:50:
                    a1:e4:e1:3f:22:6f:9f:63:e6:b9:c1:67:fc:08:8d:
                    25:74:7d:aa:28:50:17:af:a8:14:55:0c:3c:82:f5:
                    b3:7c:63:fb:e7:f4:54:94:2e:67:48:a8:c0:fb:51:
                    92:37:8d:be:13:c9:f7:be:47:48:ca:da:f8:6f:3c:
                    94:49:df:b7:bf:c3:85:86:5a:49:c6:6c:99:b0:e9:
                    cd:fe:02:c1:99:9f:4b:ee:26:cb:56:17:d7:e9:b3:
                    5d:1a:b6:07:74:9f:55:2c:26:47:6b:8b:65:9c:71:
                    e7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:41:C1:DF:A7:CE:6E:DB:04:50:D9:09:23:A2:8B:F4:C0:77:3C:14
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3F2B828965411F19400C9DFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.199.5.0-154.199.12.255
                  154.219.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:ad:99:ac:80:8c:51:82:96:23:02:86:29:5e:65:f2:d9:cd:
         53:ec:b3:3d:82:74:f8:dd:b6:76:f9:df:95:48:8a:86:e8:6f:
         9d:01:5b:7e:f5:b3:2f:ce:04:95:b9:87:96:be:49:f3:c4:9a:
         e8:99:38:75:22:1e:d6:7d:59:a4:8f:9a:fc:25:0e:47:f5:e7:
         f5:61:f8:d9:cd:66:ee:ed:67:21:20:56:16:d2:9b:ad:eb:31:
         fe:fe:e1:86:47:74:4a:82:bb:41:c6:a0:69:6a:47:29:62:f8:
         03:51:66:e8:93:e4:70:a9:0b:ae:73:6e:36:8e:bb:7d:a6:6e:
         64:b5:db:43:dd:88:34:1c:0c:ae:35:8b:4a:67:08:4f:c6:25:
         a3:c4:11:83:8d:8c:dd:8a:cf:41:56:66:89:db:b6:8c:29:15:
         08:d2:b7:d2:62:84:f4:8f:e8:a9:c3:62:8d:02:be:e0:68:65:
         1f:80:1a:82:43:04:a9:8c:b6:07:6c:81:fe:99:af:36:cb:15:
         77:ad:32:e4:69:48:cc:44:b9:7e:48:87:05:2e:6b:0b:06:ed:
         4f:42:44:48:05:a4:9a:32:88:da:b9:7e:37:14:cc:be:80:01:
         99:07:8d:aa:71:92:6a:76:01:96:6c:bb:9b:31:56:84:9b:a2:
         71:0a:78:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----