Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5B0F84CAC7411F19B30E0A6CE1D38B0.roa
File:                     A5B0F84CAC7411F19B30E0A6CE1D38B0.roa (raw, json)
Hash identifier:          qeiuZm7FkjIvEwG28mEpXx5Z4G1UvfofSizdLCssTY4=
Subject key identifier:   23:5E:12:74:ED:F5:FC:F4:88:98:E9:2A:D0:E7:65:65:E1:6C:62:BC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E6BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5B0F84CAC7411F19B30E0A6CE1D38B0.roa
Signing time:             Wed 09 Sep 2026 17:34:02 +0000
ROA not before:           Wed 09 Sep 2026 17:33:58 +0000
ROA not after:            Mon 30 Nov 2026 17:33:58 +0000
asID:                     399077
IP address blocks:        154.211.124.0/24 maxlen: 24
                          154.211.125.0/24 maxlen: 24
                          154.211.126.0/24 maxlen: 24
                          154.211.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 07:35:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124606 (0x1e6be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  9 17:33:58 2026 GMT
            Not After : Nov 30 17:33:58 2026 GMT
        Subject: CN=6aa1988a-6139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1c:e1:98:82:ea:d6:65:fc:ec:7a:13:91:ef:
                    e4:59:cb:15:ab:41:b3:4e:78:df:92:11:56:9d:63:
                    92:e1:e0:f4:a5:0d:a1:46:3e:b7:11:4f:43:b5:bd:
                    97:b5:4d:cd:4e:f8:50:3d:71:d0:16:9c:fa:16:a4:
                    4b:79:58:3c:0a:7f:85:56:b3:3c:ce:17:cd:4d:b2:
                    8f:32:8b:99:c1:b9:a9:8d:c2:6c:19:84:a5:d0:e4:
                    9e:11:c0:77:e0:d8:99:03:09:65:ba:4b:11:3b:57:
                    89:df:ca:cd:38:18:92:b6:95:e0:0e:7b:65:95:f2:
                    01:7a:54:91:14:af:bd:56:6f:e6:9f:14:70:1a:a3:
                    2c:9b:53:25:92:f5:bb:27:89:a8:b1:da:57:40:48:
                    bc:a7:1f:cb:02:ef:02:b0:42:76:23:0c:2a:2c:6a:
                    90:0f:d3:71:41:f2:ea:ae:a2:97:02:9a:8c:df:8e:
                    08:7f:8e:23:13:38:77:a5:06:b5:8f:a3:28:79:ef:
                    1c:11:07:b4:05:9d:cb:e2:25:5a:0f:c5:6a:6d:61:
                    b4:a7:a2:22:87:ac:35:a6:69:da:1a:c4:b1:d9:e3:
                    bf:17:d0:c5:03:19:72:a3:e2:34:f6:61:df:91:79:
                    50:d4:42:2f:d7:a5:f7:d7:ba:26:ab:02:25:2c:a8:
                    60:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5E:12:74:ED:F5:FC:F4:88:98:E9:2A:D0:E7:65:65:E1:6C:62:BC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5B0F84CAC7411F19B30E0A6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.211.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:67:c1:f6:97:06:29:fd:c8:f9:57:2b:ef:59:a8:77:86:63:
         72:7c:91:5a:40:1a:d7:39:25:f1:3a:11:b5:c2:bc:16:a6:3f:
         05:9f:f0:4f:07:d4:ee:fa:73:ed:0d:79:b1:43:ce:be:28:74:
         0b:f9:b3:33:5a:00:f8:c2:a8:16:5c:d1:2c:24:89:f9:fc:40:
         3d:37:16:b6:b1:f8:4a:88:bf:de:5e:6c:4b:02:87:03:92:b3:
         6b:1c:08:40:14:27:d3:67:fc:c4:08:2a:f3:6c:87:8c:f1:fb:
         a5:7f:21:3c:ab:d1:22:f8:0d:c0:8c:56:67:d7:d7:82:e5:17:
         dc:9e:46:6d:11:a1:55:58:d6:2d:87:ca:be:64:b5:fd:b4:a1:
         8b:5f:0d:80:55:ce:94:1b:f8:fe:62:a0:71:f1:04:40:b0:fd:
         c2:9c:8f:87:a6:08:a8:46:15:ee:fe:47:09:48:04:d7:6d:fb:
         36:5a:f0:b6:9a:dc:9f:2e:96:ea:e7:f0:5d:67:30:1e:4a:ab:
         63:d7:28:85:f0:77:ab:a9:ec:4c:09:04:49:34:18:23:c0:c6:
         c3:44:7d:60:7d:77:3a:39:8d:13:24:fd:6c:8a:c3:61:cc:18:
         a8:c2:b2:51:c6:3c:99:40:e3:4d:31:69:aa:e8:fd:86:89:f5:
         36:9c:6f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----