Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5474CD2B9A011F1A898240DCF1D38B0.roa
File:                     B5474CD2B9A011F1A898240DCF1D38B0.roa (raw, json)
Hash identifier:          VnPgKnR88urH5VNRZYu1PYteCZ7im0IA2yFlztXiLBY=
Subject key identifier:   A4:B5:03:96:99:C4:6A:68:4D:0C:EC:9A:DE:4D:76:DE:27:FD:87:90
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EAE1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5474CD2B9A011F1A898240DCF1D38B0.roa
Signing time:             Sat 26 Sep 2026 11:52:12 +0000
ROA not before:           Sat 26 Sep 2026 11:52:07 +0000
ROA not after:            Sun 03 Jan 2027 11:52:07 +0000
asID:                     201411
IP address blocks:        154.205.188.0/24 maxlen: 24
                          154.205.189.0/24 maxlen: 24
                          154.205.190.0/24 maxlen: 24
                          154.205.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125665 (0x1eae1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 26 11:52:07 2026 GMT
            Not After : Jan  3 11:52:07 2027 GMT
        Subject: CN=6ab7b1eb-d046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:38:2c:e7:26:55:3e:88:18:3a:3d:03:4c:09:
                    77:fc:04:6c:6a:f8:aa:12:6c:02:dd:08:2b:6e:d6:
                    90:d0:cc:78:7d:98:d9:89:85:d2:eb:fa:f5:f4:3f:
                    6d:83:ac:88:2d:8e:a3:24:6b:e7:c1:a0:66:dc:a1:
                    59:c2:8b:15:b2:74:26:e6:a2:e0:a9:53:da:79:96:
                    37:45:9b:61:8b:19:20:9f:a5:e2:c9:90:48:63:93:
                    fd:a2:b5:87:87:bf:bb:48:56:77:fe:1c:b0:6b:79:
                    1d:2c:d9:8d:ac:36:79:4f:8b:6b:74:d6:a7:1e:45:
                    37:43:3e:83:1b:25:f5:c5:b1:94:c7:e1:e1:86:71:
                    c4:30:6d:eb:28:ca:87:2e:90:1e:bc:d7:06:54:bf:
                    d0:79:ad:4f:da:cd:ab:33:db:e6:12:ef:e7:18:09:
                    d6:8a:8a:25:2d:25:09:f2:5b:0e:80:d6:66:90:8b:
                    c7:13:b5:e6:67:a6:1b:c7:0e:b3:c2:14:84:a7:ef:
                    65:17:7e:01:67:27:00:c0:2d:ce:e5:ff:83:cd:35:
                    89:9f:8c:b0:5e:16:3d:30:c0:36:61:f6:d7:e2:10:
                    5e:20:4b:12:52:05:bd:5e:6f:71:ff:7d:8c:06:aa:
                    60:ea:92:3f:50:36:98:2c:0d:34:d7:15:72:de:d4:
                    1f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B5:03:96:99:C4:6A:68:4D:0C:EC:9A:DE:4D:76:DE:27:FD:87:90
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5474CD2B9A011F1A898240DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:cd:0f:63:5b:bc:8b:ae:fe:6e:d0:b9:f1:c2:77:93:63:02:
         0c:94:b0:37:c5:49:2c:a1:29:c4:21:13:10:18:8f:7d:d9:64:
         4f:eb:21:2f:8a:01:bd:e4:ae:08:a2:62:82:6c:89:a7:49:32:
         15:eb:8b:65:36:cd:f1:ca:b5:ea:e7:62:31:f5:ff:50:60:85:
         c9:fc:ce:44:51:49:13:65:b8:b3:19:60:2f:0d:88:f1:1d:e3:
         67:32:0d:0b:ab:d6:84:4e:61:19:5b:ff:ef:fd:a0:40:81:d0:
         76:24:08:2f:42:cf:58:d8:fb:c8:45:f3:43:a6:52:3f:29:0a:
         6f:2c:fe:bd:98:0a:5d:5e:b3:61:48:be:e0:63:14:0c:79:9a:
         c5:0f:d5:0a:4b:c2:a7:ab:af:23:93:7b:f0:bd:4b:93:cb:2c:
         60:a7:ce:bd:bb:f2:94:b8:b2:80:b6:90:58:33:92:09:e7:d2:
         41:af:fa:f5:f8:ee:81:a5:7f:57:69:6c:6e:2d:13:6b:d6:ed:
         b1:8c:5d:53:49:38:7d:1e:fa:f6:e1:15:ed:a3:7d:32:92:9b:
         8e:db:38:df:95:53:17:8e:0e:8d:d0:40:e9:1e:8a:d5:4e:94:
         65:63:0b:46:aa:2c:74:16:ed:54:0d:b6:4b:f2:ac:46:1d:16:
         ba:2b:f6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----