Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2503468A1F211F190DA5D18CF1D38B0.roa
File:                     C2503468A1F211F190DA5D18CF1D38B0.roa (raw, json)
Hash identifier:          2QXUKcWkPBkNpDBb75dNvRTLjHkew2RBK/ru5CHHqS8=
Subject key identifier:   A2:B0:7E:F3:54:3A:E3:03:83:EE:6A:01:5F:01:99:61:83:C0:DC:43
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E3B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2503468A1F211F190DA5D18CF1D38B0.roa
Signing time:             Thu 27 Aug 2026 08:39:04 +0000
ROA not before:           Thu 27 Aug 2026 08:39:00 +0000
ROA not after:            Sat 25 Aug 2029 08:39:00 +0000
asID:                     17561
IP address blocks:        154.85.128.0/24 maxlen: 24
                          154.85.129.0/24 maxlen: 24
                          154.85.130.0/24 maxlen: 24
                          154.85.131.0/24 maxlen: 24
                          154.85.132.0/24 maxlen: 24
                          154.85.133.0/24 maxlen: 24
                          154.85.134.0/24 maxlen: 24
                          154.85.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123829 (0x1e3b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 27 08:39:00 2026 GMT
            Not After : Aug 25 08:39:00 2029 GMT
        Subject: CN=6a8ff7a8-e932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3a:43:d6:55:0f:4e:bd:cf:6e:15:c6:24:79:
                    c6:c9:f6:9f:0a:db:a4:bd:b7:a4:4c:7b:78:a4:c4:
                    f5:03:91:40:88:09:f4:ee:1d:8e:0e:3f:72:85:c6:
                    a0:db:3d:db:62:58:e2:f8:10:ee:2c:1f:ec:a6:e0:
                    7b:18:8d:5c:ee:e2:1a:13:c6:d0:a2:6d:74:00:e0:
                    25:4e:35:a2:f3:97:f9:83:42:01:d7:cf:ad:74:f1:
                    fd:34:36:33:a3:5a:ca:f3:ad:6d:8e:78:a4:4a:48:
                    79:d0:43:a2:94:81:77:68:73:9b:3f:83:31:38:34:
                    8b:07:ba:e5:d7:98:31:ea:0b:46:17:eb:f4:2c:51:
                    42:8b:b2:7c:ae:8b:da:5c:50:f5:c9:8e:21:84:74:
                    45:eb:59:ea:45:42:f5:78:c4:39:57:ab:92:05:92:
                    2f:61:67:06:56:30:12:4e:f5:93:16:56:58:44:a3:
                    f8:31:24:d4:6a:0c:bc:0f:75:48:7c:a2:01:09:73:
                    13:07:52:cc:f2:4c:fd:0a:da:d4:8f:c3:75:8a:9c:
                    1b:e9:39:19:a3:2b:44:ae:e8:00:76:1d:fa:77:d6:
                    c0:80:ed:0e:21:71:5a:6b:96:28:f3:d0:7a:58:be:
                    f0:44:58:91:3f:12:8e:96:4b:c7:b1:e4:4b:b2:20:
                    67:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B0:7E:F3:54:3A:E3:03:83:EE:6A:01:5F:01:99:61:83:C0:DC:43
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2503468A1F211F190DA5D18CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.85.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         62:3a:fc:d8:94:04:ed:2c:99:a6:6e:3d:73:bf:2a:ab:b2:8f:
         9e:35:ec:6f:73:2d:c6:2d:fb:f1:a4:50:40:44:90:2d:ac:06:
         e8:7d:b1:02:ee:f8:f8:4d:47:ff:0a:79:77:9a:30:73:ce:48:
         84:6c:78:24:95:50:76:fb:15:1f:28:8a:29:56:cb:96:a2:c5:
         8c:92:31:fd:27:72:b4:5c:aa:75:27:e9:1d:4b:df:a8:cb:ab:
         df:42:d7:00:4d:22:73:49:2e:7b:82:53:43:3c:9f:aa:c3:cf:
         83:42:0f:61:2c:62:c2:0e:aa:c3:e4:f6:9c:dd:c3:83:42:e0:
         62:b1:b5:f4:cc:6a:f8:41:32:f3:f8:af:9a:34:8e:86:7a:16:
         2d:6b:77:b2:f6:26:da:eb:44:fd:12:3d:85:8b:07:24:44:8b:
         19:86:46:f5:d0:21:34:fa:0e:f1:0f:f4:4e:3f:c8:f1:72:de:
         66:6a:c2:e7:0d:31:39:2f:f7:07:08:1c:53:a0:82:da:5f:16:
         5a:13:17:fb:24:0a:10:ed:fb:0f:ca:75:6b:d3:c8:98:36:f5:
         8c:3c:0a:d4:1a:2a:b4:27:f3:1e:c5:dd:9e:54:cc:ca:c3:a1:
         39:eb:0a:a8:f9:ec:ca:94:7a:c4:c7:5d:52:c2:8f:fb:fe:52:
         37:2b:15:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----