Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C58ED9E8A14A11F1A3111917CF1D38B0.roa
File:                     C58ED9E8A14A11F1A3111917CF1D38B0.roa (raw, json)
Hash identifier:          Oo+PIfryBhnQVOwr8KwoF4PaFBSMHYkanJDbicj43gk=
Subject key identifier:   59:14:D3:7C:F9:20:70:BB:52:02:4B:39:64:8F:0B:3B:77:28:BA:22
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E386
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C58ED9E8A14A11F1A3111917CF1D38B0.roa
Signing time:             Wed 26 Aug 2026 12:36:34 +0000
ROA not before:           Wed 26 Aug 2026 12:36:30 +0000
ROA not after:            Sat 25 Aug 2029 12:36:30 +0000
asID:                     17561
IP address blocks:        154.221.184.0/24 maxlen: 24
                          154.221.185.0/24 maxlen: 24
                          154.221.186.0/24 maxlen: 24
                          154.221.187.0/24 maxlen: 24
                          154.221.188.0/24 maxlen: 24
                          154.221.189.0/24 maxlen: 24
                          154.221.190.0/24 maxlen: 24
                          154.221.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123782 (0x1e386)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 26 12:36:30 2026 GMT
            Not After : Aug 25 12:36:30 2029 GMT
        Subject: CN=6a8eddd2-aace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3d:41:e3:e9:10:2a:cf:03:14:68:56:48:98:
                    74:8a:b8:b9:fa:ac:2d:d6:68:67:90:3f:13:89:4b:
                    ac:16:9e:f6:ba:d7:0c:c1:fb:2d:6e:03:c8:9a:7f:
                    ef:0e:3c:b5:59:d0:2c:46:a3:95:21:8b:0a:2f:2d:
                    c4:3c:84:10:fd:49:ab:4d:c2:ea:b6:88:0d:66:7d:
                    96:42:59:a5:e3:1d:5e:66:4e:56:ae:07:d7:77:ed:
                    29:43:18:0d:32:74:77:2a:5b:d1:e8:02:45:41:40:
                    b0:11:c9:f0:d4:9f:81:6e:55:34:32:43:0a:25:1c:
                    8a:21:2a:24:84:37:28:95:30:ad:aa:ca:88:fd:07:
                    31:70:db:09:12:96:05:b3:84:ea:26:c3:b3:e7:2b:
                    3a:cb:b8:f3:f2:e6:3c:9b:d1:76:35:14:6d:8c:17:
                    82:7b:be:af:4e:3f:4e:ff:70:83:0f:05:a7:63:f4:
                    57:e1:94:fb:31:de:33:9b:4d:10:b5:a7:7b:27:f7:
                    0b:fb:0e:94:d4:fb:c7:c9:81:30:75:f0:22:7b:4b:
                    d7:25:1d:9f:9f:67:a5:9c:b1:40:a6:7b:79:2b:88:
                    7f:37:78:a8:c8:7d:f6:96:32:62:3a:3a:65:f8:22:
                    ca:f2:f3:83:d0:38:54:c7:5c:8f:f9:58:4d:92:3e:
                    1e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:14:D3:7C:F9:20:70:BB:52:02:4B:39:64:8F:0B:3B:77:28:BA:22
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C58ED9E8A14A11F1A3111917CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.221.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         30:23:e2:90:24:2f:28:2a:76:f0:7f:0e:bf:43:11:3d:3f:ac:
         cd:a2:b3:87:a6:96:fb:e1:a8:d9:89:07:5a:98:da:7f:26:93:
         15:aa:c5:a3:15:9e:aa:d6:c9:f6:28:68:83:a6:5c:31:a5:35:
         40:23:b7:eb:8e:fc:65:23:28:15:84:a9:f2:c5:83:38:51:0b:
         f1:16:3a:ee:5d:33:86:8b:56:3a:6b:06:b4:18:2e:b4:37:25:
         de:b5:1b:e0:e6:be:c7:77:cb:82:32:95:4d:28:6e:6c:7d:d8:
         da:31:9b:78:0a:d0:78:0a:4e:b0:74:4e:28:67:bb:26:15:48:
         40:47:62:00:c1:9f:c6:f5:05:2d:fd:44:b1:fc:58:6b:be:b5:
         34:70:6b:15:8c:a4:b8:cd:3f:6a:52:68:a5:77:b9:53:30:d6:
         e7:e0:68:1f:c8:5c:7e:4b:a4:1c:1b:f3:b7:8a:f0:da:21:c4:
         e6:cd:f2:54:40:7f:ca:51:4f:ab:cd:f0:b8:12:18:40:82:60:
         ea:47:d7:f4:ce:fa:a5:28:94:a0:93:85:43:af:4a:b9:c1:1f:
         3f:91:01:00:f1:ae:63:4c:ce:3c:f5:61:9e:b5:4c:b3:76:6d:
         a0:c3:34:69:13:e9:09:a4:31:6f:85:6c:27:03:2c:8d:42:6f:
         e9:55:8c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----