Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8C1C2B2AA8E11F184E95AB4CE1D38B0.roa
File:                     D8C1C2B2AA8E11F184E95AB4CE1D38B0.roa (raw, json)
Hash identifier:          0lya6saLsrqSmf198n/Q2hKBEIG0ZQvUdNv68KARTmM=
Subject key identifier:   13:8B:AE:90:DD:24:CD:B5:17:1C:C9:F1:10:D2:C4:1C:68:13:5A:7B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E61A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8C1C2B2AA8E11F184E95AB4CE1D38B0.roa
Signing time:             Mon 07 Sep 2026 07:36:33 +0000
ROA not before:           Mon 07 Sep 2026 07:36:28 +0000
ROA not after:            Tue 06 Oct 2026 07:36:28 +0000
asID:                     147176
IP address blocks:        154.197.69.0/24 maxlen: 24
                          154.197.116.0/24 maxlen: 24
                          154.197.124.0/24 maxlen: 24
                          154.215.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 10 Sep 2026 09:09:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124442 (0x1e61a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  7 07:36:28 2026 GMT
            Not After : Oct  6 07:36:28 2026 GMT
        Subject: CN=6a9e6981-87bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b4:63:ca:5a:68:00:93:c9:18:ed:d2:27:57:
                    1c:d5:a8:95:20:20:e4:5b:c9:87:68:91:08:99:57:
                    47:68:ec:f6:0a:98:c8:e6:e4:2f:97:b3:c9:99:95:
                    f7:99:86:57:c5:a2:b6:16:a5:48:23:c7:6c:e1:ef:
                    cd:ec:ac:bb:31:37:4d:36:2f:b1:1e:bc:0c:60:04:
                    96:d0:84:57:32:cf:51:66:d9:3b:c8:48:5f:93:b2:
                    75:d1:77:73:40:71:1b:95:4e:43:d2:50:56:58:ca:
                    a3:37:f6:32:43:2e:92:94:c0:0f:d8:fe:85:86:ef:
                    74:fe:97:a6:51:c3:0b:6c:2a:8c:ae:c6:a7:3b:8f:
                    6b:b3:6e:ce:2c:0c:90:4e:03:b3:59:7f:ed:9d:87:
                    87:46:4e:01:07:22:56:2a:62:5e:2d:01:a8:4c:02:
                    3d:98:54:65:0d:e0:35:b5:6d:38:98:d0:3e:2d:c9:
                    30:87:32:ac:40:ba:79:fd:4e:ec:b7:c7:46:2a:9e:
                    b7:a2:7d:cf:af:25:52:86:a5:f1:17:aa:8f:fd:36:
                    b3:c9:31:e6:55:2f:f3:07:f6:e7:e2:b6:d7:74:67:
                    74:73:da:00:78:75:e5:67:39:6d:14:9a:25:12:fb:
                    1e:77:b9:0a:da:ce:78:99:ea:3e:79:43:63:2d:7b:
                    4a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:8B:AE:90:DD:24:CD:B5:17:1C:C9:F1:10:D2:C4:1C:68:13:5A:7B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8C1C2B2AA8E11F184E95AB4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.69.0/24
                  154.197.116.0/24
                  154.197.124.0/24
                  154.215.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:3b:b0:df:8e:f8:7b:72:8b:2b:86:1e:92:02:0d:a0:06:47:
         f1:28:17:3c:07:28:2f:f1:ba:a1:d6:71:68:1f:d0:09:78:52:
         f4:98:36:2f:d4:51:14:ff:dd:9c:d9:fc:9e:aa:8b:8e:c5:23:
         e5:ee:64:b1:a0:a6:3b:0b:2b:38:58:d5:79:3d:41:5b:14:df:
         6e:d0:96:c2:90:0a:b0:73:40:a6:0d:38:e0:16:41:9c:72:c1:
         bf:42:2f:aa:bc:ba:e9:14:27:d2:18:f6:b5:db:bc:ed:7a:42:
         12:e6:eb:d4:38:92:f1:d3:f6:9d:d8:7d:3e:02:d4:bb:b3:1b:
         ca:5a:e3:37:e7:b2:f3:4d:9a:e4:7b:ac:a9:50:f1:31:dc:8e:
         10:6c:c6:5c:a2:cc:7b:e3:1b:6b:08:4f:fc:4b:de:e7:4a:24:
         10:9d:e3:55:7e:52:59:77:4f:0c:c8:49:fb:75:5b:1f:29:66:
         f1:14:d8:04:98:71:0b:29:87:d2:8b:3b:fa:29:10:0e:86:75:
         09:72:08:2e:14:a3:22:50:f6:7b:5e:47:2a:0f:72:5b:d1:e6:
         3b:63:09:4e:87:87:c1:75:c9:1d:ec:2c:c7:af:6c:fe:06:44:
         c3:1d:55:54:76:c6:90:43:30:8e:a4:c2:25:d8:3a:f7:b4:d0:
         68:2c:1c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----