Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2F44C74A05F11F19AB58108CF1D38B0.roa
File:                     F2F44C74A05F11F19AB58108CF1D38B0.roa (raw, json)
Hash identifier:          kjbhKyAHlbmVAEZ+IYtH58D4kGBNYbiH3tOL9uwmIZQ=
Subject key identifier:   02:40:0E:B0:63:34:60:73:42:90:63:ED:02:32:26:18:4B:C1:8B:F9
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E2AE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2F44C74A05F11F19AB58108CF1D38B0.roa
Signing time:             Tue 25 Aug 2026 08:35:39 +0000
ROA not before:           Tue 25 Aug 2026 08:35:35 +0000
ROA not after:            Mon 30 Aug 2027 08:35:35 +0000
asID:                     138995
IP address blocks:        154.196.2.0/24 maxlen: 24
                          154.196.3.0/24 maxlen: 24
                          154.197.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 28 Aug 2026 05:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123566 (0x1e2ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 25 08:35:35 2026 GMT
            Not After : Aug 30 08:35:35 2027 GMT
        Subject: CN=6a8d53db-9a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2d:67:00:d6:8b:08:48:66:cf:a3:07:8c:1a:
                    a5:5e:a7:73:90:ff:47:2b:88:5a:1b:9b:00:c7:79:
                    57:aa:fa:e2:67:6c:9f:eb:94:1f:86:c2:d3:2c:fd:
                    32:3b:2e:3a:78:71:35:c9:64:8a:3b:47:87:8f:fd:
                    49:4b:fa:28:b8:e6:66:82:08:fe:6a:6d:7d:cd:b5:
                    36:93:55:50:6d:83:b2:09:da:f4:67:90:15:53:62:
                    58:1b:80:57:a4:44:42:87:ff:f5:48:b2:3b:00:9f:
                    d7:9c:47:99:8e:11:ce:40:c3:85:78:97:67:b7:83:
                    99:47:ca:eb:26:f9:86:15:e5:15:7f:d1:9f:85:69:
                    d9:7e:ec:0d:a7:da:5c:0a:90:f1:21:1a:1f:9a:3c:
                    5e:c2:41:b5:03:6d:64:da:9b:39:ae:2f:80:57:a9:
                    98:33:e7:46:ee:c0:59:8d:68:b2:06:32:f7:c8:59:
                    08:af:73:cf:e8:24:f7:c7:94:5e:db:79:4f:01:83:
                    e6:53:0e:fa:d1:2b:82:dc:dd:32:b5:73:c7:32:90:
                    01:49:6e:b3:35:d3:ea:f8:c8:5d:17:9b:16:46:ec:
                    ec:3d:fa:97:ff:3e:58:dc:89:1a:da:11:a5:63:ee:
                    a3:68:d4:71:f5:ae:6b:69:9a:9e:a8:bd:e7:d2:6d:
                    37:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:40:0E:B0:63:34:60:73:42:90:63:ED:02:32:26:18:4B:C1:8B:F9
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2F44C74A05F11F19AB58108CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.2.0/23
                  154.197.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:ce:f9:d7:e8:b8:a9:ce:c9:81:1e:93:3e:3f:f2:4e:7f:95:
         8c:15:61:30:42:a7:72:74:79:68:1c:b0:61:c4:23:17:33:51:
         f6:64:1c:bd:c5:45:98:35:3f:92:2b:6a:e3:00:34:51:fd:85:
         b9:7b:e6:ae:af:38:00:d6:37:df:42:14:e0:4a:7e:48:05:42:
         c1:87:08:b7:b8:d7:cd:a5:aa:66:0d:57:77:ca:b5:f0:67:07:
         0e:2a:73:b8:19:2a:b2:8d:d0:79:82:d7:e0:6a:67:4f:d3:cd:
         f0:af:61:f1:c6:be:02:d6:58:2d:46:53:e5:a0:16:97:5b:f1:
         05:d3:5a:ef:9e:91:24:45:cc:bd:78:96:b2:82:67:09:e4:d6:
         47:34:41:49:c6:47:ad:2f:16:65:16:1b:dd:25:09:1f:8e:0c:
         65:42:2a:f1:a6:81:ae:d5:3b:60:e8:72:cc:a8:6c:af:7b:36:
         11:c4:33:bb:f4:8c:a9:d0:af:4a:ad:20:02:de:8e:68:4f:a3:
         fc:cc:1d:6e:42:38:c0:d1:8b:d4:37:7b:c4:f6:03:9d:5a:c9:
         47:a1:e0:16:63:6f:a9:de:30:c8:f3:f6:9a:18:be:54:cc:a0:
         3e:2f:17:4d:9c:fd:67:1b:a3:38:3d:c5:64:0d:54:de:39:63:
         bd:4a:62:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----