Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365DBE0/A5D4ED36149111ECA2945578D8A014CE/F5253A92A07F11F1BB8D50C8CE1D38B0.roa
File:                     F5253A92A07F11F1BB8D50C8CE1D38B0.roa (raw, json)
Hash identifier:          UPv8sR9OdOGsW+gWgijAzwLL71+IJNGUpgNe1LxU/DU=
Subject key identifier:   B0:68:E5:0C:6E:89:F5:73:59:20:A1:D9:87:B9:4E:DB:3F:71:40:81
Certificate issuer:       /CN=F365DBE0AF/serialNumber=ADDC6BBDD1EFF06452D531A6A49F7B030C97C614
Certificate serial:       0744
Authority key identifier: AD:DC:6B:BD:D1:EF:F0:64:52:D5:31:A6:A4:9F:7B:03:0C:97:C6:14
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rdxrvdHv8GRS1TGmpJ97AwyXxhQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365DBE0/A5D4ED36149111ECA2945578D8A014CE/F5253A92A07F11F1BB8D50C8CE1D38B0.roa
Signing time:             Tue 25 Aug 2026 12:24:46 +0000
ROA not before:           Tue 25 Aug 2026 12:24:42 +0000
ROA not after:            Thu 31 Aug 2028 12:24:42 +0000
asID:                     37479
IP address blocks:        197.155.248.0/24 maxlen: 24
                          197.155.249.0/24 maxlen: 24
                          197.155.250.0/24 maxlen: 24
                          197.155.251.0/24 maxlen: 24
                          197.155.252.0/24 maxlen: 24
                          197.155.253.0/24 maxlen: 24
                          197.155.254.0/24 maxlen: 24
                          197.155.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365DBE0/A5D4ED36149111ECA2945578D8A014CE/rdxrvdHv8GRS1TGmpJ97AwyXxhQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365DBE0/A5D4ED36149111ECA2945578D8A014CE/rdxrvdHv8GRS1TGmpJ97AwyXxhQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rdxrvdHv8GRS1TGmpJ97AwyXxhQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Oct 2026 02:22:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1860 (0x744)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365DBE0AF, serialNumber=ADDC6BBDD1EFF06452D531A6A49F7B030C97C614
        Validity
            Not Before: Aug 25 12:24:42 2026 GMT
            Not After : Aug 31 12:24:42 2028 GMT
        Subject: CN=6a8d898e-7d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d8:f7:23:1a:e0:4a:db:56:f1:ea:57:18:26:
                    01:f1:e1:31:fe:2b:e3:b0:92:f6:ef:54:ab:e7:9d:
                    7e:ae:bc:a0:6a:2c:65:d7:33:04:33:a6:80:ca:88:
                    ed:59:15:fb:ed:56:02:3c:ac:bb:2b:e0:63:ff:63:
                    ba:45:02:88:21:29:44:a8:9b:fb:4a:f1:28:cf:c3:
                    d8:f5:a5:eb:a9:10:82:b6:02:79:34:ad:80:c6:03:
                    e4:3a:11:86:a5:7d:de:fc:2a:8b:f6:c2:9a:b6:3a:
                    30:06:89:4f:9d:88:8f:5f:f3:53:80:93:95:5c:6f:
                    48:89:aa:77:47:61:cc:ba:74:2f:50:9e:27:e0:fc:
                    be:e9:3f:63:51:85:e8:f7:af:45:dc:fe:37:1e:34:
                    09:3b:19:f0:5e:b1:dc:76:35:0c:dc:79:e6:7a:a3:
                    1b:56:d1:dd:0e:00:8d:ce:a3:98:6a:15:79:2c:5f:
                    34:e3:0f:85:b7:d3:76:01:46:92:d2:6f:59:49:7e:
                    3d:1d:2d:ae:d0:82:bd:73:69:d5:da:99:e4:ed:28:
                    5e:98:9e:dd:e9:8d:f9:1a:55:3f:d1:55:f5:45:9a:
                    e0:6e:71:29:a2:33:26:b6:6b:f8:9b:0f:69:4e:89:
                    50:b1:a9:25:4b:83:f3:0f:94:f1:c1:1a:9d:a1:6e:
                    4d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:68:E5:0C:6E:89:F5:73:59:20:A1:D9:87:B9:4E:DB:3F:71:40:81
            X509v3 Authority Key Identifier:
                keyid:AD:DC:6B:BD:D1:EF:F0:64:52:D5:31:A6:A4:9F:7B:03:0C:97:C6:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365DBE0/A5D4ED36149111ECA2945578D8A014CE/rdxrvdHv8GRS1TGmpJ97AwyXxhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rdxrvdHv8GRS1TGmpJ97AwyXxhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365DBE0/A5D4ED36149111ECA2945578D8A014CE/F5253A92A07F11F1BB8D50C8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.155.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         50:f3:ed:15:a0:9b:eb:91:dd:24:f0:a5:76:09:7d:c4:41:6b:
         0a:0a:c4:5c:b9:31:fd:0d:26:c5:1b:87:1d:66:da:95:44:26:
         9e:ab:2f:40:6b:58:0f:3c:28:4e:b9:8f:4d:6c:3a:28:54:95:
         5b:78:47:13:0f:f5:17:bc:fc:b0:5e:70:0e:af:99:55:10:2d:
         7e:87:bd:e9:6e:d6:c5:cb:8e:56:12:10:b8:1f:a9:6f:f9:4d:
         bf:d3:3c:6f:e8:52:4b:df:c0:11:30:e6:f6:44:22:47:a3:64:
         26:bc:d5:e5:f2:17:0f:e0:23:31:7b:6f:74:34:fb:60:a8:36:
         da:c2:3b:2f:bb:e9:8f:4a:33:65:ce:84:1f:b0:2b:90:71:a4:
         35:fc:e4:1c:8f:33:ba:01:94:4e:22:c1:ac:92:b2:5f:df:97:
         23:50:04:7c:44:96:6d:e7:d8:2d:7f:ef:75:b3:dc:c3:d0:b1:
         f7:2c:2f:82:81:1d:d0:9d:b6:eb:11:e3:e8:c1:3d:9e:23:4b:
         af:a6:7e:fc:3b:71:7f:d1:1f:6d:8a:79:1d:76:ac:0c:28:29:
         f2:bd:b7:87:e3:4f:10:44:ee:e4:33:fd:43:85:9e:76:13:7d:
         50:fd:b1:1a:3e:f1:71:ad:60:71:c1:81:3d:f5:91:91:71:b9:
         4c:f2:91:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----