Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1047650CA6AC11F194363CABCE1D38B0.roa
File:                     1047650CA6AC11F194363CABCE1D38B0.roa (raw, json)
Hash identifier:          ze7yOcfHz4tRNbXckLITr+JQn3EfRG4yzlcQTwiupJg=
Subject key identifier:   9B:4D:04:53:C4:82:7D:6E:26:04:CD:7A:A8:22:D8:50:00:FA:DA:86
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E49D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1047650CA6AC11F194363CABCE1D38B0.roa
Signing time:             Wed 02 Sep 2026 08:55:37 +0000
ROA not before:           Wed 02 Sep 2026 08:55:32 +0000
ROA not after:            Sat 01 Sep 2029 08:55:32 +0000
asID:                     17561
IP address blocks:        154.211.94.0/24 maxlen: 24
                          154.211.95.0/24 maxlen: 24
                          154.211.96.0/24 maxlen: 24
                          154.211.97.0/24 maxlen: 24
                          154.211.98.0/24 maxlen: 24
                          154.211.99.0/24 maxlen: 24
                          154.211.100.0/24 maxlen: 24
                          154.211.101.0/24 maxlen: 24
                          154.211.102.0/24 maxlen: 24
                          154.211.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124061 (0x1e49d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  2 08:55:32 2026 GMT
            Not After : Sep  1 08:55:32 2029 GMT
        Subject: CN=6a97e488-388e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:76:d8:1e:bc:fd:eb:41:53:a0:8c:4a:cf:d8:
                    ce:ee:07:f6:8f:01:e2:55:23:b1:fa:05:73:55:1c:
                    02:88:c6:c1:44:f0:58:e0:c2:60:e0:77:2b:1f:24:
                    c4:95:d1:a5:20:ce:40:2f:7b:c7:70:61:81:00:92:
                    70:37:fb:7d:6d:49:a1:e5:40:96:69:55:de:c2:4b:
                    28:c9:5d:2e:d2:e1:fe:2f:02:c3:09:61:b3:5a:99:
                    a2:ff:ce:35:45:da:26:71:5c:4b:e9:08:6d:40:98:
                    6b:f1:fb:9a:58:50:06:0c:76:dc:13:7c:45:65:bf:
                    d9:19:2a:46:eb:8b:c9:81:d2:b5:ed:30:ac:8f:a1:
                    b0:cf:4b:ae:c4:31:b1:96:dd:a6:71:6f:9e:bb:4d:
                    0d:91:c9:c8:65:66:29:31:bb:ec:14:8d:0b:90:48:
                    fd:7b:bf:73:63:8a:3f:3f:a3:99:0b:0e:2c:3d:51:
                    95:7d:91:24:50:8d:81:e9:44:b1:7e:da:69:ab:d0:
                    68:c2:29:00:29:27:6c:d5:c6:54:43:60:07:3a:2b:
                    d3:81:07:73:fe:34:2d:7a:af:08:f4:e3:91:c5:7a:
                    0c:ee:12:e4:61:13:df:ba:28:54:07:a4:7f:95:7a:
                    e0:9e:1e:52:ad:4c:ff:93:79:06:68:87:06:29:60:
                    96:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4D:04:53:C4:82:7D:6E:26:04:CD:7A:A8:22:D8:50:00:FA:DA:86
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1047650CA6AC11F194363CABCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.211.94.0-154.211.103.255

    Signature Algorithm: sha256WithRSAEncryption
         6c:87:0b:3b:eb:b8:b3:13:8d:54:81:ef:c7:23:2b:a3:a8:00:
         5c:9f:22:0e:ea:67:a5:33:b1:84:91:4f:b8:84:5e:8e:37:05:
         4b:2d:c0:74:19:ae:2e:c1:99:c3:5d:0a:41:37:2e:a8:d3:5e:
         73:a7:8b:67:4a:bd:2a:df:22:8b:56:06:58:41:2b:c8:82:cd:
         4c:34:f0:e2:16:56:01:ea:c8:14:a6:95:d9:ee:20:fa:2c:41:
         50:bd:33:2b:cf:2d:07:d1:a5:ff:e0:2a:8d:ff:57:23:34:fc:
         8e:42:9a:c2:c5:5d:a6:c8:e9:b3:b2:5d:a2:89:53:8d:68:df:
         a4:44:ad:98:4a:d8:c4:39:26:1d:08:20:f8:e3:fc:61:7f:c6:
         db:64:1c:2b:7c:79:49:fc:e9:b4:f3:7b:a8:8d:ec:0a:54:15:
         71:87:ad:b9:5f:83:ef:a9:02:d5:0f:41:a4:86:4b:cf:0a:11:
         10:70:d0:2d:e1:39:e2:64:49:a1:e2:55:b9:82:dd:34:71:a4:
         ab:6b:eb:aa:38:df:f3:d9:bb:e2:71:5f:2a:cd:2f:7f:7c:67:
         ab:8e:cf:27:8e:29:a1:86:95:95:70:d6:30:43:f1:97:c4:6e:
         99:8f:a7:fd:bd:ac:2d:60:3e:b7:38:f5:61:dd:b4:da:6a:a9:
         ef:c1:1c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----