Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22980CB4B59511F196A259ACCE1D38B0.roa
File:                     22980CB4B59511F196A259ACCE1D38B0.roa (raw, json)
Hash identifier:          nMaYEWX/LULOihTf+KaDaPgPtx9/HrhrZzAtcODdhTU=
Subject key identifier:   39:2A:40:15:CE:98:51:E3:F1:F7:0E:4B:28:A8:81:A6:1C:32:87:93
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E97A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22980CB4B59511F196A259ACCE1D38B0.roa
Signing time:             Mon 21 Sep 2026 08:19:16 +0000
ROA not before:           Mon 21 Sep 2026 08:19:12 +0000
ROA not after:            Tue 27 Oct 2026 08:19:12 +0000
asID:                     984
IP address blocks:        154.200.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 13:46:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125306 (0x1e97a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 21 08:19:12 2026 GMT
            Not After : Oct 27 08:19:12 2026 GMT
        Subject: CN=6ab0e884-6b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b6:17:f7:b1:aa:a5:e3:10:11:4f:9c:fe:87:
                    40:f9:57:3d:fb:ae:a6:cb:c9:d7:20:b0:ee:18:73:
                    38:bc:f2:28:43:dd:89:40:c6:83:5f:dd:0b:3d:91:
                    82:3a:b2:2c:5f:bd:be:ae:85:af:53:0d:31:ca:64:
                    61:3a:fc:f9:9a:df:77:ab:6e:f9:d6:64:0b:5d:aa:
                    5c:f0:f7:69:4a:86:d3:f7:63:2d:71:83:bf:30:27:
                    b1:3d:99:3d:f8:08:0b:72:6c:8d:15:6c:5a:4b:8e:
                    7f:c1:77:57:0b:19:44:ee:5a:5c:a4:1f:3a:70:1c:
                    9e:d2:e6:eb:81:bb:4c:f3:7f:46:11:19:72:90:f0:
                    3d:8e:8c:4b:25:2f:b6:c2:b2:2d:da:20:6e:ac:94:
                    80:45:71:bc:97:ce:99:74:c3:74:3a:86:ec:1b:d4:
                    7b:ad:d6:74:60:49:d1:a7:6c:98:20:15:8f:bd:12:
                    c6:4e:b5:d4:3c:e4:d9:46:53:d4:06:40:dd:e0:62:
                    9c:24:9c:0f:67:64:93:7b:f3:e9:01:97:01:16:bf:
                    6a:d2:da:31:e1:ad:d0:a7:59:58:c0:29:f2:e3:11:
                    c4:b2:d5:f4:4a:f7:3c:8b:7e:1d:ed:c9:7e:f5:5f:
                    47:7f:5c:5b:96:3e:27:11:09:33:9d:28:98:06:c7:
                    1f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:2A:40:15:CE:98:51:E3:F1:F7:0E:4B:28:A8:81:A6:1C:32:87:93
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22980CB4B59511F196A259ACCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:d1:7b:f2:8e:c4:dd:40:61:28:f6:11:43:14:4a:c2:a5:eb:
         47:8b:62:5d:34:76:7f:d3:fe:6f:95:9d:eb:64:8b:e5:0d:c5:
         81:cf:07:c5:f6:18:5a:da:da:35:34:16:80:0e:69:05:ba:19:
         83:62:5d:61:cc:6d:45:a5:6c:05:0c:f1:47:28:cb:85:d6:0d:
         7f:88:60:b4:04:7f:53:92:e1:e1:2e:3e:2c:e4:ad:2a:66:a6:
         40:7e:d7:6f:9d:ff:6b:72:d6:e8:5b:15:8c:ea:2f:17:f6:6b:
         d4:ae:18:36:06:e3:36:bf:16:d6:72:f1:3c:e1:b7:e2:4d:95:
         48:33:c7:2a:be:1e:1d:9f:78:df:ec:f8:34:99:e3:9e:12:c6:
         fa:20:7f:fd:c8:9d:89:17:42:df:06:da:67:be:0e:b2:95:08:
         e8:8e:40:4b:f8:55:cf:d0:67:1d:88:b1:02:5d:20:91:8c:fe:
         29:a4:b6:ef:59:52:a2:f6:37:e2:43:23:95:71:a1:3d:3d:cb:
         67:8d:02:9b:02:fa:e6:00:15:d2:7d:65:60:52:b3:cd:06:7d:
         45:3f:5a:29:fd:a5:19:e7:c6:7e:08:6e:06:d2:33:17:78:c4:
         ba:ce:aa:cb:c5:6a:34:a0:46:ac:d5:7e:7f:5b:09:13:f8:4a:
         bd:92:7e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----