Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/278156A0B4F411F1914B8E0CCF1D38B0.roa
File:                     278156A0B4F411F1914B8E0CCF1D38B0.roa (raw, json)
Hash identifier:          TH/5kBpDVH9++UeMX2DJ5UuYY0SMAyD1fq8aRYXCpMA=
Subject key identifier:   AF:41:F7:3C:D3:A3:35:AB:CE:A3:ED:31:3D:1A:F6:A1:44:39:B6:01
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E941
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/278156A0B4F411F1914B8E0CCF1D38B0.roa
Signing time:             Sun 20 Sep 2026 13:06:56 +0000
ROA not before:           Sun 20 Sep 2026 13:06:52 +0000
ROA not after:            Tue 27 Oct 2026 13:06:52 +0000
asID:                     63139
IP address blocks:        154.203.169.0/24 maxlen: 24
                          154.203.170.0/24 maxlen: 24
                          154.203.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 12:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125249 (0x1e941)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 20 13:06:52 2026 GMT
            Not After : Oct 27 13:06:52 2026 GMT
        Subject: CN=6aafda6f-06cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f7:1c:69:c3:4e:a9:23:32:9b:ff:fd:a8:33:
                    2c:c8:a3:f7:76:9f:3e:c6:12:30:f1:cb:12:91:11:
                    fc:b1:09:9e:36:c7:79:ec:1b:8f:55:8a:27:7d:30:
                    52:fd:f7:83:ee:5e:a0:65:31:a8:cf:b5:1f:f5:5a:
                    0b:5d:dc:13:db:01:29:0c:e6:a4:89:97:74:9e:f4:
                    7d:dd:71:7e:7a:e0:3a:3f:64:12:8c:10:67:5e:9b:
                    3f:65:00:8b:6a:7c:f6:6b:aa:5e:7a:c4:b5:9b:c9:
                    55:aa:f7:88:e6:7a:ef:dd:85:6d:5e:fb:e4:91:d7:
                    99:ac:78:f5:89:45:ee:9a:c1:88:8e:02:5b:25:2e:
                    36:01:e0:ce:27:08:71:78:1c:8c:d3:8e:ff:5a:54:
                    a3:dd:14:d1:fe:84:96:eb:91:cd:00:fd:7f:9f:64:
                    85:2d:fa:38:f5:a1:11:92:fe:4e:f3:b4:81:ad:f0:
                    ba:75:e6:5b:32:ea:2f:05:97:02:cb:f3:66:03:0d:
                    98:db:45:d6:fd:8f:9b:84:47:a4:74:3d:5f:91:1f:
                    3d:ba:fd:7e:e1:f7:96:6f:81:7b:66:4c:0f:8f:d3:
                    02:bf:86:dd:02:92:b2:71:5b:7c:67:de:85:c2:03:
                    ae:ac:13:fe:a6:04:18:44:64:62:b1:6f:90:1b:90:
                    4e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:41:F7:3C:D3:A3:35:AB:CE:A3:ED:31:3D:1A:F6:A1:44:39:B6:01
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/278156A0B4F411F1914B8E0CCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.169.0-154.203.171.255

    Signature Algorithm: sha256WithRSAEncryption
         87:9e:d5:d7:04:ab:8a:e5:b1:4a:77:be:04:84:15:eb:0d:fa:
         cf:7a:b9:11:b2:b9:c9:64:10:60:2e:41:c0:f9:59:bd:b7:d4:
         ae:75:3d:01:0e:06:f8:08:87:a7:80:6b:f8:c6:8d:82:8a:d8:
         b6:62:23:8d:ec:ba:a9:f6:a1:17:c1:8b:8a:b3:27:5f:dc:46:
         ee:e6:9b:66:ed:5a:bc:9f:3c:46:a7:6b:b1:c8:a3:94:39:f4:
         26:2a:82:66:8f:c0:fd:6c:4d:d9:97:28:f7:f3:59:19:e5:0d:
         a1:12:86:6f:9f:7c:ba:c2:b2:90:0f:9b:de:e3:3b:19:22:26:
         65:ea:ab:f4:53:2b:d2:b4:8c:aa:92:bd:10:8a:f9:92:09:03:
         23:a5:5a:18:2e:87:52:37:ae:c0:82:05:06:e3:34:96:f6:e6:
         a7:2e:3c:03:7f:df:37:6a:03:77:7a:9d:bc:91:c7:bb:4e:31:
         4d:1b:58:6a:d3:11:33:71:e4:b1:b2:81:a9:00:5b:fb:a1:31:
         7d:a4:6d:da:eb:c4:3f:bc:ca:73:f5:d0:d0:f3:72:d5:72:bb:
         97:d8:d7:10:ae:ad:9d:ac:9f:2d:15:b1:df:bf:f3:e1:cc:71:
         f5:8d:9b:99:a2:36:ae:61:8e:5f:c8:5f:9e:24:09:ba:51:86:
         e9:5f:24:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----