Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2988C3D6B0D311F19796E1A8CE1D38B0.roa
File:                     2988C3D6B0D311F19796E1A8CE1D38B0.roa (raw, json)
Hash identifier:          3OQdJt00q7k5evJstr6HTZItWftwmVIB90gXfEajFGw=
Subject key identifier:   C3:EC:0F:F9:04:86:89:CF:B7:76:AD:1A:CB:E7:FF:7A:3D:BD:65:E9
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E83B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2988C3D6B0D311F19796E1A8CE1D38B0.roa
Signing time:             Tue 15 Sep 2026 07:00:41 +0000
ROA not before:           Tue 15 Sep 2026 07:00:37 +0000
ROA not after:            Wed 21 Oct 2026 07:00:37 +0000
asID:                     401783
IP address blocks:        154.222.112.0/24 maxlen: 24
                          154.222.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124987 (0x1e83b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 15 07:00:37 2026 GMT
            Not After : Oct 21 07:00:37 2026 GMT
        Subject: CN=6aa8ed19-3039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f5:a4:f2:50:98:0c:f4:cb:42:54:ba:5f:a4:
                    7f:e3:e2:37:b6:da:bf:9d:7d:41:59:39:31:b7:97:
                    38:21:99:d2:00:e1:32:d6:b8:9f:29:cc:62:cf:e3:
                    81:c2:9d:59:48:23:a3:86:4b:af:61:0a:83:ec:5b:
                    3d:24:94:ef:4e:0d:99:36:47:8d:f6:05:41:ce:70:
                    09:6c:b0:fe:a0:d1:b1:6a:71:c1:3c:17:78:df:87:
                    8c:db:01:4f:54:bb:b9:68:e5:05:25:fd:60:f3:10:
                    9e:15:e7:73:05:ff:e0:e9:cf:15:46:b2:e5:b2:e7:
                    db:c0:a7:6c:b9:c5:8c:3b:63:12:52:2b:d8:34:b8:
                    7f:96:ff:49:34:e6:74:b9:21:38:89:e1:98:d9:72:
                    32:5b:34:83:dc:8a:0f:ff:06:b5:8a:36:b7:82:bc:
                    09:c2:91:0c:08:5f:84:86:36:3e:2c:f7:c7:f7:2d:
                    dc:da:00:98:7b:6a:bc:73:52:8a:43:cf:c8:64:ce:
                    bb:2c:33:f7:28:17:cf:ee:27:00:30:cf:1d:28:9f:
                    9c:af:8a:3a:f3:36:f0:8d:58:94:75:05:cc:15:a4:
                    47:aa:fb:84:38:ec:36:b9:a7:b7:70:31:45:39:64:
                    72:45:d1:44:0a:98:cc:e6:52:43:7f:79:5a:54:3f:
                    39:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EC:0F:F9:04:86:89:CF:B7:76:AD:1A:CB:E7:FF:7A:3D:BD:65:E9
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2988C3D6B0D311F19796E1A8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:b9:98:0f:ad:c2:87:d3:0d:7d:38:8d:33:df:7e:e8:61:de:
         e2:13:6a:18:34:56:db:30:3c:db:4a:37:e6:3d:8d:91:c2:72:
         93:f8:ff:cc:51:53:be:83:cb:b4:cd:61:e5:c2:5e:a8:3e:d9:
         7c:6c:23:69:7b:b4:67:22:c6:43:15:f7:85:e6:81:c7:60:de:
         32:b2:e3:9c:ed:31:87:37:d9:86:4e:bf:30:87:9e:c5:09:2f:
         2e:2b:27:af:08:f9:f6:db:9d:64:61:2b:cd:c8:c0:19:e5:39:
         97:2a:20:d1:e2:fc:cc:8c:16:de:8f:1a:20:ea:a2:97:3d:13:
         6e:4c:4f:57:fa:e5:b5:79:1b:62:29:60:da:c3:23:e4:9a:3e:
         99:af:4a:0c:a5:2a:54:08:d8:2b:87:1b:07:d7:b5:44:07:53:
         44:2a:a3:9d:d0:42:60:99:46:1c:af:bb:33:7a:7d:36:df:5d:
         b9:77:06:36:ea:be:6d:17:07:a7:74:56:98:ca:03:3c:f6:90:
         33:5c:8a:c6:69:14:5e:ea:9e:62:ff:ee:67:f3:f2:f5:ed:0e:
         8c:09:fb:71:6b:e7:26:66:21:2d:22:cc:3e:38:62:ae:80:74:
         30:a7:57:dc:62:b0:1c:1f:af:0a:2e:73:dc:bb:08:88:03:28:
         28:db:bc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----