Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E62599A9C7311F19EB881FFCE1D38B0.roa
File:                     2E62599A9C7311F19EB881FFCE1D38B0.roa (raw, json)
Hash identifier:          GI4D1PSctxN+96fB0dFXaE3oD5UaDgQO8hrIUmNQO9A=
Subject key identifier:   B9:F1:02:07:70:D4:CE:5A:62:00:BF:BC:F3:6D:64:B2:F2:98:A2:DA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E059
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E62599A9C7311F19EB881FFCE1D38B0.roa
Signing time:             Thu 20 Aug 2026 08:43:14 +0000
ROA not before:           Thu 20 Aug 2026 08:43:10 +0000
ROA not after:            Tue 29 Sep 2026 08:43:10 +0000
asID:                     59642
IP address blocks:        154.84.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122969 (0x1e059)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 08:43:10 2026 GMT
            Not After : Sep 29 08:43:10 2026 GMT
        Subject: CN=6a86be22-8924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:07:15:0b:8b:05:b3:e4:47:ed:56:61:38:60:
                    56:cd:6d:81:9f:92:1f:db:c4:00:3d:64:23:05:7c:
                    3b:d0:a0:b3:10:a2:86:42:3f:7c:4f:05:73:ec:53:
                    21:5e:a0:60:a7:bd:17:57:7b:ee:af:f1:3a:95:8f:
                    66:e3:a7:f3:d9:25:7e:65:b8:ca:01:7b:70:57:6a:
                    55:52:05:61:05:32:29:49:ed:25:9b:1c:8f:17:c2:
                    41:c4:35:63:db:ea:24:56:9d:1d:bd:07:0e:ca:7c:
                    51:6a:e6:6d:8e:17:4d:d9:86:1b:e1:e1:73:d8:6e:
                    fd:8f:4c:d0:e4:32:06:2a:63:11:4b:1f:9f:96:74:
                    f8:5c:1d:0a:97:05:dd:47:94:f2:23:36:74:b3:c5:
                    6b:f3:9b:75:41:bf:94:5f:41:d4:71:e7:2b:a1:60:
                    15:10:c1:29:52:72:a2:01:dd:ca:ec:57:cc:25:bc:
                    17:92:3b:67:9e:8c:19:1e:2e:7c:dd:8e:69:55:54:
                    9c:bf:83:a2:93:9c:b2:6c:d4:88:6f:65:e3:e5:47:
                    31:41:5d:10:f7:82:1a:7b:0d:ae:9a:35:09:59:33:
                    da:a8:27:ce:76:2c:3c:18:be:40:90:e3:1a:6c:ef:
                    e8:72:fc:e8:9d:d6:86:23:6f:9c:d6:d2:b5:d1:b8:
                    4d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F1:02:07:70:D4:CE:5A:62:00:BF:BC:F3:6D:64:B2:F2:98:A2:DA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E62599A9C7311F19EB881FFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:4b:53:8b:47:59:c0:fe:92:dc:a2:8c:53:9f:c5:21:2e:8c:
         86:e2:b3:e0:13:74:00:7a:f9:7f:67:69:89:3f:5b:32:59:c3:
         f1:0c:d3:e8:25:a0:e9:f9:60:52:6c:44:ae:cd:27:c3:fc:d6:
         dc:29:1b:63:3b:88:8a:e4:6a:9a:97:97:32:49:27:f7:4e:75:
         4c:63:c8:03:3f:f3:2d:4f:e6:a2:a5:c1:49:e6:7e:94:c3:a0:
         6b:64:bf:b2:de:23:f5:21:2c:c7:93:9e:78:c7:18:99:3c:bd:
         6b:07:89:b4:14:3a:0c:34:46:c7:49:9d:92:31:0f:f7:26:cf:
         f7:b4:bf:c3:e6:14:26:93:f1:54:38:79:b3:ef:ff:2b:ff:9a:
         9c:3d:38:4a:b9:e5:31:f0:c5:a8:77:2e:06:18:f8:02:ec:cc:
         4d:c3:9d:c1:97:a9:b1:71:a2:c1:e3:a7:07:f5:2d:93:55:00:
         85:63:12:07:0e:88:e5:c2:23:75:bf:fd:f5:f1:61:41:02:02:
         78:f6:27:06:d6:87:f6:ea:22:1d:af:bc:00:ac:3b:bf:c3:f7:
         ba:3c:52:35:4c:3f:4c:29:01:e8:b8:85:cf:2d:1b:fe:2d:bb:
         75:70:3c:82:a9:9b:34:13:1a:d8:1c:34:15:db:eb:2d:51:9b:
         59:7a:d7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----