Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44810372AA9511F190C77BDACE1D38B0.roa
File:                     44810372AA9511F190C77BDACE1D38B0.roa (raw, json)
Hash identifier:          K3NnUFYqyANm8eaKh2i76g6MbiwIln4OV3QaOnAlGKY=
Subject key identifier:   79:05:22:0E:42:AA:3A:18:D8:91:A8:24:A1:14:BF:E1:D0:9C:11:C5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E622
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44810372AA9511F190C77BDACE1D38B0.roa
Signing time:             Mon 07 Sep 2026 08:22:30 +0000
ROA not before:           Mon 07 Sep 2026 08:22:26 +0000
ROA not after:            Thu 06 Sep 2029 08:22:26 +0000
asID:                     17561
IP address blocks:        154.222.64.0/24 maxlen: 24
                          154.222.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 10:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124450 (0x1e622)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  7 08:22:26 2026 GMT
            Not After : Sep  6 08:22:26 2029 GMT
        Subject: CN=6a9e7446-e99c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:23:7c:b8:d9:c6:e3:87:04:bc:bc:c8:f4:e0:
                    ec:2f:b5:01:45:64:ad:be:8f:5a:f2:31:e8:e3:83:
                    c4:9a:46:18:72:1a:49:5f:97:99:e1:97:4f:79:b8:
                    e4:c2:8f:54:59:77:90:e7:a4:f6:da:b8:2e:40:d6:
                    be:75:c2:85:31:32:31:89:53:99:18:45:6e:9b:41:
                    4d:6d:c6:1d:fd:0c:83:83:24:35:9f:b2:f8:97:45:
                    d6:a7:e9:60:7d:6c:a3:ae:42:a6:b4:20:29:60:90:
                    18:c1:f0:4e:28:89:96:1b:24:ae:aa:66:aa:d6:27:
                    ed:46:87:af:e4:55:d4:d7:77:b0:6f:a1:2a:d9:e1:
                    ae:a6:8e:4e:fc:fd:df:2d:3b:57:b3:24:e3:ce:16:
                    2c:c1:b1:c8:51:d9:ed:6b:93:31:53:16:25:a7:1d:
                    45:e0:95:68:1e:48:8d:28:a8:63:f6:d9:c5:d3:87:
                    20:3c:72:88:a8:99:e9:9d:e5:65:5a:18:1d:3c:c2:
                    27:52:65:ca:c3:e8:c9:32:59:f4:31:17:39:4d:df:
                    a2:ed:0a:fe:33:0d:0b:b6:58:90:4f:e7:98:84:61:
                    39:69:12:6f:ca:12:be:9a:5d:c2:dd:2e:f7:92:0d:
                    40:ab:c6:ab:45:82:90:6b:a8:dd:fc:61:55:f2:d0:
                    64:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:05:22:0E:42:AA:3A:18:D8:91:A8:24:A1:14:BF:E1:D0:9C:11:C5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44810372AA9511F190C77BDACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:52:4f:99:ea:b8:cc:72:6c:fd:16:5f:a1:9d:3c:e9:b9:56:
         ae:fa:3a:9c:92:fa:29:3f:32:b9:83:7d:1a:97:22:50:50:3a:
         7c:77:31:bd:9a:29:56:62:30:3c:7d:1a:d4:1c:2a:41:ba:6a:
         4f:ad:71:83:6f:1f:d4:cb:5c:0d:e7:eb:19:e1:4e:d3:da:f4:
         5b:3f:79:ad:d8:67:74:f6:b2:de:d4:7a:f8:99:cd:1e:4b:f8:
         4a:84:f0:b5:e9:a6:c6:0e:c7:60:df:57:96:a5:15:36:a8:b9:
         0c:4b:a6:9d:5b:34:1a:ff:32:b3:41:cf:81:e7:14:c5:7e:9e:
         e4:b6:13:47:0a:a3:45:64:c9:da:bb:57:0b:32:b3:31:bd:3a:
         7b:42:d7:87:af:76:93:25:92:d6:62:b1:c2:e5:0a:e2:ea:27:
         95:8a:c8:6a:cd:58:61:40:05:df:02:82:3c:9b:8d:96:72:a6:
         0d:94:66:7e:3d:f8:8d:54:25:9d:33:57:79:61:3f:46:1b:48:
         fd:01:2e:31:bc:88:3b:5a:c2:c8:2a:e2:6b:3e:45:36:ab:9b:
         92:28:31:b4:c6:b2:93:ae:bd:2b:82:0c:cd:61:4f:2d:f4:d6:
         ce:42:1c:4f:e3:31:4f:a4:9c:d9:e3:ef:d5:57:92:dc:f3:99:
         5a:66:ac:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----