Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44E47146AA9011F19A4235BECE1D38B0.roa
File:                     44E47146AA9011F19A4235BECE1D38B0.roa (raw, json)
Hash identifier:          FBGhzCtgl3o31AosEtbp5acGAQmoET/4lp9w2psOCx4=
Subject key identifier:   F5:E5:D3:F9:EB:ED:87:B5:D1:74:CC:C0:E9:53:2C:0F:BB:04:B9:70
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E61C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44E47146AA9011F19A4235BECE1D38B0.roa
Signing time:             Mon 07 Sep 2026 07:46:44 +0000
ROA not before:           Mon 07 Sep 2026 07:46:40 +0000
ROA not after:            Tue 13 Oct 2026 07:46:40 +0000
asID:                     154383
IP address blocks:        154.199.0.0/24 maxlen: 24
                          154.200.0.0/24 maxlen: 24
                          154.201.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 12:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124444 (0x1e61c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  7 07:46:40 2026 GMT
            Not After : Oct 13 07:46:40 2026 GMT
        Subject: CN=6a9e6be3-44f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b3:6e:d8:0d:d7:d0:40:09:03:d2:6f:72:b3:
                    2d:ac:39:19:44:13:cd:22:e9:9c:f0:7f:d2:83:e0:
                    2c:48:ae:b9:6d:af:4c:6c:67:2f:e9:b5:b1:ac:ab:
                    47:e5:7a:4f:b5:8b:02:30:08:b0:b4:a3:8f:25:45:
                    3b:d9:d0:fc:77:18:6c:73:c0:e0:b4:18:f2:70:c3:
                    e4:22:2d:75:4a:b1:83:82:56:18:f0:30:97:d4:8d:
                    ae:d4:c3:1e:35:55:50:eb:ab:47:51:f9:f9:c3:1b:
                    2f:8a:10:44:de:32:11:85:0d:2a:33:33:e0:4c:75:
                    f0:d9:3f:d6:4d:0e:e8:7c:08:1f:cc:e0:46:6f:29:
                    00:61:3d:31:20:08:79:75:00:26:f0:33:2a:56:60:
                    3d:5b:15:f8:98:db:8b:1d:e8:90:12:49:e8:bb:30:
                    f1:02:2c:32:2d:0d:8f:e7:3e:1c:cd:50:15:d0:ec:
                    9d:80:99:f2:93:8f:35:a4:e4:be:6c:d5:e8:f5:5e:
                    78:42:46:a3:68:55:f9:8e:c7:b8:ab:6c:ce:02:99:
                    dd:ea:ba:89:2e:83:a9:a2:66:5f:ff:48:e3:67:16:
                    32:7f:c1:b2:9f:61:b3:7a:a3:57:a5:2c:6d:7c:b4:
                    df:a2:a5:ce:ef:0e:c1:75:68:67:5b:4f:22:d0:3d:
                    4e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E5:D3:F9:EB:ED:87:B5:D1:74:CC:C0:E9:53:2C:0F:BB:04:B9:70
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44E47146AA9011F19A4235BECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.199.0.0/24
                  154.200.0.0/24
                  154.201.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:f9:6a:84:4f:92:1a:c5:3a:e9:34:10:96:27:f6:91:24:95:
         24:60:0c:51:6d:85:e7:cb:9b:6e:68:e6:f4:56:50:fc:0c:69:
         32:b7:0a:d1:c8:ce:bc:1c:03:12:7f:8f:53:7d:f6:19:d5:7e:
         f2:bd:72:81:e6:c8:0d:06:3e:5b:6e:70:53:54:67:38:30:ee:
         9e:b3:06:27:1e:04:49:c7:27:3c:ee:2c:1b:8a:b7:73:06:37:
         da:46:c7:0c:c1:14:18:12:2f:c6:ab:e3:0a:88:c6:e1:93:25:
         9c:62:46:d0:50:fa:0f:3d:9c:79:f3:9e:d4:7f:2e:79:44:44:
         c1:62:82:3b:cd:5d:7d:08:8f:13:8d:23:49:50:1b:8f:ae:21:
         6d:c1:e6:90:5c:b6:d8:a8:ea:f3:c1:fa:70:f5:49:08:ef:12:
         a6:88:c8:50:d1:48:27:b7:e9:ea:88:d5:25:0c:5c:e2:d6:70:
         3f:b4:b0:35:80:ea:9b:45:e1:29:eb:53:ff:43:82:c0:cc:1b:
         5b:c9:ad:de:f3:dc:58:08:17:9f:99:3c:31:c3:2b:af:b4:40:
         87:e2:8d:fb:fd:da:1c:91:17:13:3b:c3:d3:71:96:34:31:e9:
         0d:91:94:6b:f2:56:2f:e1:5e:80:1c:c5:17:ae:17:bc:68:ce:
         f3:2f:08:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----