Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E7D4A9CB01311F1BEA6C81CCF1D38B0.roa
File:                     4E7D4A9CB01311F1BEA6C81CCF1D38B0.roa (raw, json)
Hash identifier:          3nWv/7x0fKE6WKsd1lRcVQPDYLOrV6pX1vXuqW6T0PQ=
Subject key identifier:   58:42:C1:75:10:D4:CD:AB:50:94:78:4D:07:C1:8E:AA:09:CD:34:7E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E818
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E7D4A9CB01311F1BEA6C81CCF1D38B0.roa
Signing time:             Mon 14 Sep 2026 08:07:20 +0000
ROA not before:           Mon 14 Sep 2026 08:07:15 +0000
ROA not after:            Fri 30 Oct 2026 08:07:15 +0000
asID:                     8796
IP address blocks:        154.201.72.0/21 maxlen: 24
                          154.201.88.0/22 maxlen: 24
                          154.201.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124952 (0x1e818)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 14 08:07:15 2026 GMT
            Not After : Oct 30 08:07:15 2026 GMT
        Subject: CN=6aa7ab37-6b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bb:d8:ec:44:99:8b:03:3a:3d:e1:25:f9:db:
                    45:86:00:9b:d3:33:4d:9e:15:c9:7a:3c:ef:30:ed:
                    a1:d3:2d:63:cf:30:65:2a:a0:65:ff:19:5f:f3:8b:
                    fe:58:f8:07:8b:21:c0:3b:b3:bf:c5:59:cb:f6:64:
                    56:7a:53:d7:4f:1d:9a:1a:28:a0:7e:fe:c7:e3:39:
                    d5:19:46:3b:bf:ed:10:47:ed:82:0b:eb:7d:16:8c:
                    69:09:84:2e:f3:ac:5e:02:6c:f8:e9:20:07:40:f9:
                    95:0e:e7:64:14:ab:21:34:d1:81:f9:d4:cd:14:96:
                    57:41:13:fb:b6:cd:f0:a8:2a:f7:30:1e:7f:ee:15:
                    e2:00:af:06:80:df:ef:00:22:90:ad:4e:89:a4:81:
                    14:61:d4:0f:2d:3d:df:9c:5b:e3:6e:9c:92:81:e9:
                    98:a2:66:d8:04:b5:a1:0f:23:16:d5:f5:a9:ec:e3:
                    41:8d:a1:63:4e:a0:50:5d:2e:81:85:d4:e8:e0:80:
                    1d:ba:3c:3c:e8:6f:d2:2e:0e:00:f4:07:ce:18:c6:
                    84:b0:8e:8e:70:86:7a:d4:2d:e4:c0:50:ff:5f:04:
                    3d:2f:d4:d6:8c:70:ff:e6:6e:54:20:8d:12:5d:51:
                    80:b1:db:c8:b0:f5:61:99:15:74:46:00:54:fc:d9:
                    f3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:42:C1:75:10:D4:CD:AB:50:94:78:4D:07:C1:8E:AA:09:CD:34:7E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E7D4A9CB01311F1BEA6C81CCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.72.0/21
                  154.201.88.0-154.201.93.255

    Signature Algorithm: sha256WithRSAEncryption
         40:37:92:a8:f0:4a:5e:98:d6:10:51:86:84:88:05:c4:50:ea:
         ca:f4:6b:10:80:16:67:29:68:f1:ff:ab:0a:f8:26:d7:65:e2:
         72:66:e9:24:04:47:a5:a7:a9:0d:bc:7c:b4:76:d9:a5:52:f5:
         6a:a8:ca:df:c9:5d:d1:2a:04:71:bb:cc:4e:9e:53:91:56:62:
         75:92:37:6b:3c:fd:c5:63:c9:a3:2b:98:44:d9:d8:f0:eb:89:
         b4:ce:53:8a:bd:7a:e8:96:fa:f0:c8:41:97:6d:e0:e4:1b:64:
         55:29:4e:96:95:05:57:3a:c9:e6:38:02:be:f5:10:b3:b2:6c:
         8a:5f:d1:29:3a:5e:e6:36:e2:f3:bc:74:23:19:61:a5:cf:8e:
         54:be:1e:2f:2c:61:92:d2:43:d0:cc:4e:bb:8d:28:a4:b4:42:
         00:5a:26:5a:e7:25:4c:3e:48:9c:8b:2a:70:89:43:a2:15:ba:
         ac:9a:69:9c:ed:7f:83:b5:d8:c9:21:ef:72:2a:cb:19:b8:1e:
         46:3c:3e:6a:b3:d6:56:c1:2d:dd:04:fd:03:88:39:e2:6b:2b:
         57:83:29:70:26:3b:7e:7e:89:b3:7b:32:f7:b0:0f:9a:82:d6:
         71:49:62:b0:5e:15:89:a4:03:5f:79:ae:49:6c:5c:65:f9:6a:
         68:79:25:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----