Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59BE3796B7E711F1A5A328D4CE1D38B0.roa
File:                     59BE3796B7E711F1A5A328D4CE1D38B0.roa (raw, json)
Hash identifier:          r/TMiZPjBOj0iutRiJkTc7/O4rzSkK8jG2PycLN5Ds4=
Subject key identifier:   F9:6B:92:4B:A8:C4:83:88:72:B0:9A:FF:A0:47:52:EF:92:A9:5E:04
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EA7F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59BE3796B7E711F1A5A328D4CE1D38B0.roa
Signing time:             Thu 24 Sep 2026 07:12:50 +0000
ROA not before:           Thu 24 Sep 2026 07:12:46 +0000
ROA not after:            Fri 01 Oct 2027 07:12:46 +0000
asID:                     142629
IP address blocks:        154.82.151.0/24 maxlen: 24
                          154.82.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 12:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125567 (0x1ea7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 24 07:12:46 2026 GMT
            Not After : Oct  1 07:12:46 2027 GMT
        Subject: CN=6ab4cd72-5c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:95:c6:63:8f:aa:86:4e:9f:04:f7:d9:51:be:
                    99:8b:61:14:2b:8e:89:7d:34:b3:2a:fc:cf:47:82:
                    a2:5f:b5:cd:fa:25:22:97:9e:c1:33:64:50:6d:db:
                    01:31:9b:36:eb:23:89:cb:66:95:65:3f:15:2c:c0:
                    70:80:21:f8:e3:4c:4b:b7:5a:3b:84:a2:ab:74:b8:
                    8a:23:01:e9:2c:18:f8:4e:f5:93:24:89:bf:60:70:
                    0d:e8:1b:23:99:34:4e:34:e5:60:47:ec:3e:63:93:
                    45:a6:fc:ab:91:93:56:21:c0:87:b2:ff:c0:0a:b7:
                    25:2d:7d:b5:45:3a:f2:e3:48:80:02:c0:63:3e:df:
                    75:6b:a8:b1:cc:c8:32:81:79:9a:a8:63:79:cb:d9:
                    e7:11:cc:27:53:38:a2:31:b0:0d:6d:b1:cc:fb:f8:
                    17:40:f6:d4:f4:30:1b:44:9a:7c:41:ed:fe:f9:f1:
                    26:41:1e:10:40:54:7e:41:40:5e:ea:a0:d6:f5:51:
                    0f:c1:d0:49:12:10:8c:22:97:08:33:89:e7:39:03:
                    01:a3:c8:73:62:45:3d:c4:48:c7:d8:4f:f2:ca:d5:
                    43:71:16:bd:8b:23:a7:ea:da:9b:6d:d7:e5:99:a1:
                    78:fc:84:4a:1e:3a:9a:cd:dd:f8:33:48:80:4c:3c:
                    85:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:6B:92:4B:A8:C4:83:88:72:B0:9A:FF:A0:47:52:EF:92:A9:5E:04
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59BE3796B7E711F1A5A328D4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.151.0-154.82.152.255

    Signature Algorithm: sha256WithRSAEncryption
         3f:ab:66:12:d2:60:0b:da:9b:3d:80:f7:3b:43:20:58:13:a7:
         ac:11:6a:f8:93:ed:c8:ee:47:97:57:38:e1:2d:be:43:bd:b5:
         0d:11:4e:e9:23:e9:7e:73:f7:bc:b9:8f:62:82:77:78:59:83:
         1d:b7:4d:19:bc:93:29:a5:e3:c0:68:11:fd:ae:a1:91:ca:72:
         07:36:7d:34:35:a5:c7:8b:c0:a8:c1:b2:9d:2c:b5:b1:68:f6:
         5b:27:ce:2e:fa:57:5c:a8:ff:0b:47:8d:ad:c0:b2:09:3f:66:
         dd:78:8c:be:9e:91:f3:14:61:f6:18:48:a7:2d:29:10:b5:90:
         8d:9d:4e:97:5b:6f:cf:ce:f0:76:8d:a3:60:84:a6:5c:46:04:
         1f:91:ba:1a:aa:f1:60:46:1b:f2:d7:fc:93:0f:10:58:1c:ba:
         d3:c0:ce:62:65:63:cb:01:2b:c7:43:c8:f1:ed:81:1b:db:4f:
         ea:76:05:73:6e:d5:2a:42:aa:ba:72:a6:3f:a0:b1:14:d2:e7:
         dd:4d:90:46:0e:48:ae:0c:75:a5:58:f6:f3:60:c8:d7:da:b3:
         1e:48:30:60:ec:40:39:49:ba:22:46:08:4a:fd:be:ee:4d:6f:
         98:d3:01:c3:eb:e8:ef:a4:64:65:e1:4a:55:11:9c:bd:eb:4b:
         8c:a9:9e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----