Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E2BFA6AB67B11F1A2346A07CF1D38B0.roa
File:                     5E2BFA6AB67B11F1A2346A07CF1D38B0.roa (raw, json)
Hash identifier:          uvMM61nbgpkqXhWyPwfL1r176dgwOoKjPtZCZCEAizs=
Subject key identifier:   D7:CE:19:C0:A8:1F:6D:4D:86:77:E0:FF:56:3B:25:2F:BF:ED:3A:AD
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EA28
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E2BFA6AB67B11F1A2346A07CF1D38B0.roa
Signing time:             Tue 22 Sep 2026 11:47:20 +0000
ROA not before:           Tue 22 Sep 2026 11:47:17 +0000
ROA not after:            Sat 07 Nov 2026 11:47:17 +0000
asID:                     63099
IP address blocks:        154.196.160.0/24 maxlen: 24
                          154.199.4.0/24 maxlen: 24
                          154.200.54.0/24 maxlen: 24
                          154.200.80.0/24 maxlen: 24
                          154.200.129.0/24 maxlen: 24
                          154.200.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125480 (0x1ea28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 22 11:47:17 2026 GMT
            Not After : Nov  7 11:47:17 2026 GMT
        Subject: CN=6ab26ac8-9753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3f:57:7b:53:a5:12:4e:be:54:cc:12:61:27:
                    a0:64:44:a9:cb:43:8e:1c:87:99:c2:e9:25:e1:26:
                    a5:c8:35:b8:61:e5:fd:1c:e9:ba:01:93:7e:5e:15:
                    30:46:c1:27:6d:2f:4b:8a:ec:35:5d:c6:6f:c7:b1:
                    ac:2d:4a:4e:65:60:d8:77:c7:73:53:cb:bc:c7:3f:
                    98:01:43:73:ea:55:e6:e6:94:33:8d:14:02:23:8f:
                    b8:8d:98:83:47:88:a6:1a:a2:ce:a5:27:8f:85:9a:
                    af:b3:bf:bd:86:28:0e:6e:d9:45:35:4f:69:32:57:
                    b8:61:75:09:b7:8a:33:2b:0d:d9:af:49:f1:18:e1:
                    98:3b:46:eb:ba:b9:a0:5c:c5:08:61:54:77:d6:7b:
                    65:ba:80:0e:4f:d4:47:16:a0:fc:68:69:f7:74:8f:
                    02:22:c3:cf:4c:30:6b:56:a8:54:31:6d:f4:b8:d4:
                    b3:fb:d2:36:fc:5c:48:cc:39:3b:a7:58:7b:dc:53:
                    31:8d:65:78:53:f0:8f:81:6b:29:ba:7f:0b:1b:2a:
                    48:ce:8b:e8:ca:d9:b6:52:d0:0b:5c:d9:49:ef:10:
                    06:26:cb:6f:fc:82:ae:f7:01:7b:60:d0:3e:66:a6:
                    1a:d1:73:3b:4c:0d:bc:a9:3a:47:de:ae:3b:41:ac:
                    f5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CE:19:C0:A8:1F:6D:4D:86:77:E0:FF:56:3B:25:2F:BF:ED:3A:AD
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E2BFA6AB67B11F1A2346A07CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.160.0/24
                  154.199.4.0/24
                  154.200.54.0/24
                  154.200.80.0/24
                  154.200.129.0-154.200.130.255

    Signature Algorithm: sha256WithRSAEncryption
         55:5c:c0:d8:1f:a6:fd:89:1b:08:68:7b:d4:b6:00:b6:13:bd:
         9e:18:ce:50:fa:5a:dd:84:39:a5:1e:c8:7a:66:fd:9b:06:cf:
         3a:98:2c:d5:65:1e:4b:8e:d4:99:6f:4e:3a:a7:3a:2c:fe:73:
         b4:f3:d0:13:dd:07:ec:73:6e:e5:b8:e1:09:b2:aa:1e:2c:2c:
         fd:4e:fc:5f:bd:1d:19:ab:92:63:82:16:2a:0a:7b:eb:95:40:
         c8:ed:d9:95:ef:cf:f7:9a:1b:c3:10:b8:ac:45:f2:14:a6:59:
         62:0f:f2:ef:58:a7:a6:39:07:cf:77:53:88:a3:8b:c8:73:63:
         6b:46:ff:09:93:56:03:10:53:64:85:3b:85:e9:23:42:78:ea:
         6b:5b:b9:4c:5c:06:98:07:4a:66:f3:0f:21:3b:38:cb:73:b0:
         39:79:af:4c:e4:8c:48:30:b6:ac:d3:59:27:05:d1:db:80:08:
         83:7f:89:9f:d1:b6:0c:1a:d4:79:7d:3f:4a:3c:49:50:b1:a7:
         0d:dd:52:d3:a0:89:82:05:a5:b2:d6:ad:2b:33:a5:12:bf:7e:
         6a:a7:c6:a8:56:24:5b:88:f1:5f:77:65:e4:1b:e8:de:e7:18:
         f7:03:e3:f2:71:d6:0a:bb:f7:e1:05:35:63:a3:99:44:04:66:
         a0:0d:bf:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----