Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7241ADBCAC2411F18110A3CBCE1D38B0.roa
File:                     7241ADBCAC2411F18110A3CBCE1D38B0.roa (raw, json)
Hash identifier:          26Kj8+59BDmQsUQ0MW08lRKMr5L7ADfoZDeZR/LCHVY=
Subject key identifier:   E3:7D:EB:B7:03:A9:4B:48:D5:76:EE:E7:58:53:89:36:5B:00:E3:BE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E6A6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7241ADBCAC2411F18110A3CBCE1D38B0.roa
Signing time:             Wed 09 Sep 2026 07:59:56 +0000
ROA not before:           Wed 09 Sep 2026 07:59:52 +0000
ROA not after:            Thu 16 Sep 2027 07:59:52 +0000
asID:                     63199
IP address blocks:        154.196.4.0/22 maxlen: 24
                          154.223.129.0/24 maxlen: 24
                          154.223.130.0/23 maxlen: 24
                          154.223.132.0/24 maxlen: 24
                          154.223.134.0/23 maxlen: 24
                          154.223.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124582 (0x1e6a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  9 07:59:52 2026 GMT
            Not After : Sep 16 07:59:52 2027 GMT
        Subject: CN=6aa111fc-0837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fb:8a:65:29:43:ad:d3:fd:46:ea:f7:74:64:
                    ad:bc:a2:65:c3:a2:59:ac:88:4f:64:c5:bd:7a:86:
                    45:49:30:93:c9:9a:90:77:93:2b:3a:f3:da:fd:cf:
                    83:eb:26:c2:90:b7:c7:ca:54:09:79:e9:ab:0b:43:
                    36:7b:3e:cc:2d:bd:d9:bc:80:dd:0a:f6:77:42:49:
                    1f:6d:42:0f:71:c4:b7:94:dc:04:39:ff:bd:b5:bb:
                    9a:2f:0d:36:a1:b8:16:77:f4:81:f9:c2:26:b6:ca:
                    7a:0d:38:dc:57:95:c2:38:25:91:94:17:d4:bc:04:
                    ed:37:fe:43:19:a9:30:ca:e6:02:be:ba:f4:9e:e9:
                    5f:25:c0:a1:e8:85:15:42:6b:e9:0e:22:97:b5:86:
                    54:4b:c4:bc:00:e2:ae:59:a9:5c:d8:56:28:29:ce:
                    64:da:37:0d:c6:fd:b2:3a:a8:a8:87:93:f0:38:e9:
                    61:ef:4a:9e:9a:5d:71:02:d6:2a:a8:71:e9:b0:bc:
                    be:d4:19:dc:6b:f2:44:60:6e:d3:35:56:5d:fc:27:
                    74:11:d9:eb:10:8f:2f:d2:90:c4:f5:e3:ee:06:79:
                    84:d3:4e:e3:a4:96:66:be:c5:b3:fe:ef:88:34:95:
                    64:4d:25:77:0f:df:4e:61:30:cb:58:0c:87:c8:84:
                    69:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:7D:EB:B7:03:A9:4B:48:D5:76:EE:E7:58:53:89:36:5B:00:E3:BE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7241ADBCAC2411F18110A3CBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.4.0/22
                  154.223.129.0-154.223.132.255
                  154.223.134.0-154.223.136.255

    Signature Algorithm: sha256WithRSAEncryption
         d1:ed:49:96:a4:84:46:23:04:0d:3b:87:d5:da:33:80:f7:97:
         96:fa:c8:5d:26:93:64:0f:fd:0b:6f:2b:81:c7:4c:05:e2:b9:
         1f:93:ee:e5:a9:fb:27:12:91:0d:ce:2b:8e:8a:b2:64:bf:22:
         88:1f:5b:f5:5c:9c:da:2b:b3:45:d1:ef:9d:49:ae:67:69:e8:
         4e:81:66:ff:48:4f:db:b4:96:ac:08:15:2e:81:b0:f7:cd:fb:
         79:39:07:53:52:86:9a:c8:d9:65:84:21:67:09:ee:83:4a:4f:
         54:b5:e2:21:af:33:98:a7:35:2d:a2:f3:77:03:42:2f:13:b8:
         34:56:d8:38:10:36:f9:8e:41:53:5c:e2:49:e4:e3:53:d4:31:
         c9:13:24:ef:10:b3:bc:51:36:bf:1f:ea:85:ce:bd:1b:8b:3d:
         63:22:07:8c:1f:36:7d:74:01:ab:4e:b3:86:e7:e9:56:96:d6:
         56:72:52:db:7b:b1:fe:45:fe:eb:35:23:72:8a:0d:8e:78:56:
         01:88:d0:ed:8b:bd:fb:88:98:df:6b:f4:25:ab:4e:99:25:fc:
         d4:29:ca:ee:7f:0a:af:f3:36:be:87:26:21:5e:84:99:dc:27:
         26:3e:25:15:1d:84:21:2f:27:0d:01:38:58:28:a3:2c:6e:e1:
         9f:5c:5f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----