Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83217B32B5A011F196EA74F4CE1D38B0.roa
File:                     83217B32B5A011F196EA74F4CE1D38B0.roa (raw, json)
Hash identifier:          cG7vXdN3J2rGasWTbwQa/sXADC3rhYiGJCqwdQ3CqrM=
Subject key identifier:   D3:86:5D:6B:3B:8F:EC:92:3A:2E:F0:EA:F3:76:C1:64:05:25:BC:56
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E98A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83217B32B5A011F196EA74F4CE1D38B0.roa
Signing time:             Mon 21 Sep 2026 09:40:43 +0000
ROA not before:           Mon 21 Sep 2026 09:40:39 +0000
ROA not after:            Thu 20 Sep 2029 09:40:39 +0000
asID:                     17561
IP address blocks:        154.92.148.0/24 maxlen: 24
                          154.92.149.0/24 maxlen: 24
                          154.92.150.0/24 maxlen: 24
                          154.92.151.0/24 maxlen: 24
                          154.92.152.0/24 maxlen: 24
                          154.92.153.0/24 maxlen: 24
                          154.92.154.0/24 maxlen: 24
                          154.92.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125322 (0x1e98a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 21 09:40:39 2026 GMT
            Not After : Sep 20 09:40:39 2029 GMT
        Subject: CN=6ab0fb9b-ce70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d8:8f:46:56:69:4a:89:e3:18:16:e8:50:91:
                    11:4a:a2:50:b4:40:c6:d7:1c:46:8b:b5:8b:9a:92:
                    6b:51:89:42:92:43:3f:52:e3:e8:8d:60:66:e3:1a:
                    eb:56:4d:78:7d:af:5c:cd:98:0a:ee:c4:16:9a:f2:
                    41:66:8d:3c:db:e0:37:75:1b:ed:ef:c4:64:68:5c:
                    b1:b7:81:01:4b:ba:ff:ee:1d:0a:08:3a:1a:e9:cc:
                    8f:a1:82:7a:3a:7a:7b:69:8f:e6:8f:e8:6e:7f:82:
                    5f:fe:a0:fe:40:d7:73:93:b0:0e:88:37:8f:33:3e:
                    3e:ea:38:01:d3:51:cb:f3:79:58:5b:28:f0:79:1f:
                    35:2c:8c:55:5e:ed:48:f6:8c:cd:ac:b2:37:e8:5a:
                    37:4e:77:a4:af:94:f7:58:99:ee:0d:d7:9d:13:4a:
                    39:0d:da:b0:dc:23:7a:66:70:28:3c:ca:c2:f5:a7:
                    2d:dd:1d:38:02:11:7b:48:f4:c2:98:99:c2:73:c4:
                    53:27:2e:f9:48:f1:e0:f5:97:f0:62:60:1c:f6:aa:
                    7f:4b:42:f9:40:91:99:78:d8:51:e3:67:9b:e1:95:
                    62:d2:f2:a1:37:26:13:52:69:77:64:ba:21:4b:04:
                    c0:bf:8a:73:11:0a:18:e8:ff:4a:35:70:24:68:42:
                    3f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:86:5D:6B:3B:8F:EC:92:3A:2E:F0:EA:F3:76:C1:64:05:25:BC:56
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83217B32B5A011F196EA74F4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.148.0-154.92.155.255

    Signature Algorithm: sha256WithRSAEncryption
         9e:5d:5f:71:d4:60:df:d2:4e:eb:33:6a:4f:00:f6:ed:f1:20:
         7e:f9:87:bc:9b:1c:18:2c:7a:66:92:a7:9d:97:e2:3d:a0:78:
         72:b8:44:d8:a1:eb:f0:f5:69:11:c8:f2:77:e9:94:f5:60:8b:
         f7:b9:6b:6e:2b:7f:0e:8a:35:1e:4e:dc:d6:cf:46:e5:fa:83:
         d2:72:f7:08:31:02:9a:8d:2e:bc:c5:ed:b2:21:7a:64:f7:96:
         b6:a7:e1:06:8d:cc:4f:0a:a7:6f:2b:38:6f:9b:f7:5c:1f:02:
         a5:5d:1a:19:15:02:d0:ec:a5:a0:b4:13:ee:aa:48:e1:a7:10:
         c1:7f:58:5b:0c:96:f5:13:98:49:03:ff:6f:af:35:a7:0f:49:
         92:8f:e2:b6:12:19:6d:4c:9e:55:08:61:f5:73:05:82:78:f4:
         12:27:63:12:a5:81:ec:a9:68:de:d0:c3:73:78:b5:05:c5:7c:
         55:48:32:9f:66:8a:7e:a5:0e:27:fb:38:d7:1c:27:dd:f8:40:
         68:f0:3a:93:c7:04:0f:df:d4:09:32:22:07:87:a6:75:54:be:
         b8:fd:34:86:da:04:02:a9:0a:3c:2b:f9:fc:b2:dd:c4:b6:a9:
         ad:ba:eb:1b:8d:e5:4b:1a:68:0e:a0:b3:bf:f1:11:62:73:ca:
         b4:b0:b6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----