Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/988C4DFAA6A811F191573515CF1D38B0.roa
File:                     988C4DFAA6A811F191573515CF1D38B0.roa (raw, json)
Hash identifier:          DEiXt3hArFAfHLOIEfo9ZAY8F7IPGSSGeCJMqcmjqEk=
Subject key identifier:   03:CD:CA:92:B6:F5:C6:58:F0:C9:C5:7D:56:0C:F6:BB:B6:A8:1E:21
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E493
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/988C4DFAA6A811F191573515CF1D38B0.roa
Signing time:             Wed 02 Sep 2026 08:30:47 +0000
ROA not before:           Wed 02 Sep 2026 08:30:43 +0000
ROA not after:            Sat 01 Sep 2029 08:30:43 +0000
asID:                     17561
IP address blocks:        154.91.124.0/24 maxlen: 24
                          154.91.125.0/24 maxlen: 24
                          154.91.126.0/24 maxlen: 24
                          154.91.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124051 (0x1e493)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  2 08:30:43 2026 GMT
            Not After : Sep  1 08:30:43 2029 GMT
        Subject: CN=6a97deb7-2a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:52:a6:47:38:66:e1:21:67:19:ed:e4:9c:be:
                    25:29:93:f9:63:00:e2:28:17:78:b2:a3:f3:6e:22:
                    91:f2:89:9e:98:8b:31:78:e4:d4:05:95:98:e2:8d:
                    c5:04:97:8a:a1:3a:b1:8d:2e:16:b3:e1:16:b1:04:
                    9c:83:38:9b:3e:61:fd:8d:c0:9d:4a:d1:5e:5f:77:
                    77:de:23:7e:0b:77:35:fa:b1:4e:05:6c:f0:0c:2a:
                    5b:4d:db:17:5c:71:1d:c2:7e:f7:db:93:d3:f6:58:
                    68:37:9a:51:5d:3b:4c:1c:ea:32:95:24:67:ae:eb:
                    8d:ae:b8:5b:4b:50:6d:31:53:6c:dd:80:16:d4:c7:
                    00:ac:a7:c5:d6:38:6d:e4:7c:72:33:96:04:5c:f0:
                    b6:8c:a5:2a:54:6b:3f:e9:22:37:3c:df:25:fe:d0:
                    df:5d:6b:58:41:ef:9e:53:ac:79:af:80:7d:c6:36:
                    9b:e2:0f:37:d9:2b:d0:1d:6d:fc:b7:90:db:32:28:
                    40:cf:b9:68:a0:ef:51:ba:5d:6a:08:da:c8:ec:4c:
                    40:bc:2b:ea:c9:a2:d1:50:63:6d:dd:06:7d:f0:a0:
                    5e:f0:ce:fb:ef:6a:87:dd:aa:9c:e0:e4:17:fb:7f:
                    d5:04:3e:ab:9b:fc:94:3b:30:42:95:d7:ff:f6:eb:
                    6a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:CD:CA:92:B6:F5:C6:58:F0:C9:C5:7D:56:0C:F6:BB:B6:A8:1E:21
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/988C4DFAA6A811F191573515CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.91.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:53:a0:3e:d6:cb:8e:58:16:d5:6d:4d:14:31:b7:e1:f2:b9:
         40:d3:08:6f:18:32:58:2f:56:96:5a:7e:cb:b7:83:e4:d5:e6:
         63:c8:26:d4:eb:21:a6:97:53:f7:ae:72:ff:42:9b:45:0c:7c:
         ac:d3:0d:38:6f:e9:73:99:43:5c:3a:44:30:84:62:28:f4:6d:
         2d:cc:e3:78:18:5d:0c:e3:22:d5:c8:ea:7b:63:89:5e:df:90:
         67:01:6e:43:ba:78:b7:38:3d:e1:a9:0f:84:d9:95:65:09:ca:
         f9:9d:42:2b:ba:b7:11:ff:de:6d:d4:65:bd:c1:14:0f:bb:01:
         37:de:21:47:be:f6:c4:cd:8b:98:ca:97:f2:16:1c:6c:f9:53:
         56:38:b9:5a:3e:ba:2a:aa:38:54:00:15:2e:cb:22:a4:9d:ae:
         23:39:3f:42:eb:02:bd:db:01:19:6d:db:ea:2d:40:7e:de:bd:
         0e:41:70:9c:cc:a0:72:cc:e1:1e:b4:5a:96:47:80:60:af:70:
         a5:a7:53:5a:68:aa:83:ef:5e:4d:9d:d7:52:dc:53:db:f5:ba:
         40:32:a3:b4:9d:c2:bb:4e:69:7a:d1:a4:af:dd:5b:80:59:df:
         d5:fc:a3:21:c2:05:3b:c6:7d:2d:e1:8c:f0:30:56:8c:cf:b8:
         5e:c7:08:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----