Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B56DAA8B63B11F1830247E6CE1D38B0.roa
File:                     9B56DAA8B63B11F1830247E6CE1D38B0.roa (raw, json)
Hash identifier:          +XPN5GoL/hzg0uYQ6zlvalCyKdcrEiPQ0DSyheHf/kQ=
Subject key identifier:   19:66:61:49:85:6D:A2:93:FD:64:9C:02:0F:2A:32:9D:CB:22:F5:13
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E9D7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B56DAA8B63B11F1830247E6CE1D38B0.roa
Signing time:             Tue 22 Sep 2026 04:10:55 +0000
ROA not before:           Tue 22 Sep 2026 04:10:51 +0000
ROA not after:            Tue 20 Oct 2026 04:10:51 +0000
asID:                     150000
IP address blocks:        154.82.159.0/24 maxlen: 24
                          154.82.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125399 (0x1e9d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 22 04:10:51 2026 GMT
            Not After : Oct 20 04:10:51 2026 GMT
        Subject: CN=6ab1ffcf-e2c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5a:25:f3:3c:61:af:0c:5e:0d:52:a5:64:8c:
                    57:3b:b7:35:96:f2:1a:9b:38:54:53:ee:6a:05:ed:
                    14:36:1d:6f:15:74:43:35:84:3d:7d:fe:7d:b1:f0:
                    48:12:6e:0e:e7:d2:82:5f:29:2f:5a:7f:17:ba:86:
                    29:da:1f:80:b8:98:74:4a:3f:d2:dc:9f:d6:17:28:
                    ed:ae:1c:6b:70:bb:4a:24:ca:3e:e5:c5:3a:62:1f:
                    9f:e0:82:ad:7f:7e:16:58:12:52:2f:84:e4:6f:d5:
                    91:cd:f2:73:73:db:d7:3c:63:b9:7c:95:d8:aa:38:
                    bb:08:1d:67:2f:07:ae:de:6a:8e:59:ea:23:62:1e:
                    a6:1f:80:37:17:20:04:da:89:02:b4:da:4d:e1:17:
                    f5:c9:1a:de:18:bd:db:9d:c3:6b:0c:c4:8e:3a:fd:
                    3f:de:84:01:e3:3d:d2:06:3c:e3:b0:42:66:df:c6:
                    0b:b7:33:80:66:c4:1a:33:9c:53:20:34:56:e3:aa:
                    f0:f3:1d:c2:bb:36:2d:63:4e:7b:ba:2f:1d:bb:45:
                    4f:ad:07:6c:70:21:fd:2a:fc:f7:51:e7:75:76:bc:
                    cc:a9:40:a8:97:55:e8:34:f1:61:f4:aa:b3:85:df:
                    72:de:ec:10:21:e9:1d:2e:f8:28:e4:75:1c:06:54:
                    bb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:66:61:49:85:6D:A2:93:FD:64:9C:02:0F:2A:32:9D:CB:22:F5:13
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B56DAA8B63B11F1830247E6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.159.0-154.82.160.255

    Signature Algorithm: sha256WithRSAEncryption
         54:13:f2:d1:92:cf:49:a6:b9:b2:0c:48:05:79:9a:09:c0:c8:
         62:76:cb:9c:da:bf:5a:5e:79:8b:5c:ad:f2:1d:df:21:b1:c3:
         f6:f3:42:d7:3d:73:c3:6d:ca:06:18:1d:3c:82:d3:b5:a7:5d:
         b1:b8:9e:de:7c:a8:68:b8:0d:3c:f9:28:49:f4:b3:ee:a8:47:
         d9:45:ae:e0:33:b6:dc:bd:04:42:80:2e:07:44:af:e5:93:ac:
         61:ab:d8:5b:37:93:71:bb:63:31:d0:7c:a1:c6:cb:4d:1c:a6:
         12:d6:51:c3:4d:c5:58:f5:25:7a:30:79:92:bd:07:65:b8:42:
         d7:50:46:b3:92:9e:67:63:22:1b:93:39:04:56:19:3e:3a:50:
         e8:5f:f1:7a:dc:3a:ef:c5:eb:b0:5b:1f:c9:bf:d7:a8:76:cc:
         a8:2e:04:0c:81:29:cb:d0:92:fa:c6:c2:3e:90:0b:86:22:04:
         ac:5f:c4:0a:f0:cd:83:e1:51:b3:4e:9f:d6:94:03:f3:bc:a3:
         31:02:a3:f0:d8:a4:af:ea:4c:1b:28:a8:b2:9a:35:82:00:66:
         b4:cd:ba:33:3e:27:b3:c3:a8:0a:26:33:80:48:23:02:a6:bb:
         43:87:8a:39:71:41:f5:93:e7:95:72:9f:dd:3b:75:b0:e3:f5:
         6c:75:30:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----