Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6DE1F36AB6711F185822BD2CE1D38B0.roa
File:                     B6DE1F36AB6711F185822BD2CE1D38B0.roa (raw, json)
Hash identifier:          XkDWihgzoWpnEGSGO7Aj29fXBi4b20/kgh+Hm1mDsXM=
Subject key identifier:   CE:27:1F:B0:3D:8C:4D:D6:3F:63:16:B8:A7:E4:5E:01:65:0A:60:01
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E65E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6DE1F36AB6711F185822BD2CE1D38B0.roa
Signing time:             Tue 08 Sep 2026 09:28:57 +0000
ROA not before:           Tue 08 Sep 2026 09:28:53 +0000
ROA not after:            Wed 04 Nov 2026 09:28:53 +0000
asID:                     395793
IP address blocks:        154.200.57.0/24 maxlen: 24
                          154.200.58.0/24 maxlen: 24
                          154.200.59.0/24 maxlen: 24
                          154.200.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124510 (0x1e65e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  8 09:28:53 2026 GMT
            Not After : Nov  4 09:28:53 2026 GMT
        Subject: CN=6a9fd558-97b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:55:fe:e2:0f:fd:44:ac:81:19:03:d9:1f:1c:
                    39:c9:c5:5d:18:b7:68:ee:ef:e4:41:0e:65:b9:86:
                    3b:55:4a:ff:b1:a4:55:bb:e1:e2:1b:db:40:4b:e9:
                    23:6e:45:23:5e:b2:2d:84:a8:58:6b:b7:fb:5d:3f:
                    73:f5:c8:a1:be:27:29:d8:e2:b0:5c:bc:5f:5d:60:
                    50:8b:43:1b:14:a4:ea:05:15:24:cf:9c:9b:13:a0:
                    6d:69:b0:a3:b8:e6:82:19:25:ce:28:4b:b4:05:df:
                    bb:9d:74:0b:5c:08:26:17:07:8c:22:12:90:69:c1:
                    b4:7d:de:15:bd:be:3f:c1:1c:06:5b:89:95:13:5e:
                    a4:30:84:05:1a:84:c2:d3:68:2e:6e:23:bb:ae:6b:
                    69:5f:25:0b:19:e7:92:1d:91:da:8f:c4:0b:fa:eb:
                    f7:10:04:12:fc:0b:b7:e0:4f:f5:cf:a3:1d:fe:0b:
                    92:74:5d:8b:4b:99:66:c2:2f:a9:cc:5f:0d:ef:02:
                    0c:e1:03:fb:c8:f7:c3:b8:ad:dc:25:67:07:ee:38:
                    38:9d:15:9b:6c:7b:8a:51:df:49:dc:51:f4:03:97:
                    07:00:7c:bb:36:ad:0e:c7:4c:ed:38:1a:36:92:d1:
                    5c:30:d9:11:f0:27:a6:05:09:8e:16:87:a2:b8:8d:
                    81:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:27:1F:B0:3D:8C:4D:D6:3F:63:16:B8:A7:E4:5E:01:65:0A:60:01
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6DE1F36AB6711F185822BD2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.57.0-154.200.59.255
                  154.200.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:ad:90:a0:ac:aa:2c:e0:fa:19:6d:34:de:73:1c:82:5c:ee:
         2c:a8:ab:4c:a7:b3:92:1c:3f:ea:87:8c:f4:1a:1f:7b:7f:7f:
         f2:d4:a0:b4:3f:12:4b:39:0f:91:e7:22:43:88:8a:cb:06:dc:
         50:ab:77:59:0e:af:bf:b2:56:4e:d2:c6:b1:cd:7b:c4:73:f6:
         52:2c:73:71:7d:ed:48:58:8e:e6:f6:cf:88:2e:42:52:50:13:
         57:64:19:af:df:5e:e9:3d:ac:23:b5:eb:8a:ba:26:6f:a4:88:
         99:ec:22:8a:c7:b4:04:c6:33:6f:19:18:ab:d3:5e:d0:5c:3b:
         c0:6d:94:2a:d5:c6:4e:17:39:b5:71:e7:54:c9:e4:5f:c6:bf:
         94:70:6e:d7:cf:44:ba:95:63:4a:de:ef:1a:76:ee:ec:d7:c3:
         b8:03:ae:49:f1:1d:1b:78:78:e7:cb:cd:bd:79:01:2c:40:9e:
         bd:a2:48:07:8a:ec:98:68:70:94:54:ab:a8:eb:42:4c:4f:b8:
         be:1b:bf:b9:e7:d3:8d:a5:40:bd:89:19:49:5d:ce:f1:9a:86:
         a0:cc:07:18:4e:80:1d:0b:6a:2d:f8:a8:64:e7:b5:3c:ca:dd:
         6d:f5:25:f5:4c:4f:0c:8b:7d:f4:86:c8:fd:0d:2b:20:9d:8e:
         43:f7:63:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----