Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB55A642A69811F1888FC0BACE1D38B0.roa
File:                     CB55A642A69811F1888FC0BACE1D38B0.roa (raw, json)
Hash identifier:          RvVDXI2AocOWKwVerJb6LJo83qW1tPbmBwZwLEPme4k=
Subject key identifier:   38:CE:6B:E8:43:24:8C:DC:FF:FF:9C:F3:FD:49:AB:52:A2:5B:D4:5C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E473
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB55A642A69811F1888FC0BACE1D38B0.roa
Signing time:             Wed 02 Sep 2026 06:37:40 +0000
ROA not before:           Wed 02 Sep 2026 06:37:36 +0000
ROA not after:            Mon 28 Sep 2026 06:37:36 +0000
asID:                     17561
IP address blocks:        154.82.154.0/23 maxlen: 24
                          154.82.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124019 (0x1e473)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  2 06:37:36 2026 GMT
            Not After : Sep 28 06:37:36 2026 GMT
        Subject: CN=6a97c434-2730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c2:fe:b6:ac:96:4b:53:c5:47:13:7b:2f:29:
                    2a:ca:ab:ed:3e:1f:62:96:a2:f5:44:f6:b6:59:d7:
                    50:f2:87:95:37:11:da:3b:ad:30:7b:33:81:1f:58:
                    d4:a0:9f:26:1a:8f:02:d4:42:b6:0e:04:b3:65:8a:
                    9d:84:3f:26:6c:15:54:ee:e9:60:03:e7:4e:ee:d5:
                    e5:c5:e4:0d:34:7f:3f:29:e9:81:4c:01:c2:a9:51:
                    8f:c4:36:14:95:5e:91:44:67:31:3e:15:c5:f3:15:
                    1d:9b:af:98:44:25:38:10:69:68:f9:5c:8f:57:7a:
                    d7:d3:27:5c:cf:7d:73:75:04:2a:3f:b5:99:ba:8a:
                    b5:0f:54:73:8a:38:a5:e0:e8:d6:e1:65:6c:53:54:
                    9b:d7:ee:18:0c:b4:83:0d:64:e3:49:db:f7:3b:c8:
                    7a:73:21:87:eb:58:2e:2d:ce:f4:17:27:c1:02:24:
                    a3:e0:3c:2b:c1:c2:e4:89:d5:25:13:cf:9d:50:2f:
                    bb:50:56:91:87:7d:14:67:23:4b:12:97:4f:30:84:
                    48:b1:4b:9a:5a:fd:8f:4c:f4:0c:ba:30:69:68:c3:
                    3c:65:8c:00:59:64:3d:29:cb:e7:29:d2:1e:c1:bb:
                    4b:44:5b:9d:0b:e0:f9:2d:66:2d:2d:53:90:f5:73:
                    3e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CE:6B:E8:43:24:8C:DC:FF:FF:9C:F3:FD:49:AB:52:A2:5B:D4:5C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB55A642A69811F1888FC0BACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.154.0-154.82.157.255

    Signature Algorithm: sha256WithRSAEncryption
         7f:b2:b4:51:b7:0a:5b:c0:8d:38:01:ae:cd:65:d9:34:97:d9:
         e6:0f:5c:9c:40:47:2b:6f:92:a7:23:82:02:9b:f4:43:c6:ed:
         ab:7a:65:db:87:1e:58:1e:9e:96:d8:03:38:d9:0a:f3:34:be:
         6a:c6:ca:91:c1:21:79:84:44:96:be:d6:32:cd:16:5a:c8:06:
         b0:79:a8:8f:52:c6:79:d7:a0:77:88:85:a0:f5:34:9a:4b:4b:
         e6:9e:8b:af:43:9e:e4:69:72:00:9e:5b:76:ed:e0:01:69:26:
         74:d7:5d:c2:81:c1:d2:8b:73:93:37:a1:13:e6:7e:3b:00:c7:
         f9:cd:a6:12:10:a3:a6:12:1f:58:2a:47:52:30:d3:11:f3:56:
         9c:92:31:f0:e2:5b:7f:f2:f0:46:d0:0a:3f:ce:b0:3c:58:8b:
         e9:77:d0:cd:b7:bd:96:99:de:cb:05:b9:33:3b:21:fb:a2:00:
         7b:93:35:de:c6:44:3e:b3:7e:2a:df:ab:42:04:b6:fa:04:b2:
         67:77:f8:a4:29:2b:68:bd:c7:69:1a:fa:f4:4d:c3:15:c3:4a:
         47:7c:00:c1:f3:28:d9:b8:41:22:70:a5:59:0e:a7:10:f5:4c:
         14:da:b6:2b:aa:b4:9a:e7:f8:75:a3:c5:06:0e:a4:04:fd:02:
         dd:3e:75:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----