Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0B240A6B4CE11F1B380261CCF1D38B0.roa
File:                     E0B240A6B4CE11F1B380261CCF1D38B0.roa (raw, json)
Hash identifier:          HhoOBCW4VARPpLg6wqd0UA757e0CtW23n2uiLCk9eB8=
Subject key identifier:   A8:DD:F2:62:FF:8C:B2:F9:C6:FF:D8:49:3A:B4:CC:4F:45:E1:BA:B8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E8F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0B240A6B4CE11F1B380261CCF1D38B0.roa
Signing time:             Sun 20 Sep 2026 08:40:05 +0000
ROA not before:           Sun 20 Sep 2026 08:40:01 +0000
ROA not after:            Sat 24 Oct 2026 08:40:01 +0000
asID:                     8796
IP address blocks:        154.202.117.0/24 maxlen: 24
                          154.202.120.0/21 maxlen: 24
                          154.217.234.0/23 maxlen: 24
                          154.217.236.0/22 maxlen: 24
                          154.217.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 12:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125171 (0x1e8f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 20 08:40:01 2026 GMT
            Not After : Oct 24 08:40:01 2026 GMT
        Subject: CN=6aaf9be5-2474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f6:df:48:b7:24:58:fb:f4:f8:99:c6:37:8a:
                    55:60:91:42:af:17:d7:40:e7:b9:d1:21:b1:e3:7e:
                    2a:f1:9a:ea:ec:ce:f5:b1:dc:44:61:cc:93:8f:85:
                    e5:ec:1c:0f:b0:d3:1d:3d:bc:a7:b3:02:e6:05:12:
                    72:89:07:2a:e1:de:24:17:cb:aa:65:1e:37:1a:a3:
                    cf:1d:ac:68:5d:62:22:69:11:fa:e8:a1:92:08:44:
                    c9:71:a8:f9:05:9b:95:24:73:f1:93:29:09:71:16:
                    13:06:e7:b8:14:c2:4f:da:b2:41:94:60:fc:c2:fd:
                    2e:c9:f5:48:c9:3e:d9:e8:fd:2d:67:ad:be:2a:f8:
                    22:c3:da:24:07:62:23:ba:57:5e:4b:a5:d2:8f:41:
                    4d:f4:0e:76:8f:5d:06:f8:c6:b8:c1:51:e3:58:b2:
                    a5:ce:45:ff:77:13:da:5c:55:20:51:0a:01:7d:e3:
                    fb:8c:86:97:ae:e3:9e:99:57:b6:ea:1d:1d:72:e5:
                    c8:13:eb:89:63:89:3b:08:b0:00:ed:a3:27:0c:a4:
                    fe:0b:e0:e2:6b:1d:94:c1:1a:65:26:87:2f:43:d5:
                    67:af:fa:65:93:db:d5:96:8b:f9:5c:46:3a:29:23:
                    08:6a:76:34:ef:73:b6:1e:cb:10:9f:76:63:16:fd:
                    b2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DD:F2:62:FF:8C:B2:F9:C6:FF:D8:49:3A:B4:CC:4F:45:E1:BA:B8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0B240A6B4CE11F1B380261CCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.117.0/24
                  154.202.120.0/21
                  154.217.234.0-154.217.255.255

    Signature Algorithm: sha256WithRSAEncryption
         be:53:cf:03:27:64:59:e6:bb:0e:4e:69:f4:1f:86:2a:58:40:
         0c:8e:d0:78:06:70:1d:e4:4f:0a:c5:17:47:2a:13:26:da:a3:
         e1:b6:e5:79:19:df:99:ab:99:9f:f7:8f:27:df:74:25:f8:05:
         18:fa:5f:e2:bc:cf:6d:f4:f1:ce:30:04:99:89:50:3f:86:7e:
         88:70:a6:fd:14:bf:2e:0f:40:d7:89:7e:88:0e:0d:52:1c:cf:
         89:05:43:79:ee:67:07:04:01:7e:87:a8:ed:9c:51:f8:fd:43:
         af:aa:b8:81:9f:dc:78:4d:e9:45:b7:25:55:6b:31:cb:1d:03:
         75:cf:60:6b:4f:c8:51:3f:2d:ee:30:c3:bf:22:75:09:62:7b:
         87:7e:28:be:4b:86:28:7e:4b:df:7a:6a:2d:cf:57:fa:37:31:
         b9:20:5c:9e:c9:60:79:92:fb:13:39:01:7b:95:48:7d:3a:d2:
         ea:e9:df:3f:77:d7:ef:ac:6c:be:44:15:74:24:7f:77:7d:18:
         63:1a:2f:2d:43:c2:ce:04:fa:44:ad:88:49:c8:cf:f3:b4:bb:
         d5:87:d9:82:bb:b4:ab:65:bf:3f:36:31:fa:b2:66:a3:4c:4f:
         4b:c5:a4:fe:96:43:45:14:16:ad:25:53:2a:cc:98:62:34:23:
         c6:77:62:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----