Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E324DBCCAD0E11F1B2ECA8D4CE1D38B0.roa
File:                     E324DBCCAD0E11F1B2ECA8D4CE1D38B0.roa (raw, json)
Hash identifier:          cHsE7j/rjzPcn4AgfPouL5ZHadgMHTOZrvC0/H81L1U=
Subject key identifier:   54:3F:1C:D9:F8:BD:C8:F9:16:14:E2:85:A4:19:3F:CB:29:54:C2:82
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E73F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E324DBCCAD0E11F1B2ECA8D4CE1D38B0.roa
Signing time:             Thu 10 Sep 2026 11:58:08 +0000
ROA not before:           Thu 10 Sep 2026 11:58:04 +0000
ROA not after:            Fri 16 Oct 2026 11:58:04 +0000
asID:                     401362
IP address blocks:        154.204.35.0/24 maxlen: 24
                          154.204.40.0/24 maxlen: 24
                          154.204.41.0/24 maxlen: 24
                          154.204.42.0/24 maxlen: 24
                          154.204.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124735 (0x1e73f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 10 11:58:04 2026 GMT
            Not After : Oct 16 11:58:04 2026 GMT
        Subject: CN=6aa29b50-fe07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f7:e6:12:b6:a9:ad:28:f8:cc:22:6c:07:17:
                    48:d2:cf:4a:8b:09:40:60:73:4c:0b:75:ef:9f:2d:
                    d2:22:99:cf:64:44:31:c2:ed:2b:13:db:a9:bf:a1:
                    5f:0d:4a:e7:6f:9b:db:34:f0:5e:a5:f4:ec:20:65:
                    ae:cd:92:bb:92:71:fd:ae:cb:3a:8c:1f:67:97:96:
                    ef:d3:63:e2:63:ee:97:7f:eb:f7:0d:7f:24:9f:41:
                    f9:31:2e:ed:7f:5e:ac:8a:a7:33:fb:a8:90:7d:80:
                    81:6a:a6:c5:05:07:5d:5d:45:b4:02:30:25:2e:01:
                    f4:62:21:c2:48:fe:84:2b:cb:82:64:37:76:3d:fa:
                    29:c1:c0:14:d8:95:eb:2f:94:21:4d:c5:f2:82:e2:
                    9a:57:4b:1f:56:2b:35:80:59:61:28:70:cc:f8:91:
                    1d:8a:d0:8d:a7:09:0c:c1:96:bb:51:63:d5:f4:98:
                    d2:07:49:1d:e4:cc:35:81:ea:1b:b2:4a:8f:b0:5c:
                    38:1e:a7:7a:77:13:c1:c6:a3:25:e1:10:31:bf:aa:
                    f4:0b:2a:a4:0c:28:ba:9f:ae:16:8b:87:96:aa:f1:
                    20:58:77:93:44:19:02:25:dc:8a:59:72:fb:9f:43:
                    3c:52:60:aa:72:b4:13:a5:f4:3d:f7:15:ed:3f:40:
                    cf:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3F:1C:D9:F8:BD:C8:F9:16:14:E2:85:A4:19:3F:CB:29:54:C2:82
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E324DBCCAD0E11F1B2ECA8D4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.204.35.0/24
                  154.204.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:d1:20:a5:44:d8:dd:8c:e3:d5:86:d7:1a:f3:82:3a:45:31:
         ba:bb:3e:38:7b:bf:e7:e4:a2:3f:bd:28:c5:41:ca:fa:2c:bb:
         65:94:e7:38:fe:16:63:cf:4b:73:d4:c5:49:87:08:5c:2e:c2:
         0b:47:b3:b6:09:87:d5:c9:9d:cd:16:cc:12:d5:74:fd:99:43:
         31:f2:15:05:0f:00:b9:5b:97:de:fd:94:e4:7f:cf:86:8d:0d:
         78:c4:cb:60:55:4b:7b:55:1f:3d:09:08:f0:9f:5b:7d:60:6b:
         0c:87:b4:e6:ad:69:a2:f7:97:d9:50:83:3a:7f:4d:68:f2:00:
         fb:39:a4:3e:97:64:e3:ab:9d:40:55:23:9a:42:9e:9d:2e:5e:
         a9:bb:e1:98:6d:49:a1:b6:4b:d0:53:89:5a:03:10:d6:bb:51:
         8f:be:db:71:ec:e6:67:9e:56:4e:20:80:11:46:4b:bf:fb:f6:
         7c:72:f4:00:d3:b2:40:d2:e0:42:d7:26:fb:c4:bd:4d:15:ea:
         1d:f3:c5:c6:cc:ab:2c:8e:58:bc:ae:91:8a:8b:46:4f:8f:1b:
         21:b4:db:00:5f:1f:2e:95:18:37:54:77:93:28:7d:e4:3a:94:
         47:77:c4:5d:6c:82:4b:c2:91:d3:f9:a7:2d:33:d8:e9:01:f7:
         a4:5e:97:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----