Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/022897BAADD311F1A7C15DFBCE1D38B0.roa
File:                     022897BAADD311F1A7C15DFBCE1D38B0.roa (raw, json)
Hash identifier:          RveoHhcSYGKm76VnUWeZIKUeCp7vhlLrjIxlfpycv2A=
Subject key identifier:   20:C3:4D:1C:A4:37:37:3A:E9:D2:01:13:1A:4A:8E:C1:A4:B4:99:C5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E791
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/022897BAADD311F1A7C15DFBCE1D38B0.roa
Signing time:             Fri 11 Sep 2026 11:22:01 +0000
ROA not before:           Fri 11 Sep 2026 11:21:57 +0000
ROA not after:            Fri 25 Sep 2026 11:21:57 +0000
asID:                     136897
IP address blocks:        154.86.156.0/24 maxlen: 24
                          154.86.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124817 (0x1e791)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 11 11:21:57 2026 GMT
            Not After : Sep 25 11:21:57 2026 GMT
        Subject: CN=6aa3e459-58b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a0:80:bb:b9:ea:9b:3c:a9:a4:e0:92:22:c9:
                    42:e4:11:4d:0e:ed:a6:90:71:95:e8:28:d4:b5:6c:
                    21:3d:85:df:a6:52:4d:99:51:50:0d:30:c6:be:60:
                    c9:0b:06:9b:19:50:fd:67:59:8d:a3:eb:28:76:dd:
                    02:06:b6:21:d9:fa:d4:d2:95:2f:31:54:74:31:a4:
                    40:77:c8:63:19:cd:6f:c3:9b:b3:cf:8d:b3:c8:65:
                    b2:3d:34:0f:8c:04:83:b6:66:8c:53:91:7f:ea:92:
                    d9:13:2a:0f:da:3d:18:08:24:b8:26:db:25:2a:05:
                    be:63:e3:e3:d3:0a:cc:d6:98:26:89:4c:6e:04:51:
                    d1:62:fd:a4:c5:bd:3b:4f:c2:36:96:ad:c3:a5:df:
                    0b:aa:f0:2b:92:bc:02:ab:97:7d:e3:9b:c2:64:d2:
                    39:c2:70:23:06:21:3f:87:40:a6:ed:ee:b6:71:f9:
                    51:5d:bb:ba:4a:68:2f:22:01:12:6d:e9:df:19:62:
                    2a:c9:4e:50:56:f3:d2:b6:b8:e4:57:c4:4c:95:ed:
                    00:46:85:51:28:74:ce:f8:42:76:b1:4d:de:26:89:
                    33:99:fc:bc:18:bc:49:30:e2:d7:e0:9f:98:58:80:
                    b5:7a:6b:31:b5:09:de:a0:37:05:b5:db:58:5d:70:
                    8d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C3:4D:1C:A4:37:37:3A:E9:D2:01:13:1A:4A:8E:C1:A4:B4:99:C5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/022897BAADD311F1A7C15DFBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:48:38:b6:4d:44:2a:41:69:a3:14:72:1e:51:af:b6:be:f1:
         3f:3c:35:2f:37:98:f0:e8:1c:3c:ee:a9:8f:49:e3:30:fb:ff:
         cd:11:86:f4:9d:f1:35:fd:95:c9:01:43:b9:39:1b:d1:7e:02:
         4a:6f:fb:a0:8e:ac:96:cd:51:3f:5f:46:86:1d:b2:0e:33:23:
         ca:a7:09:5b:12:8d:3a:15:9f:19:69:c1:49:ff:01:1d:77:62:
         66:c6:64:a6:d7:53:26:cc:eb:d3:ca:db:66:6a:d9:e3:8f:d6:
         e3:4d:fd:6b:b9:d3:f3:4d:a5:a9:17:0a:ca:0d:c5:27:4d:09:
         cd:a4:bc:db:89:92:0a:bc:b1:76:27:a2:d4:69:e5:83:d5:4b:
         92:ca:5e:e9:11:83:0f:b7:38:36:72:c7:92:96:d6:89:d5:52:
         2b:9d:e0:26:98:96:a0:e9:fd:37:e4:44:1c:f7:c8:31:9c:b5:
         8c:64:c3:de:73:4e:6b:69:63:03:80:a8:ad:82:8e:fe:b6:89:
         4a:29:ec:71:a1:95:6a:ce:a8:88:6a:c2:b5:19:45:2b:a6:c6:
         4b:6c:68:ea:2f:a3:e1:a7:a4:1d:fb:57:cd:bf:c9:ed:d6:16:
         a5:2f:5c:8d:f0:8c:df:d1:76:69:ab:5c:34:22:68:a1:a8:a0:
         28:2b:01:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----