Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0747085CADB111F19BAB00B3CE1D38B0.roa
File:                     0747085CADB111F19BAB00B3CE1D38B0.roa (raw, json)
Hash identifier:          I1ffEjgNzbJ6dlI7ht2MRPZBFES1aMjoUYyxZfdQj1U=
Subject key identifier:   10:2C:6F:8A:F4:BC:EE:72:71:FD:61:21:44:2F:C5:95:53:B6:AC:14
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E75F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0747085CADB111F19BAB00B3CE1D38B0.roa
Signing time:             Fri 11 Sep 2026 07:18:47 +0000
ROA not before:           Fri 11 Sep 2026 07:18:43 +0000
ROA not after:            Mon 21 Sep 2026 07:18:43 +0000
asID:                     150000
IP address blocks:        154.82.159.0/24 maxlen: 24
                          154.82.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 21 Sep 2026 07:18:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124767 (0x1e75f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 11 07:18:43 2026 GMT
            Not After : Sep 21 07:18:43 2026 GMT
        Subject: CN=6aa3ab57-d367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:0d:0a:45:67:f1:04:8f:90:48:e9:08:73:b1:
                    0a:39:38:45:4a:7a:58:29:da:8d:0c:0b:88:12:4b:
                    33:1a:40:90:2d:d0:67:b4:96:a6:fe:f6:8a:ae:77:
                    db:60:49:d4:64:14:73:08:a7:a2:b6:2c:2b:73:f3:
                    98:7f:7a:25:bc:a2:96:21:8b:df:8d:55:39:38:14:
                    39:61:b5:da:b8:b1:97:ed:fd:4b:10:1f:70:81:d7:
                    b2:11:af:ba:3d:a5:44:1a:6f:f6:e0:64:1a:12:9c:
                    c5:d2:95:61:fa:4b:f8:e9:97:fc:4c:c0:41:b9:94:
                    d9:91:42:3e:18:54:f5:93:9d:af:c0:cc:32:47:a3:
                    a6:e6:97:a2:cb:06:af:66:ea:2c:0a:64:91:b3:b3:
                    b6:93:81:a3:15:d9:98:80:f7:89:4b:f6:47:bb:87:
                    bc:90:79:88:27:21:8c:bf:66:12:16:25:66:0d:2e:
                    99:54:66:25:a5:3e:60:22:0b:93:39:f0:ae:71:89:
                    c2:41:b0:eb:dd:32:c6:ea:92:e6:68:99:a1:43:d6:
                    7a:a0:8c:ac:64:e2:9c:b0:5e:59:c1:e1:50:58:54:
                    47:5b:79:ac:92:b6:6d:8d:e7:e4:7e:8d:aa:6c:7c:
                    c4:5c:6c:65:18:43:e7:c9:c6:59:f6:a5:ac:bd:c5:
                    6e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2C:6F:8A:F4:BC:EE:72:71:FD:61:21:44:2F:C5:95:53:B6:AC:14
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0747085CADB111F19BAB00B3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.159.0-154.82.160.255

    Signature Algorithm: sha256WithRSAEncryption
         c2:3c:2f:ed:c0:5f:d1:b1:96:82:36:ef:0f:62:e2:a2:60:8c:
         f0:65:ba:a0:b6:c8:0c:87:01:47:90:d4:9d:a0:16:da:5b:f6:
         9c:92:63:bf:88:31:f8:8a:78:fd:2b:34:44:76:b3:41:89:25:
         9e:9f:04:46:78:1f:4b:1c:e6:9e:9d:e0:15:30:88:51:2d:56:
         35:28:54:31:44:51:0c:68:2c:38:d6:2d:90:4b:ba:d0:d2:92:
         00:2f:c7:19:61:4d:9e:e3:27:72:30:ef:2d:11:ed:06:d2:35:
         09:dc:7b:db:ec:6e:90:91:dc:81:00:27:81:19:ea:e4:64:0b:
         22:0a:a0:23:d3:e6:71:ba:86:ee:fc:f7:65:6a:b1:f0:ed:c2:
         2b:b9:69:a6:c8:41:cb:f4:5b:bd:83:ed:f9:30:d3:47:1e:aa:
         d0:01:3a:08:f0:7a:a2:2e:ca:d3:4e:ad:c3:c3:ab:12:77:33:
         c5:1b:e3:69:9b:89:64:da:1f:04:57:6a:8d:e1:cf:28:85:85:
         2c:1c:16:e3:d8:d5:f5:4b:21:86:b9:a1:25:48:65:08:ba:4b:
         d2:ee:f7:29:d9:30:64:28:a4:49:19:44:c8:65:95:a1:22:1b:
         46:97:a1:dd:6c:52:45:4f:53:14:dc:30:ea:a3:f6:bf:9d:30:
         e3:80:e2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----