Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A5803E4B01111F1BD2AE60ECF1D38B0.roa
File:                     1A5803E4B01111F1BD2AE60ECF1D38B0.roa (raw, json)
Hash identifier:          5AqU+ypfy+SQPh9SGvUGHOk8PR7e3vigFDpJU82jv+M=
Subject key identifier:   47:7C:FD:02:FF:2F:B9:C8:AA:D8:4D:46:71:40:3F:A2:AD:F5:5E:98
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E812
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A5803E4B01111F1BD2AE60ECF1D38B0.roa
Signing time:             Mon 14 Sep 2026 07:51:33 +0000
ROA not before:           Mon 14 Sep 2026 07:51:29 +0000
ROA not after:            Fri 30 Oct 2026 07:51:29 +0000
asID:                     402506
IP address blocks:        154.201.72.0/21 maxlen: 24
                          154.201.88.0/22 maxlen: 24
                          154.201.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124946 (0x1e812)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 14 07:51:29 2026 GMT
            Not After : Oct 30 07:51:29 2026 GMT
        Subject: CN=6aa7a785-1a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dd:20:c6:31:2a:fc:18:4e:78:97:06:37:13:
                    fc:f3:91:3e:ac:f0:c6:bd:c2:b5:16:fa:18:0f:d4:
                    d0:61:2c:15:3e:cb:11:0f:ca:4e:78:ac:48:00:1c:
                    4a:06:a9:15:8d:d0:44:03:cb:fb:d7:c5:88:67:39:
                    06:25:48:9c:3b:c3:06:3f:4d:9f:91:14:45:de:65:
                    3d:91:53:81:21:9c:47:7d:13:00:a2:6b:18:23:32:
                    02:22:58:51:98:bd:1a:32:85:fa:e9:dc:87:50:30:
                    ed:80:84:04:f4:a5:2b:5b:10:15:2d:ce:75:2f:f3:
                    3c:74:0e:90:3f:83:e1:59:90:51:39:4b:64:82:19:
                    bf:e9:18:fc:4f:90:5f:b6:74:18:fd:b3:13:8b:e8:
                    26:0f:ed:4f:41:e8:34:05:ad:b6:0a:cc:c8:85:96:
                    ed:d4:f5:76:3d:1e:42:ea:16:3b:fd:6f:5f:b1:51:
                    72:20:9e:dd:22:9d:26:fb:d3:52:96:df:59:85:30:
                    2c:e0:d4:e2:21:75:f0:d7:3f:87:4a:00:82:66:bc:
                    d1:97:74:5c:37:dd:d1:6b:8f:09:fb:ee:5f:9c:54:
                    13:26:2b:85:be:27:9d:93:40:ec:32:bf:05:ee:62:
                    4d:af:b9:ac:2e:db:da:4d:4b:b2:1f:6c:e3:36:92:
                    86:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7C:FD:02:FF:2F:B9:C8:AA:D8:4D:46:71:40:3F:A2:AD:F5:5E:98
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A5803E4B01111F1BD2AE60ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.72.0/21
                  154.201.88.0-154.201.93.255

    Signature Algorithm: sha256WithRSAEncryption
         82:08:e8:a3:95:69:77:24:48:ac:cb:1f:f2:75:02:89:fc:86:
         ff:44:c8:64:82:37:c8:b9:06:b7:46:31:c4:54:ec:85:f3:ed:
         8f:29:1a:74:62:64:8e:9c:04:19:72:fe:68:eb:99:52:26:74:
         35:a3:86:6d:6d:dc:e5:63:80:88:77:61:26:74:db:4a:cd:3f:
         5e:7c:94:72:76:91:bf:a2:79:51:6d:1f:ac:55:d5:ea:3e:3b:
         23:ca:98:81:85:2d:7d:e8:fa:7f:54:ef:37:4c:c2:c9:c7:e7:
         e1:1b:d3:ae:21:8c:67:3b:2d:46:1b:79:4e:98:40:3f:83:3b:
         1d:03:b1:2c:60:1a:28:7a:db:f3:bd:0f:b1:4d:b3:5c:21:36:
         19:65:45:5b:26:68:00:26:90:fe:84:0a:38:b5:68:89:b8:0e:
         50:ed:25:9c:85:92:2f:ec:69:c0:48:a5:0e:5f:2e:5d:13:34:
         c8:61:b6:94:38:12:04:39:33:dd:15:2a:b2:24:b3:61:3a:fe:
         65:e4:3f:13:35:9a:5c:14:3e:4f:65:a3:44:88:2d:ae:bd:e9:
         0e:41:a2:10:f8:86:9a:98:5f:66:d8:cb:5a:c7:15:f9:c4:24:
         37:17:45:78:24:fc:3e:32:b1:24:06:ba:4f:17:db:3c:ed:ef:
         8f:b6:7b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----