Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FE7C92AABB011F1B7BE6FFECE1D38B0.roa
File:                     2FE7C92AABB011F1B7BE6FFECE1D38B0.roa (raw, json)
Hash identifier:          WbyoPKMdPzU3wNCbcpoMttZYvRNXeorR5rdVjVOvN3U=
Subject key identifier:   91:CB:A3:48:94:2A:66:BE:3F:76:21:F9:1D:37:BF:40:AA:1A:61:A6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E688
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FE7C92AABB011F1B7BE6FFECE1D38B0.roa
Signing time:             Tue 08 Sep 2026 18:07:43 +0000
ROA not before:           Tue 08 Sep 2026 18:06:15 +0000
ROA not after:            Mon 19 Oct 2026 18:06:15 +0000
asID:                     61461
IP address blocks:        154.216.192.0/18 maxlen: 24
                          154.218.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124552 (0x1e688)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  8 18:06:15 2026 GMT
            Not After : Oct 19 18:06:15 2026 GMT
        Subject: CN=6aa04eef-5934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:46:a6:e7:03:6b:14:40:54:70:4d:b1:7e:bb:
                    d6:0d:44:07:0d:c7:1c:b7:03:bf:44:57:77:9e:9f:
                    17:ab:b1:06:f6:49:5b:d9:32:cc:e1:3d:8b:3c:db:
                    54:a1:d2:24:a5:f9:f6:48:ce:0d:a7:a7:3e:b7:3c:
                    d2:d9:b0:d3:eb:f4:9f:d8:a1:b4:75:5e:82:13:75:
                    69:53:bc:4c:ea:76:70:37:9c:30:47:83:07:87:29:
                    d4:ab:e3:a0:7a:0b:d5:5b:c6:55:3b:be:e9:f6:b5:
                    9a:29:17:a7:62:69:ea:64:01:73:53:18:56:e3:b7:
                    d4:1a:39:79:f2:2d:97:94:56:88:27:4b:31:30:6d:
                    ad:01:94:70:34:cf:d4:e8:f5:9f:49:2a:0a:a2:c9:
                    05:1a:ce:e1:99:27:ee:45:34:89:d6:29:7a:16:be:
                    ba:c4:25:03:83:a2:af:33:d1:74:37:1b:5d:81:93:
                    09:68:2a:05:1a:73:28:e1:b7:65:9f:7d:c2:d8:55:
                    0a:a9:31:48:a9:68:51:09:d6:f6:94:1c:d8:d6:6e:
                    bb:d0:00:4f:d3:52:d3:b6:bb:d7:34:3f:8b:e1:91:
                    c7:c7:24:5a:82:31:66:30:4a:8a:10:e4:f6:14:40:
                    cc:92:1d:c6:bc:5a:00:ca:02:7a:08:95:d1:cb:72:
                    d5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CB:A3:48:94:2A:66:BE:3F:76:21:F9:1D:37:BF:40:AA:1A:61:A6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FE7C92AABB011F1B7BE6FFECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.216.192.0/18
                  154.218.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2a:7e:2f:c5:c5:76:ef:83:d5:2a:62:15:38:9c:98:d6:67:7a:
         f2:50:54:e8:80:77:01:d9:0a:be:12:a0:a7:cf:6f:52:9d:92:
         5d:87:c8:50:a2:e5:fd:e1:cb:ec:10:a9:c0:57:05:a8:81:d3:
         70:4a:33:b3:89:36:05:d1:10:b8:d3:70:04:10:fa:47:54:21:
         df:dc:dd:1f:19:5d:d7:47:6c:15:93:3c:16:c5:45:88:18:aa:
         78:70:22:df:da:ae:98:87:b7:94:12:f0:ab:97:2e:88:96:13:
         77:08:00:c1:45:e7:94:f3:61:4b:45:47:0a:bc:c6:16:6a:f4:
         ed:a7:bf:72:bb:e9:8d:38:8f:a6:a8:17:87:a6:49:94:fb:d0:
         ea:f4:3e:aa:7d:57:90:a7:f6:62:9d:b7:4f:95:2b:55:98:47:
         a1:df:80:ec:09:f0:9b:3e:2c:1f:f6:7d:9c:eb:6d:b9:8d:4d:
         36:d3:db:ae:40:3a:f3:30:be:f9:54:91:2d:a8:ff:10:ab:9f:
         ca:9d:70:e0:1d:c7:79:07:d7:06:5d:82:32:81:10:2e:ea:98:
         cb:30:01:89:40:aa:f2:b4:09:4d:92:f4:5a:8e:68:3e:69:f2:
         ec:9b:8a:34:08:44:61:87:d5:1e:ab:ad:b9:c6:54:57:30:e7:
         d1:b2:74:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----