Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4379564AAAD711F19DDE42DDCE1D38B0.roa
File:                     4379564AAAD711F19DDE42DDCE1D38B0.roa (raw, json)
Hash identifier:          7IPlX3aLgbwP5C3s27P78AG7hm+kV4D1+n63uVKvqTg=
Subject key identifier:   B2:B0:13:77:96:E8:E0:EC:E3:94:B6:83:CC:FB:63:92:6C:16:DE:3B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E62F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4379564AAAD711F19DDE42DDCE1D38B0.roa
Signing time:             Mon 07 Sep 2026 16:14:55 +0000
ROA not before:           Mon 07 Sep 2026 16:14:51 +0000
ROA not after:            Tue 01 Aug 2028 16:14:51 +0000
asID:                     2914
IP address blocks:        154.214.223.0/24 maxlen: 24
                          154.214.252.0/24 maxlen: 24
                          154.214.253.0/24 maxlen: 24
                          154.214.254.0/24 maxlen: 24
                          154.214.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124463 (0x1e62f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  7 16:14:51 2026 GMT
            Not After : Aug  1 16:14:51 2028 GMT
        Subject: CN=6a9ee2ff-c0bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:72:3a:26:30:4f:dc:26:c5:fb:9b:43:8b:87:
                    ec:63:5b:40:d8:92:41:9c:04:f5:f8:e9:47:87:51:
                    50:07:25:c4:58:bb:05:f1:aa:f7:6a:a2:3b:d3:1d:
                    86:64:0e:c6:1f:0a:61:ce:a5:f9:02:d5:42:78:80:
                    58:ac:e5:fc:c0:c4:b7:2b:31:de:1a:06:eb:65:21:
                    12:84:98:3a:bb:7e:87:8e:36:d9:93:40:0a:15:45:
                    7a:38:f5:27:10:89:34:43:c9:c3:fb:d2:fd:70:f6:
                    33:04:97:fe:c7:d1:bc:e6:e1:c5:56:d0:6a:a3:2b:
                    91:0d:3d:65:35:6a:25:4a:2f:50:b3:78:40:6a:15:
                    17:ed:66:f0:f3:65:e4:39:e4:ce:78:ca:d7:ef:d8:
                    de:16:86:39:0d:fa:cc:77:1b:66:2f:e4:c8:e2:3b:
                    4b:7f:94:06:05:d9:63:5f:65:ca:ab:48:8f:d9:74:
                    f0:a6:62:e2:3b:24:ba:8e:8b:32:3f:21:ed:27:ff:
                    8c:04:ed:38:a6:c6:8f:70:37:f1:d5:be:87:f8:b8:
                    82:19:39:fa:d0:76:6c:3e:47:09:d8:31:65:47:5f:
                    84:bb:a0:b7:03:a5:0e:86:ff:3e:c4:ce:7f:07:be:
                    d0:53:27:73:87:e3:a3:cd:b0:49:04:27:d3:37:8d:
                    f6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B0:13:77:96:E8:E0:EC:E3:94:B6:83:CC:FB:63:92:6C:16:DE:3B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4379564AAAD711F19DDE42DDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.214.223.0/24
                  154.214.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:c9:10:3a:5d:19:b5:30:fd:a5:cb:e6:03:75:1f:64:7f:31:
         c1:30:81:57:36:5f:63:58:a5:c7:e9:5d:a8:03:af:72:96:1e:
         f6:6f:b9:bb:68:21:8f:99:11:85:76:12:13:36:32:c5:72:ac:
         cb:79:12:a1:2a:17:11:a2:8d:f7:18:c7:98:76:db:83:35:bf:
         2c:ce:12:cb:2c:73:32:fb:22:a3:d2:8b:ca:98:51:82:9a:95:
         ee:ed:ab:e8:f8:92:92:55:d1:d0:60:f4:d5:00:0c:b5:e0:0b:
         29:08:75:e0:c6:6b:5f:0d:37:72:f1:f6:1e:28:dd:d4:1d:51:
         39:bd:fe:f2:86:73:ac:c3:c5:d7:4f:92:65:d6:c1:90:1f:e3:
         ba:98:59:56:16:bb:88:29:1a:f6:a2:2c:5c:5e:25:24:a2:4f:
         bb:b4:4e:1b:75:31:a5:fa:7e:1f:82:63:31:06:bc:07:ab:d5:
         b9:9a:f2:2b:0d:2f:09:d2:a5:47:06:21:df:f3:0a:15:4a:21:
         f9:02:b4:0e:cb:6b:ab:e6:ae:31:9f:59:3b:60:37:0c:8e:2b:
         e2:48:7e:f4:d8:df:b2:f6:63:e1:17:77:a4:19:bd:ee:fb:04:
         6c:44:2d:50:03:80:6c:51:9e:9c:8a:3e:8b:e4:31:69:1a:79:
         99:ad:62:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----