Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/522F2D20A83611F186237F01CF1D38B0.roa
File:                     522F2D20A83611F186237F01CF1D38B0.roa (raw, json)
Hash identifier:          Qb6W1ykEDyIdaaMgWTCFTl5o4mkFLU4CYOnJ19nUcb0=
Subject key identifier:   3A:55:51:DE:55:BA:B1:5B:15:05:43:77:F5:B1:2D:38:F0:3A:65:1D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E554
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/522F2D20A83611F186237F01CF1D38B0.roa
Signing time:             Fri 04 Sep 2026 07:57:49 +0000
ROA not before:           Fri 04 Sep 2026 07:57:45 +0000
ROA not after:            Sat 10 Jul 2027 07:57:45 +0000
asID:                     328608
IP address blocks:        154.214.193.0/24 maxlen: 24
                          154.214.194.0/24 maxlen: 24
                          154.214.248.0/24 maxlen: 24
                          154.214.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124244 (0x1e554)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  4 07:57:45 2026 GMT
            Not After : Jul 10 07:57:45 2027 GMT
        Subject: CN=6a9a79fd-fa49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:57:9e:c6:67:4a:22:56:a3:34:b9:83:88:d8:
                    90:61:a9:8a:fe:83:5a:54:4d:00:7c:b0:e3:e2:51:
                    51:43:a0:1a:32:17:2c:49:f1:a1:e8:59:07:07:57:
                    64:74:c6:28:96:01:53:38:4b:25:75:bd:3f:7c:19:
                    5a:e2:be:67:72:c5:02:b1:22:f3:21:9e:c7:7e:14:
                    d7:31:83:83:21:6d:ea:84:25:b3:e5:c3:9f:f0:13:
                    99:90:18:04:6f:14:a0:95:8a:fd:a1:27:b4:74:3f:
                    a1:56:45:14:37:da:b3:1b:f4:b9:48:54:d5:85:b6:
                    19:96:bb:13:6f:7a:dd:9e:02:4a:80:9d:02:be:6e:
                    c4:8f:2d:b2:a3:4d:9a:2b:43:8b:28:c0:11:b2:14:
                    50:d1:42:cd:db:1f:d3:8f:20:82:37:fe:d8:69:63:
                    03:f4:ed:f5:8c:ae:d9:11:d5:1b:be:de:14:bd:df:
                    45:e6:66:e5:9a:6e:dc:04:21:3e:9a:9d:49:ee:54:
                    15:49:40:f4:1e:b8:62:ca:1e:cf:26:21:b1:0d:3f:
                    56:bd:e3:6d:e7:71:e7:01:ff:59:ee:49:cf:c0:e7:
                    f4:c0:ea:06:af:2a:28:75:28:99:8c:c6:1b:c7:e0:
                    b7:ab:c7:c1:17:e9:78:e7:9e:07:55:a6:30:b6:f5:
                    79:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:55:51:DE:55:BA:B1:5B:15:05:43:77:F5:B1:2D:38:F0:3A:65:1D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/522F2D20A83611F186237F01CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.214.193.0-154.214.194.255
                  154.214.248.0/24
                  154.214.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:6c:fa:70:a3:67:4d:32:00:46:10:71:4b:1f:86:b1:91:e6:
         39:49:14:4a:97:da:2d:22:b8:30:e6:65:c6:0f:48:33:59:89:
         2a:5f:f3:32:7c:aa:6d:e1:56:60:8a:99:45:b1:da:e4:cf:19:
         f0:97:21:29:d7:9b:b6:c0:f7:8e:fa:1e:04:bc:c4:ad:26:24:
         be:e2:dc:e8:7e:fe:79:32:72:c0:e4:b4:85:10:56:12:93:4e:
         30:fc:5d:24:f9:25:46:16:ee:35:f9:16:f4:af:33:34:47:11:
         5d:17:41:e6:e1:a6:cc:7f:5a:62:38:64:b6:02:57:4a:e5:34:
         42:4a:ed:19:ed:0c:bc:1a:79:c7:92:fe:f5:9f:5a:92:16:e4:
         3f:0a:61:d6:8b:cd:c6:ac:af:b9:f7:d9:5d:dc:fa:43:d3:7d:
         2e:cb:9b:e5:ad:4d:ac:78:c2:23:80:67:af:3c:f9:c5:de:3b:
         6f:ab:58:87:4c:fd:bc:ca:2a:17:2f:18:e9:60:52:77:d5:8c:
         62:f8:6d:0d:67:ab:dd:54:d8:f8:aa:07:e8:52:2d:1d:2f:35:
         24:7e:7b:be:fc:05:aa:f3:16:42:6b:43:37:78:4c:db:ff:a3:
         c0:5f:a8:75:76:41:7f:56:83:cd:85:f5:0b:a0:66:c6:3b:fa:
         fd:c1:3c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----