Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52A3034AAABA11F1908670B5CE1D38B0.roa
File:                     52A3034AAABA11F1908670B5CE1D38B0.roa (raw, json)
Hash identifier:          TjruX6DE6Q3laxEDi9Di2aoy4kgVlIeyCaICGXUa9gI=
Subject key identifier:   E3:4A:BD:C8:7E:7F:03:2A:55:01:58:73:4B:41:5B:C6:40:C9:F2:08
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E62B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52A3034AAABA11F1908670B5CE1D38B0.roa
Signing time:             Mon 07 Sep 2026 12:47:45 +0000
ROA not before:           Mon 07 Sep 2026 12:47:41 +0000
ROA not after:            Thu 08 Oct 2026 12:47:41 +0000
asID:                     147281
IP address blocks:        154.84.135.0/24 maxlen: 24
                          154.92.1.0/24 maxlen: 24
                          154.92.21.0/24 maxlen: 24
                          154.92.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124459 (0x1e62b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  7 12:47:41 2026 GMT
            Not After : Oct  8 12:47:41 2026 GMT
        Subject: CN=6a9eb271-8730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e0:20:6c:07:f6:92:b4:8a:79:df:6f:31:87:
                    02:02:e7:d5:5e:ce:6f:a3:79:f0:5c:31:ba:ae:58:
                    fd:e3:b7:ca:1c:d8:87:ca:b9:1f:55:c5:e5:a0:3b:
                    f6:0c:5e:2f:68:8a:4c:c0:d8:7e:85:3f:ee:b2:81:
                    57:f8:9d:b6:61:7e:07:c4:ba:56:b0:d3:82:7d:da:
                    27:85:28:65:f5:f2:57:38:1a:f2:36:4e:31:1a:af:
                    8c:e3:5e:58:f1:3b:8c:62:b1:88:6a:37:63:96:5e:
                    77:3d:14:e3:56:cc:9a:a2:ef:37:25:f3:e0:d9:9c:
                    bb:12:9b:09:25:bb:4c:30:10:0f:c5:ca:f0:29:94:
                    f3:e1:f3:70:34:4f:83:fb:67:60:44:af:42:df:b5:
                    47:0c:3d:a5:d6:c0:9c:ac:d0:a9:ae:be:c6:5e:7b:
                    dc:e5:bb:cd:cc:f5:87:15:88:d2:fd:a7:5b:e2:ca:
                    31:27:cb:4a:ad:13:ec:2a:c8:d2:b4:09:ee:06:87:
                    25:e8:a9:67:fd:57:08:17:e3:bb:ba:1f:f6:a9:9b:
                    67:da:40:e1:30:6c:28:ce:f2:2f:7f:16:09:99:e3:
                    7b:01:5e:80:13:ff:7f:19:e6:b4:ef:e5:52:fe:0e:
                    d7:df:b2:1a:4a:a7:84:3f:90:7e:1b:4a:f9:12:b0:
                    44:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4A:BD:C8:7E:7F:03:2A:55:01:58:73:4B:41:5B:C6:40:C9:F2:08
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52A3034AAABA11F1908670B5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.135.0/24
                  154.92.1.0/24
                  154.92.21.0/24
                  154.92.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:c5:01:8b:9f:8f:1c:82:75:41:fc:b1:e7:ce:4a:93:1f:4a:
         b6:ea:e7:64:e4:dc:71:8b:56:4d:77:95:a6:f2:10:a2:a3:0c:
         0e:e2:5f:c4:81:c8:45:07:94:98:7c:e5:9b:4e:49:3d:dd:06:
         62:7b:01:77:77:22:39:04:a8:b7:2a:13:59:ca:a6:e0:45:d4:
         ab:55:56:4d:16:1a:d2:35:93:ee:30:d6:1c:85:40:f4:ec:ec:
         1b:3d:82:85:b9:f8:d4:7e:44:ba:cb:87:22:5e:82:90:ee:b1:
         be:f3:0e:49:b4:5b:fe:ad:8f:be:0b:b7:0a:fb:7a:c2:12:ba:
         77:58:5d:86:ad:30:bf:ae:a4:63:98:d7:f4:1e:16:ec:af:7e:
         8d:d0:15:8f:70:79:b4:50:7f:45:16:b9:ae:13:2f:91:fb:40:
         99:4a:45:89:89:e3:15:01:fd:dd:9a:2f:68:59:6d:7b:ca:c5:
         97:82:ae:0f:c0:2e:cc:04:25:94:2f:b5:68:5c:79:2f:b2:7f:
         f4:63:7f:57:21:fa:f8:c9:aa:ab:68:bb:09:14:1c:1d:34:0f:
         66:52:c0:ee:d0:20:78:b4:08:d6:6a:28:81:b3:04:6b:2c:66:
         fd:ff:ed:2e:3e:81:20:ef:5c:dd:41:0e:93:f6:86:64:c1:03:
         a3:a7:60:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----