Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59673CB8A83B11F182E4C91DCF1D38B0.roa
File:                     59673CB8A83B11F182E4C91DCF1D38B0.roa (raw, json)
Hash identifier:          KnR8G320qUycjT6ZYnglUQfN5BqEKNjT0kNr2AkMbIA=
Subject key identifier:   EB:E3:01:D7:18:64:F8:36:18:85:90:BC:41:14:D4:4E:67:F3:50:63
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E55F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59673CB8A83B11F182E4C91DCF1D38B0.roa
Signing time:             Fri 04 Sep 2026 08:33:48 +0000
ROA not before:           Fri 04 Sep 2026 08:33:44 +0000
ROA not after:            Tue 06 Oct 2026 08:33:44 +0000
asID:                     151347
IP address blocks:        154.84.226.0/24 maxlen: 24
                          154.84.227.0/24 maxlen: 24
                          154.84.228.0/24 maxlen: 24
                          154.84.229.0/24 maxlen: 24
                          154.84.230.0/24 maxlen: 24
                          154.84.231.0/24 maxlen: 24
                          154.84.232.0/24 maxlen: 24
                          154.84.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124255 (0x1e55f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  4 08:33:44 2026 GMT
            Not After : Oct  6 08:33:44 2026 GMT
        Subject: CN=6a9a826c-4c2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1e:34:7f:76:69:89:55:54:4f:8d:76:01:cc:
                    80:9a:bf:aa:d3:48:f4:f0:1a:6e:bc:5c:10:69:25:
                    e7:38:0f:5b:21:35:aa:9a:91:9e:23:54:44:63:60:
                    85:1d:f8:5f:e2:f4:09:cf:d2:5c:5a:2b:86:94:79:
                    0a:2d:e2:14:74:5c:50:05:e2:10:e2:eb:04:12:54:
                    0b:85:37:17:47:db:97:40:fc:8d:60:99:ae:a9:2b:
                    81:3e:d9:ac:9f:7c:6d:24:a6:c6:91:0e:28:0a:de:
                    e5:46:83:9d:9b:2a:cb:f3:a7:cc:32:21:42:34:d6:
                    c4:81:59:84:e6:0d:81:6b:3e:62:92:b6:76:47:59:
                    b1:a8:6b:78:4b:b0:1d:06:b4:46:04:65:c1:3c:e4:
                    b9:6a:dd:c7:3a:5f:3a:d3:e0:84:4d:78:6f:fd:43:
                    31:dc:0d:8d:75:1b:0f:ea:8c:91:ec:99:f9:4a:f8:
                    e4:b2:34:fe:2d:7b:65:89:f7:ee:19:26:1a:bf:70:
                    ab:88:a6:aa:9f:aa:75:60:34:92:a4:a3:77:ca:4e:
                    77:1d:c0:08:f1:20:a4:4a:0b:7b:43:66:7f:bc:ff:
                    4d:d0:91:23:27:a5:27:ea:ab:fc:b1:5c:62:33:b0:
                    f4:64:e9:ae:c9:9e:79:7d:82:78:5f:cd:db:11:65:
                    c4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E3:01:D7:18:64:F8:36:18:85:90:BC:41:14:D4:4E:67:F3:50:63
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59673CB8A83B11F182E4C91DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.226.0-154.84.232.255
                  154.84.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:4c:4f:3f:b5:08:79:5a:d4:20:3c:e1:4d:6e:89:0d:b6:12:
         da:1c:e0:f0:2e:ed:02:14:44:67:ef:4c:f2:50:65:44:74:42:
         23:a7:4f:12:d2:39:2c:b7:f3:1a:a4:70:3b:92:48:3a:86:95:
         3d:6d:4f:71:7b:71:0a:27:49:78:25:b3:0e:c4:a8:05:af:e8:
         28:1a:db:61:7c:1b:0a:9b:15:cd:9d:f4:ce:58:7f:7a:34:e5:
         27:14:30:c0:9b:65:13:a0:65:f3:bb:d4:d9:fe:83:7e:4c:d3:
         c9:3e:cf:de:4c:f5:28:b8:95:b5:9b:d6:f2:d9:83:41:2b:5a:
         63:93:ab:d2:9b:a9:42:d0:fb:c8:63:33:b4:62:12:c9:79:b7:
         9b:94:9c:91:70:7f:ff:77:23:cb:19:c8:7b:ad:36:29:28:7e:
         f4:a4:4a:b5:ac:6c:ff:15:ca:9c:fb:5c:4b:97:cc:b3:4c:88:
         b2:97:7d:a1:1f:81:1b:35:3f:cb:3c:64:7a:86:ed:ce:cb:6f:
         a2:a2:f5:dd:3c:09:b3:bb:bb:4f:8b:99:a8:94:3f:a1:6c:a7:
         11:fb:3b:5b:3c:c3:81:1d:ea:0b:68:fb:12:d1:4e:3a:4d:d3:
         c4:dd:b8:00:d2:5e:a0:22:d1:4d:2b:ba:cb:3b:42:fd:69:a8:
         58:ed:f0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----