Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/618C5F3CA0BF11F1AE5FB9BFCE1D38B0.roa
File:                     618C5F3CA0BF11F1AE5FB9BFCE1D38B0.roa (raw, json)
Hash identifier:          vxGkG79ygPYrUQsmGDJupFW10rDbNEYoI/5UENTHgH4=
Subject key identifier:   F3:F6:58:14:A1:84:8A:32:83:95:40:D0:AF:EB:A0:E2:A3:7F:0B:7B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E300
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/618C5F3CA0BF11F1AE5FB9BFCE1D38B0.roa
Signing time:             Tue 25 Aug 2026 19:58:46 +0000
ROA not before:           Tue 25 Aug 2026 19:58:42 +0000
ROA not after:            Tue 20 Jul 2027 19:58:42 +0000
asID:                     328608
IP address blocks:        154.200.228.0/24 maxlen: 24
                          154.200.230.0/24 maxlen: 24
                          154.200.232.0/24 maxlen: 24
                          154.200.233.0/24 maxlen: 24
                          154.200.235.0/24 maxlen: 24
                          154.200.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123648 (0x1e300)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 25 19:58:42 2026 GMT
            Not After : Jul 20 19:58:42 2027 GMT
        Subject: CN=6a8df3f6-b3c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f6:74:75:a1:cc:23:47:6c:6a:9e:fa:6b:f4:
                    6d:ea:5a:38:9b:2e:c9:f3:b8:e0:b5:bc:5a:9a:ad:
                    58:24:42:dc:54:8e:f8:61:fc:0e:6f:3b:a2:0a:16:
                    71:d5:96:21:9e:61:92:41:a7:43:56:4a:00:79:0e:
                    b1:6b:19:fd:00:b2:7c:48:f0:cd:ae:59:10:fc:37:
                    95:9b:60:c5:84:18:dd:c4:be:30:22:ba:6e:f2:e8:
                    24:5b:76:3d:76:ac:94:9d:8c:05:2b:c8:41:a7:02:
                    d6:73:56:9c:12:18:05:a4:f8:6f:4e:d8:59:16:12:
                    17:b6:07:36:2a:e2:00:7f:11:1b:02:2c:b4:df:76:
                    22:1c:48:26:b8:17:fd:c8:4c:c4:51:85:be:22:3b:
                    a9:58:1b:7e:73:48:1d:fe:18:48:3a:b9:66:d4:fc:
                    7b:5a:f0:7c:04:69:52:be:1b:b7:5a:32:bb:bc:c6:
                    a5:d9:62:5b:3e:25:e7:7c:1c:64:da:ee:87:8c:1c:
                    0a:ea:e6:d7:95:a5:06:c8:85:a8:f9:8b:2d:c0:f9:
                    90:c9:d5:65:5b:47:be:84:50:6c:99:95:67:3a:c4:
                    10:bf:cc:3f:fc:4b:28:9b:0f:4e:20:c5:f0:d0:f6:
                    59:90:69:c2:d6:69:e9:d0:e9:35:74:a6:0c:a9:d9:
                    d2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F6:58:14:A1:84:8A:32:83:95:40:D0:AF:EB:A0:E2:A3:7F:0B:7B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/618C5F3CA0BF11F1AE5FB9BFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.228.0/24
                  154.200.230.0/24
                  154.200.232.0/23
                  154.200.235.0/24
                  154.200.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:1c:d2:19:fb:04:41:01:5f:eb:f1:5c:1a:3c:54:08:43:f6:
         3d:bb:0f:4a:57:9f:52:40:4b:77:88:8c:b5:49:bb:83:84:a7:
         4e:4d:2c:f1:5a:88:7f:c6:3c:0f:b0:2d:12:59:14:19:90:06:
         79:30:f8:96:80:76:63:ca:3a:a0:15:94:b3:3b:5f:89:fc:1a:
         88:c5:45:27:da:76:11:67:31:e7:c1:f8:ac:25:9c:13:80:26:
         b8:03:55:64:0d:b5:cb:45:f9:8e:b0:73:3f:c2:f7:7f:0b:f3:
         0a:77:db:7f:f8:a7:3b:65:5e:02:f8:59:5d:55:0f:d1:cb:d7:
         88:73:6a:08:fc:a5:15:aa:ce:f4:d6:a1:53:98:de:20:ab:fc:
         3c:75:4f:8f:6b:6b:0e:3f:19:f7:c0:4b:82:b4:67:5d:0f:cf:
         c7:ea:13:f8:25:54:82:d0:7a:6f:e3:71:ff:99:68:9c:85:5b:
         0e:08:9e:4e:80:10:26:5f:14:2f:c8:2a:27:a9:ba:12:d3:5c:
         a7:5b:6c:f5:34:d9:d8:6d:72:4c:7a:b1:cd:21:9b:d7:f5:86:
         d2:7a:5b:0c:0f:54:0d:9a:3a:2b:1b:a1:3c:09:79:05:4f:68:
         92:27:f4:57:93:9e:59:ca:72:9c:9c:30:30:18:f2:2a:a4:7f:
         ac:92:ca:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----