Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BCACAC0ADBF11F1B3FD2C07CF1D38B0.roa
File:                     7BCACAC0ADBF11F1B3FD2C07CF1D38B0.roa (raw, json)
Hash identifier:          62kzrGC6gz47cuafIdYccw/JW0ZbO5kep4GA6wUxD/M=
Subject key identifier:   7F:56:94:65:98:59:C5:C4:9C:B8:94:7F:64:3D:A8:11:C2:B9:E2:01
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E775
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BCACAC0ADBF11F1B3FD2C07CF1D38B0.roa
Signing time:             Fri 11 Sep 2026 09:02:15 +0000
ROA not before:           Fri 11 Sep 2026 09:02:11 +0000
ROA not after:            Tue 14 Sep 2027 09:02:11 +0000
asID:                     55967
IP address blocks:        154.196.8.0/21 maxlen: 24
                          154.222.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124789 (0x1e775)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 11 09:02:11 2026 GMT
            Not After : Sep 14 09:02:11 2027 GMT
        Subject: CN=6aa3c397-5ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0a:a7:5f:6b:98:51:13:1a:b7:50:4f:63:1a:
                    53:b0:f2:89:80:0b:88:5a:2c:71:69:d8:df:47:3e:
                    58:95:26:95:c5:dc:1d:15:ae:35:e4:68:e2:5e:13:
                    40:73:3a:38:f0:6b:a7:68:4a:1d:d2:e6:d4:0a:7a:
                    38:31:38:92:71:23:76:c6:95:86:94:c9:96:d0:33:
                    1f:1a:01:c2:43:95:c1:02:d9:da:ec:99:1d:ef:ec:
                    34:e4:66:40:ec:06:22:b6:b2:7b:23:ee:93:63:cf:
                    ff:af:4c:aa:a4:ce:fa:ba:8d:1d:17:85:25:a9:e5:
                    5f:d5:c1:0d:2d:9d:b4:2c:bd:f1:b7:db:98:9b:73:
                    69:32:43:ca:85:c9:50:f6:94:85:63:79:2f:9c:96:
                    c5:2c:70:aa:f3:10:52:bc:56:24:58:04:9c:c2:db:
                    72:d0:d8:8d:c5:aa:86:ca:df:ff:4a:66:10:ac:75:
                    fc:d4:4b:c4:8f:bb:82:d6:fc:2c:6e:40:d9:b1:a9:
                    d7:27:eb:6a:2a:f8:38:7f:fc:b2:0c:9f:c0:33:bf:
                    c0:14:33:15:ed:b7:54:e8:82:b3:13:76:ab:6d:dd:
                    cd:01:9a:74:c6:d7:42:ba:15:e0:88:03:e6:20:af:
                    be:b1:a9:8f:7f:0f:1f:20:0c:75:7a:be:71:bd:c1:
                    65:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:56:94:65:98:59:C5:C4:9C:B8:94:7F:64:3D:A8:11:C2:B9:E2:01
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BCACAC0ADBF11F1B3FD2C07CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.8.0/21
                  154.222.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:f4:97:91:31:82:ea:f0:ca:e3:f5:42:58:82:db:f5:66:8b:
         68:33:f4:89:f2:43:36:67:e8:84:63:8b:e2:cc:fb:ff:5f:0e:
         fc:16:c4:06:27:d5:a6:01:f8:8d:dc:8d:e4:01:eb:43:1b:80:
         4f:b4:0a:b2:b3:ed:e2:5e:34:9a:d8:af:c5:63:fb:31:2b:a2:
         a7:ed:eb:93:de:1d:20:e3:ef:34:07:c0:75:d0:26:fd:e6:a4:
         74:40:d5:49:ac:04:aa:7b:86:1d:32:6c:d0:2e:26:40:09:0a:
         72:2c:c1:80:40:8c:2b:5a:55:fd:ed:24:ae:dc:b2:45:1c:81:
         06:1b:5d:54:f1:36:bb:87:c5:6b:50:9b:0a:de:11:1d:1f:a9:
         db:4c:c6:12:6e:14:96:91:fb:3e:a3:ee:33:0a:9b:40:64:c9:
         8c:6f:7d:38:b1:2d:77:8e:00:ab:e2:60:41:d3:0d:91:d2:ca:
         b8:8b:e4:0c:fd:ef:ef:8c:fc:01:4d:5f:ed:1e:0e:5f:4e:d3:
         c8:b0:a4:ad:a1:04:3d:19:18:ee:6a:69:03:00:a4:aa:1b:46:
         fe:9e:41:33:95:58:7c:9d:2f:b2:68:22:31:68:21:77:e6:4a:
         4a:f3:0a:c7:f2:9c:c7:6d:10:c7:2c:a9:e8:74:16:10:c0:fb:
         5e:ea:41:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----