Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E47799D6AD0B11F18F2B6CC4CE1D38B0.roa
File:                     E47799D6AD0B11F18F2B6CC4CE1D38B0.roa (raw, json)
Hash identifier:          fdc4gMV902r0GgaMI6aO+NVEMGQ736M+J6lZ/wxHRAg=
Subject key identifier:   A4:4E:02:9C:9C:F1:6A:B7:7F:76:7A:DF:97:8F:59:4B:A0:72:2D:5D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E73B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E47799D6AD0B11F18F2B6CC4CE1D38B0.roa
Signing time:             Thu 10 Sep 2026 11:36:42 +0000
ROA not before:           Thu 10 Sep 2026 11:36:38 +0000
ROA not after:            Thu 17 Dec 2026 11:36:38 +0000
asID:                     142002
IP address blocks:        154.198.160.0/24 maxlen: 24
                          154.198.161.0/24 maxlen: 24
                          154.198.162.0/24 maxlen: 24
                          154.198.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124731 (0x1e73b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 10 11:36:38 2026 GMT
            Not After : Dec 17 11:36:38 2026 GMT
        Subject: CN=6aa2964a-e6f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:17:75:ba:1b:59:25:26:59:31:4e:a0:72:46:
                    12:eb:83:ae:a5:fa:98:d9:b1:c1:a9:04:4e:8d:18:
                    67:b3:37:b5:76:0f:97:32:67:5e:8d:7f:ae:32:77:
                    0c:a4:97:e9:97:ac:41:7e:73:c6:b5:7c:44:24:bc:
                    06:c0:43:e3:81:0b:9c:80:55:b1:0c:c0:5e:44:25:
                    2b:35:79:8c:e4:f9:2f:74:d2:78:e9:d8:59:6a:00:
                    76:92:e0:e0:1c:ed:eb:a3:6a:51:57:bd:d4:cf:f2:
                    0f:22:a2:1d:d9:14:a6:9e:17:2a:5a:8d:96:66:40:
                    51:52:fb:34:ed:b3:12:b1:5f:a1:87:18:97:cd:ad:
                    ce:a9:c5:b0:7e:af:f6:a3:04:f9:78:9e:46:2c:4f:
                    49:4d:e9:e7:1c:12:8f:0e:a8:d7:6e:a8:9e:f4:88:
                    97:65:dc:b5:d6:23:74:6c:07:11:42:80:3a:b8:0f:
                    80:6a:1a:aa:7d:5d:b9:77:c7:c3:25:84:ef:8f:ac:
                    17:ad:d2:23:ba:71:27:7b:92:7c:8a:40:da:85:a7:
                    8e:0e:11:63:64:ba:47:87:55:32:ac:61:09:3e:61:
                    49:bb:ea:7b:40:93:9b:18:ac:09:d6:de:f8:ac:fd:
                    6a:8e:57:46:43:97:44:bf:70:a3:88:af:e7:cf:a6:
                    8d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:4E:02:9C:9C:F1:6A:B7:7F:76:7A:DF:97:8F:59:4B:A0:72:2D:5D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E47799D6AD0B11F18F2B6CC4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.198.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:bb:01:55:33:bd:d9:bc:99:38:38:aa:f7:50:66:67:04:7e:
         3c:ca:3b:ae:49:32:2f:03:27:07:df:7c:a6:a7:c4:83:4d:41:
         63:78:cd:f5:6c:f8:47:93:0b:a0:6b:07:6f:0a:e6:e5:31:fc:
         36:21:a3:c0:79:21:01:f1:60:dc:e4:5c:87:71:35:0f:93:9b:
         b8:bf:a6:7d:cb:de:b6:09:b0:27:3d:f3:60:cf:90:27:fe:41:
         4e:44:b8:57:0a:a6:05:41:9e:4b:87:87:bb:2c:49:d5:c9:f0:
         56:f6:37:cd:8c:fb:c9:c1:88:fa:82:28:67:18:67:20:2e:74:
         27:64:25:ec:2c:22:c2:1c:78:f3:18:33:e3:79:dd:5b:c5:a2:
         1a:5e:47:e9:28:32:72:bc:51:d4:57:27:db:f0:0b:c2:b9:32:
         64:2d:3a:7d:08:a3:0d:54:80:e1:22:cc:74:cf:8e:3e:96:b0:
         38:30:db:48:90:29:34:4d:85:8b:f4:c1:ae:93:27:ca:70:be:
         b5:5e:d2:6f:79:7f:80:74:b4:74:2f:cb:7d:52:c1:cb:0e:85:
         84:04:ea:e2:3a:b6:1e:9e:13:fe:9d:b1:fa:ee:08:8e:37:a9:
         df:21:6d:2b:9b:2e:ec:8e:3c:1c:6c:95:61:7d:80:60:18:6d:
         2d:b7:59:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----