Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E49358FAAB8B11F1986215AACE1D38B0.roa
File:                     E49358FAAB8B11F1986215AACE1D38B0.roa (raw, json)
Hash identifier:          UIiesb6T6J+uvlx7OWZJTkApOz4Gr6a4l7HstM7JGSM=
Subject key identifier:   A2:F5:4A:0D:8C:1E:93:3F:BF:46:4C:2B:30:91:CF:CC:74:1A:62:E2
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E67A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E49358FAAB8B11F1986215AACE1D38B0.roa
Signing time:             Tue 08 Sep 2026 13:47:55 +0000
ROA not before:           Tue 08 Sep 2026 13:47:51 +0000
ROA not after:            Wed 04 Nov 2026 13:47:51 +0000
asID:                     3257
IP address blocks:        154.81.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124538 (0x1e67a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  8 13:47:51 2026 GMT
            Not After : Nov  4 13:47:51 2026 GMT
        Subject: CN=6aa0120b-aaa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7e:95:64:5a:cf:7b:02:da:20:15:9d:97:86:
                    0f:ad:c4:75:81:ae:5c:8c:e6:31:9a:c2:d9:92:f6:
                    af:7f:dd:22:42:21:9c:40:07:22:25:ef:ba:eb:b7:
                    65:d7:87:b3:4b:da:0a:d2:03:e2:d1:58:c4:a7:72:
                    88:6d:86:72:c0:fb:36:f7:86:45:e0:2a:ca:b0:5e:
                    b9:6c:c5:9c:f2:df:94:e8:ac:f3:ed:8b:28:ff:ab:
                    e7:93:30:cd:22:54:2e:23:c9:0d:32:f3:2f:2d:cc:
                    ea:23:84:d8:05:7e:58:83:61:61:f1:51:df:89:a6:
                    5e:ab:78:86:64:2f:e5:71:4d:e5:8a:e0:22:be:ee:
                    5c:7c:4a:9b:e4:7d:ae:77:65:da:d5:49:2b:06:96:
                    36:fa:a6:b5:72:18:cb:ee:ba:61:ad:94:96:1c:8a:
                    0e:37:9f:f4:93:f7:32:89:33:a1:f5:e3:b4:ad:ef:
                    6e:44:ce:db:85:3b:15:da:87:7b:4b:e8:ec:a5:6a:
                    b2:f9:3a:ac:df:63:2c:b4:1e:99:78:a3:f7:e6:8c:
                    d4:68:34:2e:2d:e1:d3:b4:09:21:18:af:ee:cd:ab:
                    01:06:9b:92:dc:14:21:d9:45:c8:33:01:4b:5e:06:
                    57:c7:f2:90:68:96:30:6c:7f:04:5d:22:f1:0b:50:
                    ac:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F5:4A:0D:8C:1E:93:3F:BF:46:4C:2B:30:91:CF:CC:74:1A:62:E2
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E49358FAAB8B11F1986215AACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:1f:91:9d:68:2f:85:7a:c1:f9:28:f1:00:2f:90:83:ee:39:
         06:2f:8a:1a:8d:55:b5:11:6d:6c:35:2f:e0:93:bf:f9:fb:e1:
         87:43:d1:c6:80:70:07:a1:e4:03:a8:f2:04:e3:be:2b:c6:ec:
         0d:02:b0:3a:b5:f3:75:6a:41:e5:e4:fb:8d:98:55:e5:b8:a3:
         42:cb:e5:93:20:d8:7f:24:0d:e7:39:0e:13:ba:48:0f:96:5d:
         af:5f:de:8f:cf:39:f5:57:74:07:58:1d:77:e5:be:0b:04:54:
         e8:68:51:37:f3:c9:5c:b1:e1:22:6c:e0:5b:3f:c1:8e:16:2f:
         48:90:d7:0f:1f:21:7b:d1:e8:56:60:41:39:a4:75:1e:1c:f5:
         88:c6:d9:0e:63:d4:a7:57:43:a9:a0:3d:f6:3b:1b:ab:c8:dd:
         3c:80:76:b6:e3:ab:ec:92:e6:02:ae:76:70:08:c5:fa:89:67:
         33:37:0e:dd:77:24:73:a0:5e:13:38:20:fe:46:f1:2a:63:d5:
         51:95:e5:52:ac:47:5a:f7:98:ba:cc:31:54:e4:d8:45:1c:77:
         20:d1:03:e7:a0:11:a3:6d:ae:d2:bc:e1:41:67:0e:62:91:aa:
         56:07:84:e7:40:93:0a:94:aa:9a:ce:cb:54:7a:c1:8e:85:0b:
         3d:b1:96:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----