Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD84F95CAB7E11F196BEAFDACE1D38B0.roa
File:                     FD84F95CAB7E11F196BEAFDACE1D38B0.roa (raw, json)
Hash identifier:          etREqP/+YZoxG34OGDYZgaw1SzcK6FK690AfTDikzzA=
Subject key identifier:   1C:92:E8:3E:C8:C8:67:71:A3:86:F8:E6:5C:00:8F:AE:9D:B9:DE:F2
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E66C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD84F95CAB7E11F196BEAFDACE1D38B0.roa
Signing time:             Tue 08 Sep 2026 12:15:33 +0000
ROA not before:           Tue 08 Sep 2026 12:15:29 +0000
ROA not after:            Tue 07 Sep 2027 12:15:29 +0000
asID:                     328608
IP address blocks:        154.200.153.0/24 maxlen: 24
                          154.201.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124524 (0x1e66c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  8 12:15:29 2026 GMT
            Not After : Sep  7 12:15:29 2027 GMT
        Subject: CN=6a9ffc65-1a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:db:24:32:21:cd:39:bf:62:7d:3b:e5:89:62:
                    04:a4:77:96:e4:14:e9:a9:87:e0:84:62:cd:be:65:
                    4a:b3:dc:a2:82:f8:ac:6e:a3:2c:8b:85:57:90:cb:
                    63:32:33:65:77:e5:fd:3d:9a:f2:12:2e:0e:12:3d:
                    43:18:74:33:24:f0:aa:2e:12:27:ba:fb:50:88:cc:
                    2f:ab:12:6c:c7:18:c8:22:e5:26:f3:b5:7a:84:97:
                    a1:63:8e:d0:06:f9:fb:65:03:5f:5d:4e:ad:3a:fd:
                    69:47:1d:9c:3b:89:f7:f4:d7:5e:7f:3e:4e:53:31:
                    bb:13:10:19:04:e3:b5:2b:3d:7d:97:08:99:65:04:
                    3e:0a:60:d0:bf:3d:a0:43:6b:af:23:3e:42:c0:5e:
                    d8:e0:f4:59:b5:a5:21:02:e9:76:b1:9a:f8:82:fc:
                    82:c2:55:9e:80:c8:cb:d0:70:37:0a:dd:c1:a7:ae:
                    05:c8:1a:47:e1:b6:4e:fb:a8:31:6c:27:8f:37:18:
                    dc:67:0c:42:f3:a3:6b:6d:25:ea:58:e1:42:53:9e:
                    4b:d7:20:07:0c:08:41:97:4c:10:7a:06:ef:5e:71:
                    88:98:8f:41:d6:94:49:4f:ec:3c:19:2c:16:dc:30:
                    74:5c:79:fd:5c:c7:be:97:65:18:ee:88:90:ac:4f:
                    8f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:92:E8:3E:C8:C8:67:71:A3:86:F8:E6:5C:00:8F:AE:9D:B9:DE:F2
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD84F95CAB7E11F196BEAFDACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.153.0/24
                  154.201.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:ac:e7:48:b9:b0:a8:5f:94:19:79:9f:11:1b:26:c4:45:6f:
         b8:db:57:7d:f4:81:c2:f1:fd:c5:3a:89:4a:f6:10:7a:a2:91:
         b2:30:70:4c:04:66:b5:2f:73:c1:d0:c3:15:c8:c8:a9:0e:b3:
         6d:ee:c0:07:e0:12:32:fb:23:26:1f:9b:b0:3e:72:35:ac:90:
         e3:51:03:5a:48:ed:86:20:64:5d:6c:fe:83:1a:ad:f4:53:20:
         3a:b9:dc:87:38:e2:1a:f1:48:6e:85:be:19:b2:07:a0:35:88:
         5d:92:ad:e8:75:32:06:76:e8:37:39:05:68:18:d8:21:80:0a:
         ab:9e:bf:7d:d3:90:d3:63:36:8f:55:64:4e:06:f3:82:aa:71:
         e2:f4:99:b9:df:51:10:a6:b6:1f:0a:23:73:6c:19:c5:30:cf:
         3e:a1:64:67:3b:64:a4:29:f1:a1:63:50:59:c8:69:6a:d7:92:
         f8:61:ca:94:82:2b:c9:1a:47:91:cd:b7:6e:2e:1f:7e:ba:4b:
         31:53:dd:00:59:f8:3a:57:8e:76:cc:3a:bc:ca:e4:e7:3b:f6:
         db:17:1a:5a:22:a3:e1:8e:f3:10:87:bf:13:a8:04:5a:99:b9:
         17:5f:ad:6c:7f:c4:8a:bb:2c:dd:5c:7c:e4:2a:3c:f7:66:a3:
         04:55:c9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----