Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/A54B6980AC2611F1A91C47D8CE1D38B0.roa
File:                     A54B6980AC2611F1A91C47D8CE1D38B0.roa (raw, json)
Hash identifier:          YnX1ovFA/H7yWq5H7yWiVocIUHXSg1/RMNpBweFETtE=
Subject key identifier:   2F:E0:2C:50:97:3C:6B:6A:4E:64:54:1D:6B:B2:8A:1E:82:C1:A2:0D
Certificate issuer:       /CN=F36724C2AF/serialNumber=AC5DF5304809BB783EB962126958A00786E8F67C
Certificate serial:       13
Authority key identifier: AC:5D:F5:30:48:09:BB:78:3E:B9:62:12:69:58:A0:07:86:E8:F6:7C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/A54B6980AC2611F1A91C47D8CE1D38B0.roa
Signing time:             Wed 09 Sep 2026 08:15:41 +0000
ROA not before:           Wed 09 Sep 2026 08:15:37 +0000
ROA not after:            Wed 08 Sep 2027 08:15:37 +0000
asID:                     15399
IP address blocks:        154.70.0.0/18 maxlen: 18
                          154.70.0.0/18 maxlen: 21
                          154.70.0.0/18 maxlen: 22
                          154.70.0.0/18 maxlen: 23
                          154.70.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36724C2AF, serialNumber=AC5DF5304809BB783EB962126958A00786E8F67C
        Validity
            Not Before: Sep  9 08:15:37 2026 GMT
            Not After : Sep  8 08:15:37 2027 GMT
        Subject: CN=6aa115ad-f26f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:61:d6:c5:4e:34:73:46:22:23:0d:0e:01:07:
                    03:df:de:0a:e6:b8:18:28:f2:ab:f8:01:df:b1:36:
                    b5:16:3a:b2:a5:1b:87:49:7a:32:ef:54:1a:7a:22:
                    a1:49:1b:f5:ae:0d:03:d1:f7:cd:79:a3:89:12:09:
                    92:a9:16:47:07:9d:e8:00:ae:fa:34:8b:f1:bc:f4:
                    13:42:55:21:0e:10:4a:2d:2c:d3:cc:59:98:fb:75:
                    58:62:3d:77:36:df:99:04:56:32:21:5e:aa:2e:1f:
                    1e:ea:21:41:f5:2f:3d:c8:4d:18:64:fe:e6:68:e7:
                    fd:66:3f:db:cf:b5:46:a4:67:2d:b3:15:24:0e:72:
                    ed:09:c6:5d:ee:9d:4f:96:2f:0b:28:f3:23:e0:3c:
                    66:8a:86:ba:76:b2:7e:93:c7:18:86:bd:07:1a:88:
                    c6:0f:6b:31:69:5e:26:4e:92:0d:10:be:2f:e2:76:
                    fd:0f:0e:ae:57:2f:e9:fc:3f:90:9c:0f:21:56:7c:
                    2e:7e:99:b1:48:9f:49:15:b2:30:7c:a3:84:b5:3d:
                    5c:ff:7a:1e:17:56:e7:72:dc:56:ed:3c:76:56:1a:
                    88:56:e1:84:96:4b:4e:d6:9f:89:88:b2:a3:6f:6c:
                    73:fb:8e:1a:3a:45:0c:3d:6d:c8:34:84:ef:9d:a3:
                    38:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E0:2C:50:97:3C:6B:6A:4E:64:54:1D:6B:B2:8A:1E:82:C1:A2:0D
            X509v3 Authority Key Identifier:
                keyid:AC:5D:F5:30:48:09:BB:78:3E:B9:62:12:69:58:A0:07:86:E8:F6:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/rF31MEgJu3g-uWISaVigB4bo9nw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rF31MEgJu3g-uWISaVigB4bo9nw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/BFDAB754AB8811F183655414CF1D38B0/A54B6980AC2611F1A91C47D8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.70.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         61:b7:69:45:e9:f7:d9:f4:23:84:d1:b0:6f:e5:28:31:35:0a:
         8b:20:82:32:b7:35:3e:4a:d9:63:b6:fa:73:45:1d:06:aa:3d:
         8c:6b:dc:c5:7d:55:f9:38:25:32:e6:11:3d:19:50:8a:d0:9a:
         e3:6c:47:e9:b5:f0:4a:fd:04:4c:d5:5f:06:ff:58:d6:e9:25:
         8a:be:66:fe:86:51:d2:fd:a1:22:43:df:1d:26:10:e2:ba:3c:
         ce:5c:4a:5f:c3:7c:9c:7b:12:14:64:dd:39:b1:e3:c7:8d:66:
         5f:62:a1:02:57:68:48:87:1e:39:ff:2d:5f:01:28:c6:10:5d:
         41:97:14:c0:62:28:36:c5:a9:3a:00:cb:48:23:10:00:f4:ea:
         0c:79:ac:9d:f8:f6:49:b9:fa:96:fd:14:bc:ac:3f:ff:97:9b:
         f5:fe:35:87:76:cf:ab:9b:92:06:92:3b:3e:45:c9:a5:06:bc:
         49:5d:4d:27:c1:4a:74:e1:71:2f:e3:8e:1c:f2:79:84:e1:6d:
         36:81:b0:5a:51:d6:86:b0:6f:c7:e8:a2:82:a8:ed:94:e2:78:
         d0:4f:67:a9:3d:db:86:f5:45:f3:0e:fa:b5:ff:13:ad:71:e7:
         f5:f9:b4:6c:0b:17:8d:f6:fd:38:bd:2a:47:1d:39:ed:8e:bc:
         51:a3:32:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----