Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAC6D5889C9511F192EE32CDCE1D38B0.roa
File:                     BAC6D5889C9511F192EE32CDCE1D38B0.roa (raw, json)
Hash identifier:          5P3Gn4VHrJYNYd3lAFypOWR+g2pUHQKKwnT8vhR3Gzc=
Subject key identifier:   FC:ED:10:F4:C8:6B:F0:71:D0:4B:B4:41:D1:AF:DC:BC:DC:B9:84:E1
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E0AE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAC6D5889C9511F192EE32CDCE1D38B0.roa
Signing time:             Thu 20 Aug 2026 12:50:33 +0000
ROA not before:           Thu 20 Aug 2026 12:50:29 +0000
ROA not after:            Sat 26 Sep 2026 12:50:29 +0000
asID:                     154177
IP address blocks:        154.205.151.0/24 maxlen: 24
                          154.205.152.0/24 maxlen: 24
                          154.205.153.0/24 maxlen: 24
                          154.205.154.0/24 maxlen: 24
                          154.205.156.0/24 maxlen: 24
                          154.205.158.0/24 maxlen: 24
                          154.205.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123054 (0x1e0ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 12:50:29 2026 GMT
            Not After : Sep 26 12:50:29 2026 GMT
        Subject: CN=6a86f818-a79c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:04:e0:01:46:4a:cc:c1:d1:70:4e:3d:4c:79:
                    d1:8e:76:e8:fb:9a:4e:59:c6:88:af:e8:7e:af:42:
                    c7:74:8e:43:38:4e:0a:88:10:6f:d7:72:86:c0:f4:
                    05:ae:23:13:81:c9:29:d1:1b:00:7b:48:b9:42:25:
                    6b:1c:cc:13:4f:93:12:3d:58:45:23:f5:5b:b0:63:
                    29:b3:dc:36:8c:43:a8:bf:92:75:31:f0:53:7e:00:
                    b2:09:28:9c:eb:ab:b8:e1:5e:ba:c2:96:f3:b1:d5:
                    07:0b:e8:80:c1:c8:73:e6:6c:36:30:df:33:cc:bf:
                    cd:e6:47:d9:f5:5d:47:6c:8a:3e:a4:c5:bc:c5:d6:
                    12:8f:46:63:f9:d5:dd:4c:b8:bd:4f:4e:ee:81:de:
                    f9:c6:cd:02:e3:f6:ff:32:4f:29:04:7d:ef:c4:0e:
                    1c:89:f3:e8:f9:3a:44:0d:48:ac:76:9a:69:45:3e:
                    da:d7:e5:c8:04:42:f9:11:12:3f:f8:c5:3e:e7:22:
                    89:4f:2c:fa:9d:96:f9:4d:43:86:34:e4:bd:8c:b8:
                    2f:55:ca:90:ca:bd:aa:40:d2:80:d6:f8:47:f2:17:
                    13:1d:68:65:81:00:10:37:d5:85:6f:2f:72:5b:ba:
                    52:6f:10:89:0b:52:e0:03:9c:df:98:3f:29:af:d4:
                    26:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:ED:10:F4:C8:6B:F0:71:D0:4B:B4:41:D1:AF:DC:BC:DC:B9:84:E1
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAC6D5889C9511F192EE32CDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.151.0-154.205.154.255
                  154.205.156.0/24
                  154.205.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:3f:90:2a:f7:b9:57:48:54:b7:99:ba:e4:be:aa:f3:62:34:
         a9:36:20:d0:6c:7d:75:9d:91:27:7a:f8:38:87:bf:dc:f1:90:
         e3:ea:a6:a1:fa:2b:d7:2d:25:f2:0e:a9:2e:fd:cc:38:41:36:
         31:e3:8c:5c:60:36:5b:2f:87:f6:3c:7b:c3:7d:d1:f4:08:be:
         d5:21:16:aa:08:a1:4e:e1:d1:3e:b3:f5:56:e2:47:19:52:21:
         22:d7:54:29:1c:c0:03:6e:10:51:7f:74:20:76:c1:02:82:0a:
         6e:c7:c1:f3:2c:49:1a:4d:e7:69:bf:b0:89:46:f6:2e:4b:7f:
         13:94:99:5c:78:35:0d:e9:4a:9e:79:00:aa:18:e6:1e:fd:dc:
         1c:72:cc:cc:f6:51:94:36:89:87:28:0b:ea:73:71:f5:b8:16:
         40:87:d4:00:07:89:0d:52:63:c2:7b:a5:96:6e:fa:52:d9:e9:
         96:bf:40:de:00:5c:27:c5:b1:b1:17:37:c7:99:25:7d:34:3d:
         6b:3c:25:53:07:03:b9:5d:be:ff:a5:ac:bf:eb:8b:d6:48:54:
         8d:6b:eb:96:97:32:74:ae:55:d8:3c:15:dc:29:df:34:5f:84:
         0d:c6:e7:1f:3b:bb:50:fd:5a:f2:c7:8e:40:db:15:98:33:3c:
         7c:46:c6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----