Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBA2102AB26211F1ADD3721BCF1D38B0.roa
File:                     BBA2102AB26211F1ADD3721BCF1D38B0.roa (raw, json)
Hash identifier:          K2I1ODwZVNhBqLgaMTrpiaz3GzxeYOe+QnsLRUx21vg=
Subject key identifier:   3E:92:D7:4D:41:B3:C5:B3:B2:E8:7D:6F:A8:A0:4C:40:5D:BB:06:66
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E896
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBA2102AB26211F1ADD3721BCF1D38B0.roa
Signing time:             Thu 17 Sep 2026 06:40:55 +0000
ROA not before:           Thu 17 Sep 2026 06:40:51 +0000
ROA not after:            Sun 27 Sep 2026 06:40:51 +0000
asID:                     55020
IP address blocks:        154.89.144.0/20 maxlen: 24
                          154.89.160.0/19 maxlen: 24
                          154.89.192.0/20 maxlen: 24
                          154.95.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125078 (0x1e896)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 17 06:40:51 2026 GMT
            Not After : Sep 27 06:40:51 2026 GMT
        Subject: CN=6aab8b77-476a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2b:b1:73:8a:d2:4a:43:54:45:01:ca:44:48:
                    db:ce:58:63:dd:2d:6e:68:34:4e:de:e6:f6:75:97:
                    77:a0:c4:8e:57:b7:80:82:c3:84:b5:1b:70:4e:59:
                    1a:c4:99:f8:da:48:96:71:08:69:34:e5:a0:62:b0:
                    e8:b5:59:03:11:55:36:59:67:54:7d:cb:ab:7b:a9:
                    34:85:7a:db:30:8f:19:2a:91:74:7f:c0:bd:07:59:
                    98:d7:9a:34:00:b7:a4:53:ac:55:88:79:92:03:f3:
                    23:7a:82:90:39:97:e9:11:3b:85:b0:f9:7d:c5:a7:
                    ef:e0:7e:c6:a5:b4:12:8c:cc:dd:91:d0:ca:d4:1c:
                    8e:04:37:ce:23:9a:aa:9c:dd:82:48:af:e9:31:04:
                    df:55:4a:34:80:5e:51:c6:c9:c5:b9:3b:fa:7e:c1:
                    72:88:45:9d:14:80:43:97:1b:85:ab:e1:6c:06:de:
                    41:77:aa:9f:f0:6b:33:8d:d3:e1:a9:9b:20:f5:d2:
                    b2:89:1b:5b:32:33:97:14:74:55:2c:d8:39:06:ad:
                    07:f3:bb:22:37:be:ff:f2:27:15:79:14:90:10:30:
                    d5:69:56:30:76:38:57:87:6b:3e:0c:cf:fe:e1:cd:
                    bf:8d:f6:99:f0:9c:32:0b:c6:87:de:89:b4:6a:ab:
                    c9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:92:D7:4D:41:B3:C5:B3:B2:E8:7D:6F:A8:A0:4C:40:5D:BB:06:66
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBA2102AB26211F1ADD3721BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.144.0-154.89.207.255
                  154.95.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:fa:38:bc:ad:ad:bd:29:3f:95:7d:14:29:a7:d0:28:cb:da:
         cb:4f:aa:1b:f4:60:e9:b6:c9:81:53:ca:df:7c:13:d0:d8:c8:
         13:7c:ed:19:6e:ba:02:6d:6c:ca:8f:c0:01:07:36:06:d5:0f:
         20:0e:76:6c:ba:92:d1:0d:93:3a:5c:96:79:29:2d:14:26:b4:
         2e:74:dc:7d:bc:48:b4:1a:a9:da:0d:71:32:08:44:6e:21:ea:
         32:bd:01:5e:7a:ac:9f:e0:3b:d6:09:30:8c:c1:e3:ae:f7:55:
         c5:09:a0:46:69:f9:b5:16:84:50:bc:42:a8:9d:68:9b:9c:63:
         e8:53:cf:72:3c:fb:08:75:38:e5:68:fe:d9:f4:ea:d8:ef:63:
         49:1c:5f:8a:0c:65:9c:de:8d:fa:1f:2f:f3:03:77:00:14:3e:
         05:bc:31:92:32:ae:8b:33:1c:62:e9:ba:1f:2e:91:ec:3c:12:
         e0:e9:95:95:22:3b:bb:17:4b:10:d5:8e:6d:14:64:ff:83:19:
         fe:4e:31:4e:61:d0:43:b9:4a:62:0e:41:4e:ad:be:33:02:52:
         32:a1:a3:89:cf:49:60:ba:c9:39:2a:75:57:4d:6f:a3:e2:3c:
         2d:82:47:89:b8:5c:b7:42:b2:71:b3:eb:8f:69:25:62:c9:61:
         57:2b:7f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----