Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF8B5A7AA05B11F1B0AB2AF0CE1D38B0.roa
File:                     BF8B5A7AA05B11F1B0AB2AF0CE1D38B0.roa (raw, json)
Hash identifier:          RmHpp0L2YKfYsvEiAGzAx/nnrxnLqOpEwpabsUZWmUM=
Subject key identifier:   F4:14:C5:C8:08:3D:4C:3B:36:EB:22:06:AA:2F:37:EE:94:37:00:34
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E29A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF8B5A7AA05B11F1B0AB2AF0CE1D38B0.roa
Signing time:             Tue 25 Aug 2026 08:05:35 +0000
ROA not before:           Tue 25 Aug 2026 08:05:30 +0000
ROA not after:            Tue 29 Sep 2026 08:05:30 +0000
asID:                     152179
IP address blocks:        154.86.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123546 (0x1e29a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 25 08:05:30 2026 GMT
            Not After : Sep 29 08:05:30 2026 GMT
        Subject: CN=6a8d4cce-3b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:76:67:bf:a9:dc:0c:88:df:1a:45:81:e4:22:
                    a7:7c:c8:45:3b:f5:dc:3e:83:7e:a2:e8:66:29:e1:
                    4e:0b:41:bb:e4:9c:54:02:cd:35:8e:60:4b:24:ee:
                    8f:0b:c9:bd:26:bc:0f:9e:10:22:a2:9c:46:2a:69:
                    73:63:6e:6c:c8:ee:f6:74:0b:47:ad:a0:95:b3:5f:
                    22:b5:77:71:cf:7c:9b:cd:e4:56:b1:76:db:b0:cd:
                    79:66:c0:23:00:5f:80:a3:0d:10:17:68:d2:86:46:
                    c0:0f:ae:72:bb:31:f8:10:50:dd:49:e1:6f:4f:44:
                    ba:dd:2a:5a:7b:7f:b9:fd:06:e0:38:9f:e2:b8:c8:
                    ac:db:16:19:ce:2d:85:bf:65:ae:8d:5b:2c:35:92:
                    af:64:92:cd:e8:19:fc:e0:f4:8f:77:d8:d4:06:7a:
                    97:8b:33:ff:3d:a9:07:f6:03:f2:30:97:68:06:b0:
                    7f:7b:b1:dc:d6:02:a6:68:8f:15:77:4f:10:d1:8c:
                    b0:2c:8f:1a:b0:a0:5a:7e:41:69:c4:0c:54:f5:f1:
                    d8:99:a6:b4:7c:4b:6e:2a:f9:dc:05:42:b4:d8:b4:
                    e8:8e:b0:71:59:db:87:6c:e1:5a:69:35:41:b1:87:
                    39:f6:86:69:15:b3:f3:c0:11:f3:e9:4e:02:ea:b0:
                    f4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:14:C5:C8:08:3D:4C:3B:36:EB:22:06:AA:2F:37:EE:94:37:00:34
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF8B5A7AA05B11F1B0AB2AF0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:0d:0d:9b:54:4e:b3:d0:93:56:fb:ae:b5:5d:74:bf:b6:b5:
         80:8a:5a:f3:06:4c:4e:78:14:99:25:6a:ed:82:cf:bf:86:d3:
         4e:04:19:5a:a0:b1:a8:df:69:c2:d7:ef:2f:7e:b2:e5:7a:86:
         9c:e3:42:f3:28:80:cb:0c:bf:d3:e5:22:9c:4c:ba:49:e6:02:
         fd:15:68:21:e0:57:ba:0f:80:3a:28:28:3d:68:aa:e0:5f:40:
         7c:58:25:48:a1:91:3c:bc:f7:e3:43:6f:6e:fa:a6:37:c5:54:
         4f:69:ef:8e:63:04:86:98:9a:ef:2b:8b:19:20:6a:0e:12:61:
         69:b2:b8:09:bd:f6:0a:66:4d:dc:1f:ac:c2:35:2b:ac:15:9d:
         25:75:42:9f:4e:bc:d4:51:31:fc:9c:88:af:df:42:2c:a7:de:
         8e:53:7a:fa:a7:5b:83:77:c0:34:a5:7c:1d:de:7c:77:0b:f3:
         67:43:32:a3:6b:a6:9f:b2:c7:f9:69:31:ef:f7:d1:5c:f0:19:
         5e:47:ad:52:fc:3c:9e:b1:0b:91:16:74:f5:2f:ab:80:90:36:
         0a:5a:17:1c:e5:fe:a0:81:df:39:d8:e8:33:95:db:61:01:e2:
         d6:50:e1:0d:4f:70:92:8f:09:2b:81:2d:17:0d:16:44:79:ac:
         11:4d:1b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----