Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF9D751A9C6F11F182E74AEBCE1D38B0.roa
File:                     BF9D751A9C6F11F182E74AEBCE1D38B0.roa (raw, json)
Hash identifier:          cyl+qKGBoUkQR/KVpxHd6hWixuHjLgu8QPD1ASLfbtY=
Subject key identifier:   28:56:91:E9:47:7F:98:F4:1F:3C:23:1C:51:B4:2B:57:A7:E0:46:BA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E04D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF9D751A9C6F11F182E74AEBCE1D38B0.roa
Signing time:             Thu 20 Aug 2026 08:18:40 +0000
ROA not before:           Thu 20 Aug 2026 08:18:36 +0000
ROA not after:            Tue 22 Sep 2026 08:18:36 +0000
asID:                     22516
IP address blocks:        154.86.192.0/18 maxlen: 24
                          154.90.224.0/19 maxlen: 24
                          154.91.224.0/19 maxlen: 24
                          154.93.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 12:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122957 (0x1e04d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 08:18:36 2026 GMT
            Not After : Sep 22 08:18:36 2026 GMT
        Subject: CN=6a86b860-bec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:05:7b:b5:59:de:8b:a6:db:14:ba:f4:ff:91:
                    14:bc:a9:ad:8f:77:b1:46:70:f3:7e:7d:22:11:c7:
                    5a:e7:cc:c0:39:38:91:04:6f:b5:31:71:31:23:90:
                    e6:23:fb:b5:d7:14:a6:ee:e7:37:a8:a2:df:97:64:
                    c9:e5:c7:44:48:73:d4:49:5b:67:6c:fa:bf:16:32:
                    e0:eb:c2:c7:2c:27:bd:43:e9:5d:4d:d7:b0:28:c6:
                    c5:f4:fb:0d:54:c2:10:a6:cb:31:25:7e:70:32:60:
                    8c:86:8e:4f:3e:af:de:73:37:1a:6c:be:a6:1f:02:
                    00:15:85:f8:bf:e3:dd:b6:1e:94:32:4c:2d:8c:07:
                    19:71:08:21:84:62:96:d7:22:98:1f:3c:ff:39:da:
                    5e:bd:55:16:ae:eb:26:41:d5:c3:d4:58:8e:69:70:
                    45:8a:50:c7:b0:df:29:a5:91:8f:0f:35:ca:9a:82:
                    0d:86:f5:3a:73:8b:f2:48:8a:62:0a:25:3d:1f:76:
                    80:bf:07:67:8b:85:15:3b:0a:6a:f4:13:07:7e:4f:
                    a2:07:c1:2b:29:c8:30:f8:4e:5c:6e:ac:ed:7e:c0:
                    8a:a6:e8:92:93:46:7a:b5:a1:05:76:ac:47:99:ef:
                    43:64:c2:96:a6:4c:bc:50:33:6b:d6:23:a3:e5:6e:
                    7e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:56:91:E9:47:7F:98:F4:1F:3C:23:1C:51:B4:2B:57:A7:E0:46:BA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF9D751A9C6F11F182E74AEBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.192.0/18
                  154.90.224.0/19
                  154.91.224.0/19
                  154.93.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0f:e9:fd:19:d7:8f:a1:06:6c:86:b4:cc:e6:e9:f8:15:14:3c:
         83:e8:e8:99:55:8c:0d:68:d8:07:ad:53:9e:fa:0e:67:01:04:
         00:c1:a5:ed:ee:03:a1:96:81:6b:9e:81:70:b1:11:45:89:a4:
         7e:54:8e:db:1f:76:5d:7b:3f:f4:b8:6e:5a:cb:74:4c:f9:e7:
         ac:64:cd:46:f4:92:4d:7f:88:48:b0:62:95:c4:81:60:2e:57:
         14:26:88:70:db:77:ed:5a:8b:5d:42:c3:c7:1d:c0:19:f5:ea:
         8c:82:dc:ad:04:cc:ca:a9:ed:ad:75:a1:0c:0f:e4:ba:b7:00:
         12:a9:99:e4:d5:0e:dd:de:0e:65:86:87:63:d3:ce:84:1f:2c:
         d8:4c:85:ba:4d:47:3e:2f:ee:f1:1b:a3:0f:3c:c3:7b:a9:98:
         e6:45:4a:95:8e:18:69:bd:d3:f2:64:58:07:bc:9e:f4:ed:dd:
         9c:83:6d:40:81:0a:0e:b4:7e:ea:e7:a8:8a:3c:d6:bd:4a:45:
         bb:2b:b7:90:04:36:f7:2a:04:03:49:99:24:6d:d7:87:e5:fe:
         80:fd:a5:b7:68:08:77:b5:01:b1:ff:d9:a3:12:37:fc:aa:3d:
         85:39:ec:1c:f3:00:12:dd:80:75:ad:5f:cc:0d:d7:6b:09:1e:
         d8:90:a6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----