Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F149C1B6A14911F193104011CF1D38B0.roa
File:                     F149C1B6A14911F193104011CF1D38B0.roa (raw, json)
Hash identifier:          RNtnDqEhp0aHewXwo/fHiOfvCZsgT1jgaT6xHolvOJU=
Subject key identifier:   C8:90:B8:A7:06:0E:16:5E:B3:3D:D7:47:3C:BB:E1:58:AB:E0:A4:DD
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E384
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F149C1B6A14911F193104011CF1D38B0.roa
Signing time:             Wed 26 Aug 2026 12:30:38 +0000
ROA not before:           Wed 26 Aug 2026 12:30:34 +0000
ROA not after:            Sat 25 Aug 2029 12:30:34 +0000
asID:                     17561
IP address blocks:        154.221.174.0/24 maxlen: 24
                          154.221.175.0/24 maxlen: 24
                          154.221.176.0/24 maxlen: 24
                          154.221.177.0/24 maxlen: 24
                          154.221.178.0/24 maxlen: 24
                          154.221.179.0/24 maxlen: 24
                          154.221.180.0/24 maxlen: 24
                          154.221.181.0/24 maxlen: 24
                          154.221.182.0/24 maxlen: 24
                          154.221.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123780 (0x1e384)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 26 12:30:34 2026 GMT
            Not After : Aug 25 12:30:34 2029 GMT
        Subject: CN=6a8edc6e-3277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3b:79:e7:b0:22:ad:bf:0b:e9:87:e3:e6:eb:
                    6c:05:be:5d:06:2a:54:6b:51:65:23:99:0b:93:1d:
                    1e:08:3d:6a:79:9d:68:9a:71:b0:eb:fd:79:ef:22:
                    ec:44:41:92:2c:66:53:64:c7:1b:8f:7e:bd:67:67:
                    17:38:8f:89:22:71:60:c2:b2:7f:13:01:04:46:87:
                    55:4e:16:d8:cc:ab:2f:32:58:22:f0:a6:85:d2:19:
                    ef:72:dd:49:d1:23:40:1d:3f:cb:90:72:96:5e:f4:
                    8d:99:78:d0:a4:67:13:67:5c:33:23:47:64:37:90:
                    5a:e0:53:e3:9f:c1:a5:90:64:e4:13:4b:03:02:59:
                    b7:bf:65:11:d4:e3:f1:7c:ee:42:0c:19:06:36:18:
                    f5:31:2e:fc:00:b1:22:a4:46:19:16:0b:72:3d:35:
                    af:39:84:2f:ad:83:6e:fd:08:04:37:a3:3b:3e:ea:
                    2c:4c:6d:f3:92:f4:8c:a3:96:5a:62:49:b8:fe:a1:
                    7f:32:c3:32:ba:5c:f3:c5:23:20:17:06:ee:81:e5:
                    cd:ca:86:a2:1e:4e:29:50:e4:98:c6:c5:28:e4:fb:
                    4b:7e:6e:c9:ad:65:08:aa:7d:df:1b:04:ec:96:0e:
                    01:94:18:95:f1:dc:67:f9:a2:78:a1:39:38:df:ce:
                    9a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:90:B8:A7:06:0E:16:5E:B3:3D:D7:47:3C:BB:E1:58:AB:E0:A4:DD
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F149C1B6A14911F193104011CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.221.174.0-154.221.183.255

    Signature Algorithm: sha256WithRSAEncryption
         be:e3:42:92:ed:7a:3c:d4:e4:1a:09:7b:f0:23:26:1b:14:2a:
         3d:83:dc:82:32:86:eb:71:f3:df:82:b3:2c:39:33:f0:39:36:
         54:aa:0c:69:5d:10:b8:df:f7:57:59:56:1f:99:be:ed:66:9e:
         40:2e:d1:5d:dc:8c:ba:de:b2:1d:47:09:82:b0:dc:f4:8b:97:
         4b:a5:81:38:cc:8d:53:d2:8d:2e:94:7c:52:9a:00:34:1b:ea:
         1b:f8:94:a4:c0:6c:5e:10:5d:d4:62:25:e1:3a:4f:6b:6a:f4:
         4e:28:a4:79:a3:6b:7c:2c:ee:62:6a:a9:a3:70:c5:d8:9f:85:
         b3:d4:68:71:ce:8c:e6:c0:78:21:cc:ae:cf:20:57:9c:c1:aa:
         8d:ce:fe:28:34:f5:f6:e5:16:4c:46:46:5e:98:50:3d:cf:2d:
         c8:2f:62:ad:3e:b2:a2:f3:33:92:31:98:4a:ee:29:f8:fc:46:
         74:0b:56:50:94:94:32:2c:af:77:9d:18:99:95:36:d8:19:4c:
         f0:ab:13:3e:32:5a:fd:03:0a:ba:2d:8e:11:56:f4:53:39:42:
         2d:8f:51:73:d0:de:e9:41:2b:3f:aa:3e:2e:8a:21:c1:b6:63:
         75:7c:7f:0c:12:81:b0:34:61:75:1b:a8:47:e0:db:40:76:7b:
         b4:fa:d3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----