Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EBADE94B4E911F18BFD01C4CE1D38B0.roa
File:                     0EBADE94B4E911F18BFD01C4CE1D38B0.roa (raw, json)
Hash identifier:          7xvuYSdxoLn2Gzb1LqPjkMouRVkBV11QngjqKvLeK+E=
Subject key identifier:   54:56:3F:57:D6:9A:BE:2F:9B:0D:4B:BE:27:AD:EC:9F:4C:DD:37:5C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E927
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EBADE94B4E911F18BFD01C4CE1D38B0.roa
Signing time:             Sun 20 Sep 2026 11:47:30 +0000
ROA not before:           Sun 20 Sep 2026 11:45:55 +0000
ROA not after:            Tue 27 Oct 2026 11:45:55 +0000
asID:                     154177
IP address blocks:        154.205.151.0/24 maxlen: 24
                          154.205.152.0/24 maxlen: 24
                          154.205.153.0/24 maxlen: 24
                          154.205.154.0/24 maxlen: 24
                          154.205.156.0/24 maxlen: 24
                          154.205.158.0/24 maxlen: 24
                          154.205.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125223 (0x1e927)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 20 11:45:55 2026 GMT
            Not After : Oct 27 11:45:55 2026 GMT
        Subject: CN=6aafc7d1-ef65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5a:0b:22:48:a1:b6:a4:37:f5:d3:f8:06:ba:
                    f6:10:16:d7:cc:8c:66:5d:ee:b8:b5:90:9f:7e:5a:
                    82:c0:66:d3:7d:b6:ed:6f:2b:f9:0b:af:01:cc:f8:
                    81:a3:69:3d:8a:14:a1:a5:0f:20:46:d8:e4:08:81:
                    d4:fc:e0:9e:11:4b:dd:a0:f6:bd:d6:41:64:f1:bc:
                    a9:c7:b9:d4:ed:b4:c0:b2:16:56:fd:65:8a:a5:da:
                    30:fc:db:a7:09:46:2e:3e:7b:7c:09:3d:01:8f:5c:
                    d0:77:b6:d5:40:0d:af:b8:fa:3d:bd:5b:f7:3b:84:
                    e3:fe:e0:f4:14:1a:3c:ce:04:8f:85:24:5e:62:f8:
                    f3:76:44:bc:da:4d:ea:8c:50:66:ae:fb:4b:9b:8a:
                    15:57:e1:e6:da:87:0a:23:61:68:72:31:48:79:4f:
                    a6:a5:4e:17:c3:3d:d0:bb:9b:f8:36:67:86:c5:f4:
                    c2:c1:00:c0:e2:a6:2d:7f:bc:be:b1:81:64:51:91:
                    46:71:29:d1:e1:00:1d:a0:6e:be:92:b1:97:f0:0d:
                    c0:a5:08:52:15:6c:0a:e9:4a:e4:8e:f3:e3:24:60:
                    de:21:61:c7:56:8e:1c:71:24:70:6a:1f:42:9d:ae:
                    df:5d:2f:64:55:fd:03:35:36:99:68:eb:75:75:1e:
                    25:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:56:3F:57:D6:9A:BE:2F:9B:0D:4B:BE:27:AD:EC:9F:4C:DD:37:5C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EBADE94B4E911F18BFD01C4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.151.0-154.205.154.255
                  154.205.156.0/24
                  154.205.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:d3:82:01:09:48:4e:12:4c:d3:cc:a0:c3:90:3d:b5:68:8e:
         b7:17:c4:44:23:53:35:0e:3c:be:75:52:61:29:e5:96:d3:8f:
         d9:3a:84:68:27:75:14:c5:fc:22:78:ed:ec:88:e8:4e:c4:60:
         e6:3f:61:f1:39:a9:72:5b:b6:f3:1e:b9:73:c1:ed:16:e0:a9:
         a6:eb:12:e9:e4:a5:57:a3:b1:60:a0:e4:e4:36:2d:1e:71:d1:
         e4:b4:ba:98:47:6d:24:71:48:73:c0:ab:78:56:40:27:11:1a:
         41:c5:2f:e4:d7:93:74:37:67:94:58:f9:59:7a:fc:d3:82:29:
         40:59:f8:04:7c:ae:e6:a8:21:55:db:e5:83:54:d9:b7:6b:2c:
         57:4a:1f:68:60:86:05:82:2a:2e:88:09:1d:eb:99:6a:a4:2d:
         7a:59:01:fe:4e:e7:2e:9e:26:39:4e:c2:4b:d9:04:b6:22:3e:
         04:cd:b7:95:de:61:af:a6:7e:af:25:1f:5f:58:25:e0:ba:56:
         5e:70:e7:3a:49:56:7e:5c:24:96:ce:cb:b3:0a:92:3d:0f:02:
         5e:14:90:8a:28:3f:85:52:d8:df:e6:78:cc:cd:5e:9d:2e:49:
         84:bc:c0:2b:a6:4e:69:7b:22:90:1b:7d:c4:6c:4d:c6:6a:e5:
         a3:9f:cf:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----