Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BADFAAC6A51511F1B321D114CF1D38B0.roa
File:                     BADFAAC6A51511F1B321D114CF1D38B0.roa (raw, json)
Hash identifier:          tVNdY3+tayHrVQG9sVlni0weu9yoo6liWQRjKuoidD8=
Subject key identifier:   BE:65:11:73:30:88:60:F7:4B:D3:D1:B3:9E:50:21:32:59:92:97:05
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E449
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BADFAAC6A51511F1B321D114CF1D38B0.roa
Signing time:             Mon 31 Aug 2026 08:26:58 +0000
ROA not before:           Mon 31 Aug 2026 08:26:53 +0000
ROA not after:            Thu 08 Oct 2026 08:26:53 +0000
asID:                     272092
IP address blocks:        154.83.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123977 (0x1e449)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 31 08:26:53 2026 GMT
            Not After : Oct  8 08:26:53 2026 GMT
        Subject: CN=6a953ad2-a37d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:eb:84:d6:6c:70:68:1c:07:61:80:92:1d:a5:
                    07:64:23:2d:47:9d:cb:77:a2:f3:a8:22:e2:4a:bd:
                    5d:3b:6f:cf:23:42:f4:8c:7b:c0:59:53:0f:a0:01:
                    6b:57:e0:92:e5:9f:a7:95:e1:fa:84:c6:0a:25:dc:
                    f3:a3:59:4c:ca:08:9f:19:fb:18:27:38:c0:f2:0d:
                    e4:e5:83:65:27:3a:34:33:3c:b8:57:f2:02:56:75:
                    a9:89:f3:b1:c9:a1:d0:97:a3:80:17:7c:09:00:58:
                    b6:3b:d2:b8:c5:3a:3c:fe:70:a7:36:da:3b:fc:eb:
                    01:c4:c6:7b:33:29:53:0d:86:d7:04:73:7b:74:82:
                    ad:36:a6:c3:05:a3:0f:0e:a8:c0:ec:b6:8d:1d:ab:
                    21:e5:47:63:8e:55:2f:14:b8:2d:e2:ad:ee:11:6f:
                    8e:91:15:50:78:74:4e:08:b2:a9:bd:84:65:a3:e2:
                    f4:30:e1:49:da:7c:a5:fb:1e:f1:48:95:24:71:a5:
                    92:a0:f3:37:85:ff:12:33:02:5e:2f:ed:82:74:fa:
                    6e:99:4e:cb:bf:f7:c2:c1:7c:60:cb:ae:d0:b4:a4:
                    c9:d0:3b:6b:28:79:d7:2f:e7:af:e5:8d:87:ee:90:
                    5d:a7:50:9a:83:16:33:92:ba:8c:52:62:d1:8d:cf:
                    68:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:65:11:73:30:88:60:F7:4B:D3:D1:B3:9E:50:21:32:59:92:97:05
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BADFAAC6A51511F1B321D114CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:1a:4a:ae:4e:84:9c:c8:58:7a:05:52:d7:9f:8a:c0:6e:02:
         38:d4:eb:8c:12:a8:0c:b9:93:6a:05:96:69:c6:65:d1:40:ad:
         c3:f6:5c:9c:cf:79:1a:1a:5e:49:3f:b7:97:ac:a9:0f:2b:bb:
         99:61:2b:14:f1:21:85:ad:61:90:ad:b7:00:b1:cb:1d:e4:8b:
         c1:7d:e7:eb:71:cc:40:9e:a6:c4:4a:1a:bd:ea:5e:44:cb:58:
         9d:db:d3:27:60:d0:48:8b:a4:b9:33:2f:64:88:9c:b8:cb:2e:
         f2:ae:a9:0b:df:14:9b:fd:2f:0a:df:74:8f:a8:a0:08:98:fe:
         de:39:15:43:af:a9:a0:3c:9f:85:4c:db:54:98:57:f2:2a:65:
         93:a6:f7:a6:50:77:59:a9:9c:d9:00:64:83:c7:c4:1f:5f:32:
         06:32:86:1a:3e:f8:0a:97:b1:91:90:fb:07:b3:8f:15:cd:50:
         35:ba:0e:13:43:8b:c1:9b:f4:a7:0a:68:89:97:50:d7:e1:39:
         6a:fb:14:8b:b0:25:0c:15:f7:a1:0c:b6:65:b2:4a:ee:c2:d2:
         89:4e:9b:90:70:ca:73:4d:8c:b7:d5:66:80:a3:02:56:f7:0f:
         d2:2a:51:52:0f:cb:4d:84:1c:a2:02:d2:00:bd:ec:7b:e5:6c:
         a7:47:84:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----