Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC16083E9DEC11F1A7B20CFACE1D38B0.roa
File:                     BC16083E9DEC11F1A7B20CFACE1D38B0.roa (raw, json)
Hash identifier:          aigj+7SsmyF/ZLLFI8hrp7oaHhy+xxIF/Z4vo4g/4h0=
Subject key identifier:   C7:50:08:3E:D5:B6:23:55:A8:DD:0B:ED:98:93:E8:D6:FB:ED:F4:AA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E1B3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC16083E9DEC11F1A7B20CFACE1D38B0.roa
Signing time:             Sat 22 Aug 2026 05:45:52 +0000
ROA not before:           Sat 22 Aug 2026 05:45:48 +0000
ROA not after:            Sat 03 Oct 2026 05:45:48 +0000
asID:                     198969
IP address blocks:        154.83.177.0/24 maxlen: 24
                          154.83.178.0/24 maxlen: 24
                          154.83.179.0/24 maxlen: 24
                          154.83.180.0/24 maxlen: 24
                          154.83.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123315 (0x1e1b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 22 05:45:48 2026 GMT
            Not After : Oct  3 05:45:48 2026 GMT
        Subject: CN=6a893790-950d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:05:57:92:ec:fa:07:1b:3b:ad:c7:98:47:61:
                    7f:df:e7:c2:ec:94:4b:5d:6c:30:9a:89:1d:ee:ab:
                    65:5f:a0:ff:80:08:f1:bc:83:df:33:28:26:f6:91:
                    48:5a:71:fc:d4:64:a9:fe:8b:2d:32:e6:b1:ff:f5:
                    0a:2d:1a:ac:c9:8b:46:3a:c1:e4:b2:99:d5:bc:84:
                    92:b0:2d:00:dd:56:a8:a7:97:57:b4:9d:3e:b0:1e:
                    5f:04:d7:bf:24:c0:c4:aa:7f:5d:19:2d:6b:15:9f:
                    e9:a1:73:da:59:4f:89:d1:9e:8b:cd:b6:f4:3c:32:
                    15:e0:3c:b2:74:a4:46:d7:5e:70:0d:95:78:2e:55:
                    5e:f4:b1:a3:94:41:27:7f:51:dd:b7:98:ed:cf:3e:
                    a5:cc:39:d7:5c:9a:b9:ad:98:74:79:31:53:ca:ae:
                    c4:49:6d:0c:ed:90:78:a0:79:c6:f7:ae:e7:14:b9:
                    15:4e:f0:01:e3:ba:92:de:43:a5:64:5d:fb:57:be:
                    48:63:8d:49:c5:27:8b:89:b0:b3:4f:ae:d1:68:33:
                    da:8d:bf:e2:c2:41:1a:c9:f8:f0:c0:8a:52:b4:46:
                    5b:34:4a:c1:a9:b4:86:61:12:9a:48:7e:12:2f:c5:
                    bc:a8:89:e2:2d:cd:c9:10:89:4b:ce:d4:6a:db:ed:
                    c4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:50:08:3E:D5:B6:23:55:A8:DD:0B:ED:98:93:E8:D6:FB:ED:F4:AA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC16083E9DEC11F1A7B20CFACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.177.0-154.83.181.255

    Signature Algorithm: sha256WithRSAEncryption
         61:34:d7:fa:cb:c1:16:f2:41:6f:92:b9:ed:f9:af:17:6b:0c:
         a4:e1:fa:18:f2:83:6a:0f:1e:ad:52:d8:1a:1c:5d:35:28:86:
         e1:d6:fc:cb:20:96:a1:ca:cb:ab:93:2e:37:f8:95:0c:1c:bf:
         47:17:c3:f4:c3:ff:98:8d:07:19:a5:cb:c9:ba:9e:b6:49:65:
         a3:8a:6b:f6:19:50:86:f0:26:2f:5a:bc:7f:8c:12:a6:5d:78:
         5d:67:98:3b:b8:a1:e8:24:9e:6e:a2:4a:6a:b1:d2:ff:86:6e:
         18:76:8e:67:5b:6a:74:9e:47:bb:ba:c5:e6:bb:63:7c:82:b5:
         21:e4:36:4a:c9:fe:bc:16:1e:80:d3:43:96:7a:09:22:af:33:
         43:97:b6:90:1b:ea:3e:84:83:d5:ee:e0:57:ad:c3:9f:b6:aa:
         3a:43:0b:6d:f4:87:7b:97:e7:f9:1a:18:d3:14:56:ec:fc:58:
         35:bf:bc:3c:14:fb:f1:54:05:ed:39:de:43:99:c9:ce:7f:cd:
         f6:ba:ef:ed:fb:08:eb:71:19:19:54:13:6d:30:37:96:aa:e0:
         53:de:eb:e8:0a:43:c3:dc:b3:25:22:57:5c:9a:59:fa:6f:ca:
         65:f8:5d:8f:42:16:7b:fa:64:ac:33:73:6d:58:47:81:28:2e:
         93:09:5a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----