Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/043F2B14A9CC11F19DA82F19CF1D38B0.roa
File:                     043F2B14A9CC11F19DA82F19CF1D38B0.roa (raw, json)
Hash identifier:          xVtUpYSWg9D8UtaA7HE6rkqq+LNF1gWel9rffQm+gn0=
Subject key identifier:   16:C9:CC:DB:F7:E6:B8:B4:4A:7B:2A:6F:0C:0D:0B:8A:A6:41:5B:61
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E5DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/043F2B14A9CC11F19DA82F19CF1D38B0.roa
Signing time:             Sun 06 Sep 2026 08:21:54 +0000
ROA not before:           Sun 06 Sep 2026 08:21:50 +0000
ROA not after:            Wed 07 Oct 2026 08:21:50 +0000
asID:                     153517
IP address blocks:        154.86.16.0/20 maxlen: 24
                          154.86.16.0/21 maxlen: 24
                          154.86.16.0/22 maxlen: 24
                          154.86.16.0/23 maxlen: 24
                          154.86.18.0/23 maxlen: 24
                          154.86.20.0/22 maxlen: 24
                          154.86.20.0/23 maxlen: 24
                          154.86.24.0/21 maxlen: 24
                          154.86.24.0/22 maxlen: 24
                          154.86.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124383 (0x1e5df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  6 08:21:50 2026 GMT
            Not After : Oct  7 08:21:50 2026 GMT
        Subject: CN=6a9d22a2-d680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:16:c5:26:1f:67:ae:1c:30:1b:7c:8f:a3:
                    b7:aa:59:f6:05:68:81:e9:6c:da:ce:fe:0e:b5:c7:
                    1b:30:bb:42:a0:fb:df:79:86:aa:04:0d:96:66:87:
                    bd:4d:7a:b2:25:6a:5c:3a:f7:76:14:ef:28:d7:eb:
                    25:92:3b:70:07:47:72:3d:89:78:69:6f:78:07:df:
                    d6:cd:1d:a6:54:bb:b5:9b:8b:e6:9b:5b:68:02:2c:
                    09:dc:f9:8a:8a:15:f6:8e:bd:bb:c2:7c:c9:e9:77:
                    9b:e4:9e:1e:ed:6e:5c:a5:8c:e9:fe:89:b1:55:8f:
                    c5:a1:ec:f3:d3:1d:2f:99:02:2e:fb:26:50:ef:d2:
                    dd:0f:41:fe:4d:fc:33:99:37:5d:6e:31:bd:ff:6c:
                    2e:1c:eb:c6:10:ce:da:f8:15:86:cb:a5:19:71:82:
                    64:a2:5d:a4:90:e5:b8:55:36:52:d1:bf:61:59:c9:
                    5f:77:ee:ff:0b:f9:99:19:a2:42:1e:11:8d:b0:96:
                    25:a0:f2:fb:a5:bf:83:32:e9:a2:12:61:71:f7:87:
                    1e:c8:1b:01:6a:f5:e8:35:c2:73:ee:48:3f:5f:33:
                    5e:1d:28:41:23:fa:bf:7b:85:9c:ea:cb:9e:7f:53:
                    bd:34:de:18:95:c3:60:70:40:fa:ba:6d:64:d3:e1:
                    38:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C9:CC:DB:F7:E6:B8:B4:4A:7B:2A:6F:0C:0D:0B:8A:A6:41:5B:61
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/043F2B14A9CC11F19DA82F19CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         71:25:6c:73:c4:31:6e:90:88:af:c5:af:66:08:5b:c7:49:64:
         d9:b8:52:17:bc:32:3a:f7:df:ac:58:6b:fc:92:92:b3:5e:fe:
         6c:7e:0c:48:9a:dc:af:91:ff:b3:98:c9:b2:c1:22:40:a0:58:
         fd:e4:11:f6:b4:77:56:c6:50:d1:c9:4e:37:86:b5:1a:b3:8c:
         be:71:40:0d:44:3d:44:0c:4d:5a:f0:c9:e8:88:01:3a:7e:97:
         de:e5:b2:07:8d:99:50:b2:9c:e7:40:7c:52:1c:d1:43:c2:a6:
         4f:f2:57:a9:c8:b0:20:1e:f5:d6:6e:ed:a7:ac:9e:c2:1f:9d:
         7a:9b:60:6f:ec:53:d0:f1:f5:95:67:e9:da:10:ab:79:76:61:
         f5:e6:e1:18:dc:85:07:3d:c3:61:91:da:3b:4f:94:5f:cb:56:
         fe:18:d5:24:d9:5b:23:c7:1d:1c:c7:e4:5a:c5:70:79:88:85:
         92:a9:90:19:fb:ad:08:ec:8f:30:1b:9d:d6:f8:dd:12:bb:a2:
         82:9d:87:c5:42:a7:36:bf:97:4f:b5:6d:30:06:ac:d7:8b:ee:
         5b:c4:8b:be:07:17:f5:df:1d:86:23:76:23:a4:8d:09:27:b8:
         65:45:74:8e:5b:41:9a:87:48:e8:2e:d9:6b:48:38:9d:95:b3:
         68:e0:42:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----