Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64C392B8A0C111F1B4C5FBCCCE1D38B0.roa
File:                     64C392B8A0C111F1B4C5FBCCCE1D38B0.roa (raw, json)
Hash identifier:          rnko57r9dUPqRNoYMfcNS8HvL/MnIK0P4sH55APDSyM=
Subject key identifier:   87:64:33:1C:CA:1A:A3:0B:B3:C6:F2:E8:99:04:F6:90:FA:39:F4:20
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E303
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64C392B8A0C111F1B4C5FBCCCE1D38B0.roa
Signing time:             Tue 25 Aug 2026 20:13:11 +0000
ROA not before:           Tue 25 Aug 2026 20:13:06 +0000
ROA not after:            Fri 06 Nov 2026 20:13:06 +0000
asID:                     328608
IP address blocks:        154.200.188.0/24 maxlen: 24
                          154.200.205.0/24 maxlen: 24
                          154.200.206.0/24 maxlen: 24
                          154.200.207.0/24 maxlen: 24
                          154.200.208.0/24 maxlen: 24
                          154.200.209.0/24 maxlen: 24
                          154.200.210.0/24 maxlen: 24
                          154.200.211.0/24 maxlen: 24
                          154.200.212.0/24 maxlen: 24
                          154.200.213.0/24 maxlen: 24
                          154.200.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123651 (0x1e303)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 25 20:13:06 2026 GMT
            Not After : Nov  6 20:13:06 2026 GMT
        Subject: CN=6a8df757-7873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:56:ce:e2:ee:f8:62:6d:1a:e4:10:d5:3a:5d:
                    57:8c:b0:87:79:fc:0c:69:25:76:aa:ed:de:57:29:
                    db:8b:80:e6:7b:39:1d:26:7c:d7:b6:e6:27:e9:58:
                    a4:c5:4f:bf:7d:ae:e5:e6:83:1e:56:39:18:42:05:
                    13:03:10:93:dc:ed:b6:8f:79:52:e9:27:8e:0b:15:
                    6e:7a:b2:64:98:08:59:5b:53:5a:48:ea:69:c3:a0:
                    45:1a:07:21:0f:51:9e:72:4a:25:e6:d8:c5:13:52:
                    65:69:e5:5c:c8:e1:84:40:b0:53:67:9a:ab:cc:ea:
                    ea:41:93:46:4d:3d:68:f7:59:ce:de:a6:75:c9:65:
                    93:57:61:ea:d0:78:69:5f:ac:30:de:d0:35:d6:4e:
                    80:ad:12:c1:e7:a0:4b:31:e4:78:4f:32:84:25:2e:
                    bb:18:34:c1:ed:81:9f:38:53:95:e5:ce:ce:6e:44:
                    3a:7d:4e:4c:aa:ba:96:9d:56:ca:e6:3b:fd:cd:cd:
                    6d:57:ac:b1:2a:3d:24:61:ae:9c:c8:ee:b8:a1:05:
                    91:d4:2f:2c:ac:eb:61:04:b4:4f:5c:16:48:62:02:
                    ce:93:21:7e:2b:d3:33:b5:2a:24:e2:65:96:23:e2:
                    08:13:98:c6:d3:1f:00:02:cf:e6:fb:b4:ef:0e:aa:
                    aa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:64:33:1C:CA:1A:A3:0B:B3:C6:F2:E8:99:04:F6:90:FA:39:F4:20
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64C392B8A0C111F1B4C5FBCCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.188.0/24
                  154.200.205.0-154.200.213.255
                  154.200.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:94:56:d4:b8:d1:69:c6:e6:ab:4c:c8:3f:0b:b0:91:a0:01:
         04:f9:b8:8a:53:fc:7a:b4:31:3f:48:c9:3d:60:04:38:32:5d:
         5e:86:74:ea:3a:5d:60:61:54:e9:da:92:33:4e:4d:37:99:98:
         79:4e:4a:42:10:5a:17:bf:d4:4c:ee:fd:80:2d:46:3d:a0:0d:
         e8:b9:d2:19:55:00:c1:7d:74:7d:52:ed:b0:90:f1:30:9b:60:
         7a:bb:e8:77:84:c1:3d:6b:d9:fa:93:ef:ff:97:70:9b:21:70:
         46:5a:79:e4:e5:d1:70:aa:3b:5a:65:28:c2:47:df:55:cf:c3:
         28:d1:71:41:69:85:10:58:80:b2:2d:cc:7c:d3:73:fa:17:3f:
         e0:cd:01:b1:dd:a2:6b:e5:13:f1:d4:ff:d0:33:99:66:02:fc:
         b6:eb:e0:66:f9:14:57:c8:79:d1:79:88:43:12:2b:19:3d:a2:
         0d:e0:2f:bc:33:ec:88:6a:64:9b:72:e2:58:e6:30:c8:86:5f:
         41:25:d9:e3:c7:3c:b6:cb:18:c0:39:09:17:64:e2:e7:04:cd:
         ae:53:e5:35:4b:98:1c:d7:82:72:73:41:f5:63:02:f7:56:a3:
         e4:9d:45:3f:78:6f:d4:e7:c2:1a:5a:5b:5c:b0:9d:0c:fd:8c:
         d9:d8:4e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----