Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7068ECEEACEC11F1BE0DB506CF1D38B0.roa
File:                     7068ECEEACEC11F1BE0DB506CF1D38B0.roa (raw, json)
Hash identifier:          7Gb9SMpsZK2qPDdXmDOngcEei7Ykf0pS2yz9Ukdx7fA=
Subject key identifier:   52:37:ED:D5:D5:33:B2:E7:A3:4C:40:B6:6D:ED:CC:C4:9F:2E:99:0D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E6F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7068ECEEACEC11F1BE0DB506CF1D38B0.roa
Signing time:             Thu 10 Sep 2026 07:51:33 +0000
ROA not before:           Thu 10 Sep 2026 07:51:28 +0000
ROA not after:            Sat 17 Oct 2026 07:51:28 +0000
asID:                     22773
IP address blocks:        154.202.110.0/24 maxlen: 24
                          154.202.112.0/24 maxlen: 24
                          154.202.113.0/24 maxlen: 24
                          154.202.114.0/24 maxlen: 24
                          154.202.116.0/24 maxlen: 24
                          154.202.137.0/24 maxlen: 24
                          154.213.192.0/24 maxlen: 24
                          154.213.200.0/24 maxlen: 24
                          154.213.201.0/24 maxlen: 24
                          154.213.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124659 (0x1e6f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 10 07:51:28 2026 GMT
            Not After : Oct 17 07:51:28 2026 GMT
        Subject: CN=6aa26184-7507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:37:f7:e5:1a:f5:59:70:91:1b:68:f9:a3:29:
                    c4:52:73:3d:69:5f:d6:f3:1c:47:0d:c6:e9:3d:1a:
                    d9:cb:7c:b8:38:33:17:b8:52:88:d5:b7:56:09:aa:
                    26:1f:02:58:7e:50:1f:c4:db:82:8e:84:a2:26:57:
                    ee:11:90:05:1e:e1:69:ea:b1:d6:e7:b9:3e:55:6b:
                    4d:04:ae:0a:8c:41:43:fd:10:66:23:e5:31:e6:e9:
                    50:5e:7f:65:49:b2:e3:a0:a3:32:42:3f:9f:63:85:
                    89:56:b0:4d:a6:a0:b9:4f:d3:51:f8:1b:40:67:dd:
                    cf:2a:bc:5d:4f:35:3c:36:87:df:88:56:40:79:7c:
                    51:57:9a:6c:b6:42:bd:e7:d2:57:da:16:d2:a6:56:
                    a4:74:c4:09:65:47:b8:b0:85:c2:95:70:75:b0:f4:
                    b2:64:b2:33:38:75:6d:e8:62:c7:2e:37:4a:07:93:
                    db:a6:9a:4e:c8:80:f4:1d:c7:2e:b6:9e:9a:88:00:
                    8e:28:5c:05:b3:a7:54:48:86:c9:54:31:b0:0b:05:
                    d2:92:9a:9c:3b:81:9f:88:ed:45:1c:dd:5a:6e:05:
                    af:ef:11:94:20:a2:46:8e:07:8a:e1:8d:cf:f0:d8:
                    84:bc:02:64:b0:d6:a5:67:fb:33:f0:0d:60:f2:f9:
                    bd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:37:ED:D5:D5:33:B2:E7:A3:4C:40:B6:6D:ED:CC:C4:9F:2E:99:0D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7068ECEEACEC11F1BE0DB506CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.110.0/24
                  154.202.112.0-154.202.114.255
                  154.202.116.0/24
                  154.202.137.0/24
                  154.213.192.0/24
                  154.213.200.0/23
                  154.213.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:8a:53:1a:84:a5:04:e5:db:d9:b6:a0:b4:11:05:d5:49:55:
         99:e1:61:95:57:49:c0:3e:6f:9e:5b:74:9a:65:44:7f:bd:e0:
         04:1c:8e:1c:f7:19:5e:f5:d1:08:f2:80:4c:bd:96:e9:8f:de:
         d3:49:3a:62:94:bc:de:e2:bf:50:7c:8d:76:9c:01:70:bb:dd:
         aa:d8:b9:2a:a0:73:f0:f0:99:4b:0e:d6:c2:a3:b7:79:21:77:
         34:5a:ba:53:12:36:91:5d:3a:cd:1c:ed:e2:a5:eb:48:52:3e:
         a5:98:92:b5:71:67:63:5e:da:c7:b6:d8:2b:7d:7a:e1:75:e6:
         52:2b:c5:e4:d3:09:aa:7d:40:7c:3f:73:7e:23:a2:95:f4:30:
         f8:40:8d:a4:68:ae:4d:8e:35:14:b2:37:3c:a3:44:c9:4f:17:
         85:58:81:8e:5f:35:02:0b:1d:30:3f:e6:0f:25:93:10:44:bc:
         cd:81:60:8b:0c:ec:62:c7:68:aa:00:a6:5b:09:1f:91:6c:ef:
         e0:14:71:f5:37:73:04:eb:5c:1b:23:c9:3b:8c:b5:8a:71:6a:
         59:a2:e2:2f:db:37:73:6c:58:69:98:dc:1d:2b:81:a2:07:a0:
         4d:93:43:71:a9:32:53:50:5e:f8:25:ec:66:73:c0:bd:b5:43:
         ab:07:73:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----