Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76CEA232994A11F1BA2C6EE3CE1D38B0.roa
File:                     76CEA232994A11F1BA2C6EE3CE1D38B0.roa (raw, json)
Hash identifier:          CGR/EE8d5L5EV4J9AliVgjvcfbTIk4KWYR7ueM5S2bM=
Subject key identifier:   C5:6B:90:B1:A0:83:20:0D:98:55:E4:5B:4F:A3:E1:41:3C:FC:DA:AB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DF52
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76CEA232994A11F1BA2C6EE3CE1D38B0.roa
Signing time:             Sun 16 Aug 2026 08:14:13 +0000
ROA not before:           Sun 16 Aug 2026 08:14:08 +0000
ROA not after:            Tue 22 Sep 2026 08:14:08 +0000
asID:                     7843
IP address blocks:        154.199.160.0/19 maxlen: 24
                          154.199.224.0/19 maxlen: 24
                          154.202.32.0/19 maxlen: 24
                          154.207.32.0/19 maxlen: 24
                          154.207.64.0/18 maxlen: 24
                          154.207.192.0/18 maxlen: 24
                          154.212.32.0/19 maxlen: 24
                          154.219.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122706 (0x1df52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 16 08:14:08 2026 GMT
            Not After : Sep 22 08:14:08 2026 GMT
        Subject: CN=6a817155-aff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:66:17:40:4d:77:c4:70:3a:f9:1c:5d:d4:bb:
                    a9:be:44:04:bd:50:e0:65:31:fb:a4:9c:d4:ed:c0:
                    5b:8a:1c:37:3a:3d:a0:b0:ce:c2:54:de:a3:3f:64:
                    98:0c:bf:0d:d6:2a:39:d9:58:d6:1d:51:95:fe:14:
                    c9:b3:4e:d5:82:3b:a0:4f:57:7e:ca:0c:31:83:ff:
                    1b:aa:86:51:93:0a:51:36:39:6b:99:d7:98:dc:79:
                    dd:bc:93:4d:7e:33:3b:2d:ac:80:0b:f2:12:b4:f7:
                    3c:ae:59:74:18:22:30:28:4a:4e:a5:b3:5e:a2:93:
                    d2:25:f8:df:d1:bf:41:1f:d7:21:c0:e0:b7:24:1b:
                    f5:fa:4a:6a:ca:56:3b:7f:a9:1f:77:45:79:41:db:
                    54:56:90:bb:a1:03:f2:28:33:bb:d1:ad:ca:61:02:
                    e7:c6:db:de:3d:69:8e:5f:f6:84:13:5a:5f:1d:a1:
                    28:dc:3c:d8:b7:be:c1:80:2c:86:b7:5e:b1:c2:b2:
                    24:1f:8e:71:42:ea:23:eb:18:db:b2:5b:85:e7:46:
                    e8:74:9b:77:cd:c2:1a:57:7f:60:23:0d:9c:3b:0d:
                    2f:09:b8:9b:68:77:0e:d2:0a:f0:eb:0d:0b:f5:9c:
                    57:fa:0b:88:0f:c2:5b:25:36:79:13:64:be:6d:68:
                    3a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6B:90:B1:A0:83:20:0D:98:55:E4:5B:4F:A3:E1:41:3C:FC:DA:AB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76CEA232994A11F1BA2C6EE3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.199.160.0/19
                  154.199.224.0/19
                  154.202.32.0/19
                  154.207.32.0-154.207.127.255
                  154.207.192.0/18
                  154.212.32.0/19
                  154.219.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         09:9c:f4:e4:a9:8d:e1:98:5f:01:49:e6:e7:cb:8a:77:be:6b:
         61:cd:6c:d3:9e:a6:01:1c:c9:3b:a4:c6:8a:11:49:92:f9:1f:
         34:65:1b:70:87:3e:d0:7d:57:a0:91:dc:61:02:6b:b0:07:8a:
         6b:9c:7f:b1:bd:88:aa:4b:9a:ec:1e:1a:71:1d:a6:b4:e2:83:
         33:30:9b:19:03:f9:08:65:ef:b3:64:20:ab:03:ba:45:c8:e6:
         f8:59:28:2b:2c:fd:60:5b:b6:bf:79:24:77:62:c9:16:72:fd:
         1b:e4:d6:8d:fa:a7:31:4d:e3:3d:c4:ca:ca:03:f5:b0:c6:17:
         8a:a3:83:5b:05:d2:ed:6a:68:0a:26:55:c5:ca:88:b9:0f:2d:
         8b:48:98:6d:3a:dc:69:f8:9a:f2:cb:58:48:72:4a:d3:8c:1a:
         52:98:a8:4b:fe:f8:0c:ac:f2:ed:71:9f:d1:af:7b:29:89:51:
         41:8e:16:f0:ed:82:84:23:36:d5:e6:a5:4c:95:01:ef:2f:3b:
         15:0f:fb:1b:ac:a0:92:1f:6b:27:f9:3d:24:72:42:01:59:c2:
         20:b8:16:cd:d0:70:36:9d:c9:86:53:54:90:82:2d:ff:38:10:
         b7:36:2a:ce:79:b0:c4:4c:c2:ab:0c:85:a2:c9:e6:01:98:34:
         ba:04:7c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----