Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A9D7B12AAD911F1A3A97BEBCE1D38B0.roa
File:                     8A9D7B12AAD911F1A3A97BEBCE1D38B0.roa (raw, json)
Hash identifier:          kXz5vPu0AZyxFbnOoX4WFAqOZkXz+eBu3B0oJdAr/bE=
Subject key identifier:   53:4C:87:DD:82:7F:E4:8D:D7:92:52:38:A8:5F:D3:5D:BC:69:70:F1
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E632
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A9D7B12AAD911F1A3A97BEBCE1D38B0.roa
Signing time:             Mon 07 Sep 2026 16:31:14 +0000
ROA not before:           Mon 07 Sep 2026 16:31:10 +0000
ROA not after:            Sun 15 Aug 2027 16:31:10 +0000
asID:                     36898
IP address blocks:        154.214.212.0/24 maxlen: 24
                          154.214.214.0/24 maxlen: 24
                          154.214.215.0/24 maxlen: 24
                          154.214.216.0/24 maxlen: 24
                          154.214.217.0/24 maxlen: 24
                          154.214.221.0/24 maxlen: 24
                          154.214.222.0/24 maxlen: 24
                          154.214.223.0/24 maxlen: 24
                          154.214.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124466 (0x1e632)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  7 16:31:10 2026 GMT
            Not After : Aug 15 16:31:10 2027 GMT
        Subject: CN=6a9ee6d2-7b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:81:4a:4c:b5:f7:90:b4:75:f7:0e:1a:b7:
                    a2:0f:ce:66:ef:a7:4d:d7:af:3a:22:15:c8:b3:d7:
                    be:06:48:c6:fb:0f:5f:35:68:7d:6d:2b:2d:ca:9a:
                    c4:87:06:37:ee:56:e6:9c:c8:de:2b:f8:ac:8b:2a:
                    a8:da:1c:73:bc:60:d2:85:a4:07:09:23:8b:b0:3e:
                    90:08:49:7c:c8:38:b7:9c:a8:af:fd:94:dd:d5:c8:
                    c3:1e:dc:b3:30:07:fb:d1:57:df:1e:cb:63:13:2b:
                    8c:42:9a:62:f1:a7:b0:33:12:8b:87:6b:c3:78:78:
                    66:af:dc:d8:c9:dc:21:a8:67:61:2b:3c:9c:6d:69:
                    32:cc:b8:cf:4c:92:5b:93:aa:c9:43:df:03:22:a8:
                    d8:b4:04:5f:6f:6e:c9:c8:f1:b6:82:3b:0a:84:24:
                    7b:3a:14:cc:49:f6:50:23:c2:5a:ca:3b:66:4c:60:
                    88:19:0c:a5:1c:a2:fa:77:a2:c1:f6:44:a6:9f:3d:
                    bf:4f:5a:0c:62:5f:75:95:25:c4:89:70:f4:4d:33:
                    9a:e2:c4:26:23:5a:01:9d:24:23:c3:85:20:9e:b6:
                    41:62:20:bc:ba:48:c7:5a:80:61:cd:e4:22:16:ec:
                    b1:8e:54:80:d1:ab:d3:63:2c:af:01:93:1e:e2:87:
                    fd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4C:87:DD:82:7F:E4:8D:D7:92:52:38:A8:5F:D3:5D:BC:69:70:F1
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A9D7B12AAD911F1A3A97BEBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.214.212.0/24
                  154.214.214.0-154.214.217.255
                  154.214.221.0-154.214.223.255
                  154.214.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:d3:da:fc:37:26:16:51:82:6e:25:13:03:e7:88:ac:7e:22:
         82:3d:0d:6b:9e:c0:57:af:9a:0f:62:fa:d2:5b:b4:34:74:6c:
         4a:f5:a1:18:22:5e:ab:e2:c7:b3:f3:a2:74:53:71:11:a1:8a:
         6b:61:04:57:34:78:f9:46:87:e1:05:1b:77:3b:ee:a7:a1:77:
         48:20:7f:44:df:47:27:6b:4c:93:87:e5:c0:52:13:e5:f7:a6:
         0b:9c:f0:b2:c7:55:b3:34:9c:5b:91:ae:84:ac:29:86:03:ec:
         69:fb:92:b7:53:d0:7c:4a:17:c2:0b:39:86:43:22:b2:fa:c8:
         da:4a:66:9d:7e:b3:bf:5e:84:12:76:f4:67:b9:26:70:01:f0:
         9d:a1:d3:30:0e:ad:8e:12:f3:20:d7:e5:7f:e5:f0:ed:2c:55:
         45:9b:d6:99:f8:0e:ef:01:ae:bc:b6:16:a3:00:81:bf:42:6e:
         ac:b4:04:76:ce:66:b1:15:de:53:10:78:69:1e:e3:f8:47:7e:
         92:12:4b:40:35:db:af:b3:15:3b:8f:38:3b:ab:4d:9f:97:99:
         35:4f:50:f6:39:ad:e5:82:47:93:ee:9e:3e:dd:b6:d9:2f:e0:
         bb:15:0c:e0:41:a9:0b:b9:db:8e:52:96:5a:db:4b:59:dd:46:
         a7:07:8b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----