Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B3DF294B0D411F1B4132EB1CE1D38B0.roa
File:                     8B3DF294B0D411F1B4132EB1CE1D38B0.roa (raw, json)
Hash identifier:          +XBqda96eu9cAIx9SYSI1QekLnp38rnVB5OPrDf8wPo=
Subject key identifier:   79:53:AA:D8:20:BF:2C:C8:E4:EF:47:38:7B:96:C8:AD:9A:6B:76:0E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E83F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B3DF294B0D411F1B4132EB1CE1D38B0.roa
Signing time:             Tue 15 Sep 2026 07:10:34 +0000
ROA not before:           Tue 15 Sep 2026 07:10:30 +0000
ROA not after:            Wed 21 Oct 2026 07:10:30 +0000
asID:                     2914
IP address blocks:        154.92.176.0/24 maxlen: 24
                          154.92.184.0/24 maxlen: 24
                          154.92.186.0/24 maxlen: 24
                          154.92.190.0/24 maxlen: 24
                          154.92.199.0/24 maxlen: 24
                          154.92.205.0/24 maxlen: 24
                          154.92.206.0/24 maxlen: 24
                          154.92.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124991 (0x1e83f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 15 07:10:30 2026 GMT
            Not After : Oct 21 07:10:30 2026 GMT
        Subject: CN=6aa8ef6a-75fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:72:66:2d:2e:a8:8b:44:16:f5:81:55:18:f0:
                    27:02:ef:08:b8:b2:5b:9f:d4:44:41:74:27:91:68:
                    1d:a9:8f:5b:d3:36:09:9c:5a:07:6f:08:62:9b:03:
                    d5:8d:21:82:31:73:fd:38:e2:52:57:57:2b:3b:42:
                    38:99:5b:f1:e0:4b:a8:9a:6a:c2:e5:60:b1:bc:bd:
                    d5:90:a1:e6:e7:80:3b:9c:f5:3b:fb:0c:83:2b:51:
                    9e:27:df:14:3b:3d:59:ef:5e:e7:43:b1:e9:70:68:
                    e8:5e:61:86:63:f5:fc:43:e0:52:cc:9a:5a:8d:1b:
                    ac:63:0b:cc:49:f9:65:fc:95:16:4f:2c:d4:10:a9:
                    ad:a4:05:42:65:b0:4f:44:07:e5:af:33:a6:24:2b:
                    b4:9d:7c:3f:7c:5e:57:58:bc:89:1d:bb:5c:3e:f5:
                    51:54:6f:36:fb:d7:ad:74:f9:9f:27:f2:e9:5d:c0:
                    25:15:7f:14:72:22:99:c8:d2:fd:97:44:70:bc:0c:
                    86:d7:a0:fa:c4:aa:38:27:3e:68:71:82:de:4c:b8:
                    82:d9:c3:23:4f:84:a7:18:d3:b7:e7:f8:d5:55:3a:
                    c1:ad:ff:61:f3:8c:d8:a0:44:cc:99:c9:56:df:41:
                    f3:1e:33:92:3a:bd:be:e1:48:84:33:ac:d2:b9:f2:
                    16:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:53:AA:D8:20:BF:2C:C8:E4:EF:47:38:7B:96:C8:AD:9A:6B:76:0E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B3DF294B0D411F1B4132EB1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.176.0/24
                  154.92.184.0/24
                  154.92.186.0/24
                  154.92.190.0/24
                  154.92.199.0/24
                  154.92.205.0-154.92.206.255
                  154.92.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:e7:ab:82:2d:03:69:a4:64:31:e6:de:a0:c6:b7:91:1f:91:
         bb:84:db:1b:3e:83:2e:00:2d:ca:3c:14:dc:bb:7b:42:d7:86:
         cc:af:2a:3d:10:61:d4:c0:4e:4f:fd:93:3d:b5:4d:14:19:15:
         f2:c1:82:1e:47:13:53:57:d2:2f:27:6d:e4:86:bc:19:d8:71:
         09:78:89:67:41:ef:df:79:e7:46:b8:c5:4f:c9:f6:59:49:3b:
         dd:a9:20:61:ed:49:14:70:79:0f:fc:ef:a3:65:cf:66:00:37:
         59:e6:bb:5d:38:d5:d8:0b:61:0d:0d:ba:0a:fc:ad:ed:eb:61:
         cc:af:ab:09:89:ee:9c:db:19:c4:d9:9f:c0:e7:83:2e:b0:21:
         43:e4:44:f7:46:13:be:4a:02:1a:12:a7:a9:9e:9d:21:37:5b:
         fc:15:97:1f:4c:fa:6e:c9:06:56:ba:3c:fc:fb:56:f8:95:c6:
         24:5b:c1:fa:8f:46:21:28:cd:cf:39:89:ee:14:0f:80:90:2b:
         b9:24:c6:65:b7:40:92:29:83:e5:52:31:c4:39:14:ce:ed:c9:
         a3:b6:2e:16:06:d9:34:63:45:c1:5f:f0:4c:e8:01:ab:db:db:
         92:e6:b6:43:ac:82:8c:11:e2:9d:0d:b2:32:9f:dd:87:cf:a3:
         13:ed:3c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----