Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E1D1CFAB0D511F186B03EB7CE1D38B0.roa
File:                     8E1D1CFAB0D511F186B03EB7CE1D38B0.roa (raw, json)
Hash identifier:          NMS4N+lwqkxv/o8N/1WHZh6Q015jgeqYFwb5N07aYME=
Subject key identifier:   1B:20:85:FC:C1:B7:53:5F:F5:B0:1A:61:81:93:31:38:0A:4D:F8:06
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E841
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E1D1CFAB0D511F186B03EB7CE1D38B0.roa
Signing time:             Tue 15 Sep 2026 07:17:49 +0000
ROA not before:           Tue 15 Sep 2026 07:17:45 +0000
ROA not after:            Wed 21 Oct 2026 07:17:45 +0000
asID:                     9304
IP address blocks:        154.92.176.0/24 maxlen: 24
                          154.92.184.0/24 maxlen: 24
                          154.92.186.0/24 maxlen: 24
                          154.92.190.0/24 maxlen: 24
                          154.92.192.0/24 maxlen: 24
                          154.92.193.0/24 maxlen: 24
                          154.92.194.0/24 maxlen: 24
                          154.92.195.0/24 maxlen: 24
                          154.92.196.0/24 maxlen: 24
                          154.92.197.0/24 maxlen: 24
                          154.92.198.0/24 maxlen: 24
                          154.92.200.0/24 maxlen: 24
                          154.92.201.0/24 maxlen: 24
                          154.92.202.0/24 maxlen: 24
                          154.92.203.0/24 maxlen: 24
                          154.92.204.0/24 maxlen: 24
                          154.92.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124993 (0x1e841)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 15 07:17:45 2026 GMT
            Not After : Oct 21 07:17:45 2026 GMT
        Subject: CN=6aa8f11d-be65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:99:7b:01:a8:88:4c:f7:b2:c0:f2:39:ad:3e:
                    73:84:2b:ca:2a:65:b9:b1:a5:45:c2:f0:c1:0e:9a:
                    ee:5b:75:1b:13:3d:4c:76:dd:ca:42:d1:7a:bc:b4:
                    19:7a:15:f9:ce:10:d2:ac:ce:6d:14:9f:aa:dc:6e:
                    97:71:f4:e1:75:93:40:ca:1f:88:70:68:8f:9a:4b:
                    f6:09:81:b7:dc:0d:a5:9c:e8:9a:e0:b8:93:46:a9:
                    a5:0a:8e:22:22:ba:ec:5f:f6:2a:e6:f1:62:af:b5:
                    d3:af:78:97:5c:37:8c:0a:3a:e6:6d:2f:58:d2:c7:
                    51:5c:e4:68:9a:5d:35:b1:71:e8:e6:47:bb:3c:f8:
                    e1:c2:6f:fc:05:9c:f1:ea:b6:a0:d6:a5:de:83:cc:
                    c6:9d:f1:8e:5b:ff:ae:90:5c:96:8f:60:77:8c:16:
                    4e:b6:16:9d:0c:43:a0:43:97:e6:a3:1d:7f:d3:4b:
                    31:ff:c3:26:d0:dc:e1:ef:e9:1e:ab:b3:11:bc:cc:
                    a1:3e:a9:e3:85:d3:20:d6:7e:34:86:fd:8f:43:70:
                    8e:d7:79:54:ad:da:bc:bb:20:b5:0a:ff:36:8d:64:
                    1f:0f:55:e3:eb:2e:f5:cd:7d:eb:cf:0d:93:b4:32:
                    02:08:0f:5a:03:ef:64:57:53:5f:e7:48:f3:97:91:
                    2a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:20:85:FC:C1:B7:53:5F:F5:B0:1A:61:81:93:31:38:0A:4D:F8:06
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E1D1CFAB0D511F186B03EB7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.176.0/24
                  154.92.184.0/24
                  154.92.186.0/24
                  154.92.190.0/24
                  154.92.192.0-154.92.198.255
                  154.92.200.0-154.92.204.255
                  154.92.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:e3:13:c3:e1:03:77:fc:c4:b6:2f:b9:19:db:ea:d2:0c:15:
         b6:9d:05:17:5c:56:c3:d2:84:e7:3b:3c:13:7a:98:c6:01:03:
         63:12:86:a6:8b:79:8e:5b:ea:1f:f4:28:21:c6:6e:68:82:a4:
         9e:73:9d:ff:a7:fc:c8:0a:a0:1d:74:3c:a3:08:34:76:3a:80:
         88:21:73:dd:00:8d:5a:86:40:ab:67:04:cb:f9:49:b9:c9:1f:
         72:f1:ce:9d:ac:e3:4a:c8:eb:af:96:0b:26:c5:c4:a6:25:52:
         05:28:c5:b8:85:fa:91:3e:fe:48:b6:ad:f9:a2:d3:4a:10:95:
         fc:ba:ae:d2:3a:51:23:95:50:f3:30:e4:67:8f:08:2e:f1:8e:
         86:8a:a4:65:5e:46:55:e5:27:c2:ce:97:b5:88:c4:be:ca:64:
         10:bd:85:2f:ac:36:78:3a:19:9f:ff:aa:7f:4e:80:05:e3:a6:
         2f:69:73:b4:e0:fc:37:14:f6:f7:be:40:1f:ff:3b:57:b8:ac:
         a1:8a:5a:a7:09:9b:72:6d:a4:10:9c:7d:d1:33:5a:3a:be:e8:
         4e:41:71:a8:c8:38:7e:8f:d6:5e:1d:14:2f:2c:26:64:1b:7d:
         77:5f:23:6f:1e:5a:31:66:58:99:28:32:40:40:18:49:c2:aa:
         22:cc:5b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----