Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5CD4A32AA8611F1894FAF02CF1D38B0.roa
File:                     A5CD4A32AA8611F1894FAF02CF1D38B0.roa (raw, json)
Hash identifier:          V1DYP6oCz3uaPN8qrR9qUTLjj7/zbXuPu2AhlrHOUnY=
Subject key identifier:   CD:14:4C:03:51:57:31:79:D6:2E:17:D3:58:AF:8B:3D:E7:C6:E4:A6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E616
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5CD4A32AA8611F1894FAF02CF1D38B0.roa
Signing time:             Mon 07 Sep 2026 06:37:51 +0000
ROA not before:           Mon 07 Sep 2026 06:37:47 +0000
ROA not after:            Tue 13 Oct 2026 06:37:47 +0000
asID:                     152698
IP address blocks:        154.199.0.0/24 maxlen: 24
                          154.200.0.0/24 maxlen: 24
                          154.201.53.0/24 maxlen: 24
                          154.203.200.0/24 maxlen: 24
                          154.203.201.0/24 maxlen: 24
                          154.203.202.0/24 maxlen: 24
                          154.203.203.0/24 maxlen: 24
                          154.204.32.0/24 maxlen: 24
                          154.204.33.0/24 maxlen: 24
                          154.204.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124438 (0x1e616)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  7 06:37:47 2026 GMT
            Not After : Oct 13 06:37:47 2026 GMT
        Subject: CN=6a9e5bbf-50ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:17:2b:bd:d3:44:95:bb:b2:16:58:b3:4f:cf:
                    bc:63:6c:d1:59:49:cb:58:c3:4c:bf:5e:3f:06:66:
                    45:12:ef:2f:5f:2b:d7:8a:e4:3e:ca:45:4d:4c:e6:
                    11:07:43:88:5d:9c:3a:2d:57:b5:48:49:be:e8:7c:
                    d4:18:a9:db:33:12:21:9f:a1:77:1f:1e:7e:f4:31:
                    58:6a:16:45:2e:e2:f7:a3:24:95:ff:9b:f5:09:97:
                    e9:4c:2a:e0:9a:00:07:58:4a:7c:05:7c:37:b2:29:
                    38:b2:49:73:ff:d3:d4:8e:a3:1a:6a:e9:a3:6b:6a:
                    2b:65:0b:d8:78:f4:39:f7:f1:a2:d1:0a:1c:2e:e1:
                    8d:6f:b5:fd:5d:1f:db:98:db:d7:1f:cc:3c:ae:50:
                    b5:4e:b3:ef:21:2e:60:dd:62:01:b4:f1:ba:44:79:
                    c4:2b:d8:52:66:d3:20:ca:3a:29:98:60:f4:17:52:
                    bb:72:c6:2c:d0:6b:71:e7:2c:3e:49:61:88:da:be:
                    9a:31:9a:a3:23:3d:ab:92:66:53:2f:90:94:4d:d3:
                    e0:d0:de:a4:ee:dc:63:69:c2:1a:77:ab:fe:82:b1:
                    b2:f2:f0:35:85:f0:28:1a:37:69:ec:a8:74:47:89:
                    07:af:6d:ba:8e:78:b0:6a:1b:fa:cb:19:2b:94:9c:
                    81:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:14:4C:03:51:57:31:79:D6:2E:17:D3:58:AF:8B:3D:E7:C6:E4:A6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5CD4A32AA8611F1894FAF02CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.199.0.0/24
                  154.200.0.0/24
                  154.201.53.0/24
                  154.203.200.0/22
                  154.204.32.0-154.204.34.255

    Signature Algorithm: sha256WithRSAEncryption
         93:a6:c6:9f:90:0d:c7:56:1a:7d:ac:d4:57:df:fd:55:2e:2c:
         93:56:7a:62:f9:45:c9:73:4b:1c:91:d1:fb:4d:0d:46:c3:a0:
         7e:cc:19:35:c9:9d:7c:4c:af:b0:fe:8f:97:2d:c2:77:f5:88:
         ac:52:35:a8:d6:fa:c7:b7:13:77:30:57:8b:ee:36:05:1f:b8:
         89:b6:c2:2f:c3:6e:15:02:fb:c0:0a:ac:6a:c7:69:7f:27:57:
         1e:d4:4e:e2:65:91:c3:45:77:04:87:65:c3:a9:c0:7d:ab:05:
         41:ec:9b:e0:5e:d6:7c:4e:ab:c7:f5:a3:99:2c:de:d5:db:b5:
         66:0f:ed:3f:cb:ac:91:8b:40:00:59:47:05:5c:4e:65:40:1f:
         6e:cb:e7:46:5a:4c:8a:31:95:46:87:95:02:2e:de:59:5a:0c:
         41:2c:7b:c5:80:36:d0:84:a4:07:0e:b1:d5:59:b5:3f:05:d0:
         54:a1:5d:d5:1b:55:b0:20:9b:4c:e3:2d:f5:e3:30:ac:6b:c1:
         cf:af:3f:7f:a0:c1:73:40:69:96:e9:58:b5:7a:61:f4:e9:02:
         c8:ee:57:1d:9f:5a:64:ef:1f:55:3e:92:bb:d0:29:11:54:3b:
         5e:e3:e1:45:bf:7c:b3:9b:8f:55:ac:7a:9e:9a:70:b4:60:36:
         ba:56:f0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----