Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B329C4289F9911F1AC7361D6CE1D38B0.roa
File:                     B329C4289F9911F1AC7361D6CE1D38B0.roa (raw, json)
Hash identifier:          qG8jOJpSsx5+Esawz030N6jsGotE3jY0+ey668DfOWc=
Subject key identifier:   DA:BD:C1:EE:5D:6E:97:CD:1E:DF:4E:95:EC:1D:E1:34:66:04:EF:A0
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E229
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B329C4289F9911F1AC7361D6CE1D38B0.roa
Signing time:             Mon 24 Aug 2026 08:56:31 +0000
ROA not before:           Mon 24 Aug 2026 08:56:26 +0000
ROA not after:            Fri 02 Oct 2026 08:56:26 +0000
asID:                     62240
IP address blocks:        154.194.36.0/24 maxlen: 24
                          154.194.59.0/24 maxlen: 24
                          154.194.67.0/24 maxlen: 24
                          154.194.126.0/24 maxlen: 24
                          154.194.207.0/24 maxlen: 24
                          154.195.3.0/24 maxlen: 24
                          154.195.97.0/24 maxlen: 24
                          154.195.98.0/24 maxlen: 24
                          154.195.99.0/24 maxlen: 24
                          154.195.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123433 (0x1e229)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 24 08:56:26 2026 GMT
            Not After : Oct  2 08:56:26 2026 GMT
        Subject: CN=6a8c073f-dd0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6c:f4:7c:a8:01:88:90:09:ea:0f:08:c2:ea:
                    ba:7e:e7:a2:7d:d8:0a:84:8b:d0:d6:a0:dc:bf:c3:
                    e2:cd:dc:f3:97:cf:06:a3:45:ca:3c:a4:f0:40:ab:
                    aa:ce:c6:cf:ff:72:03:c7:37:a8:4f:d3:8d:57:9b:
                    7c:d2:be:e2:cd:28:4a:ac:80:1c:1f:93:18:4f:09:
                    85:e9:2b:62:9e:20:0c:25:e3:f2:a9:17:1f:8e:7b:
                    0f:14:e1:08:49:2d:00:cb:da:75:e3:e9:63:97:78:
                    98:86:a2:60:0c:f9:98:5e:b9:69:ce:7f:77:12:5e:
                    93:ff:22:a8:12:ec:6e:ed:1c:fa:39:d8:40:6f:82:
                    43:58:3d:39:4b:b8:4b:0a:ab:71:02:df:26:de:ea:
                    7b:7d:07:3a:e2:eb:17:04:84:f7:7d:3c:88:82:e3:
                    1f:03:28:a1:bb:da:d9:e7:a8:1b:79:99:82:31:97:
                    e8:ef:09:b7:3f:b2:4a:67:68:31:e2:04:dc:20:f4:
                    06:22:eb:62:a0:98:bd:04:ee:71:92:ea:49:68:3d:
                    e9:94:76:d2:4e:ef:29:30:d6:59:38:20:01:8a:c5:
                    92:3f:02:5f:cb:39:56:e2:0b:eb:3f:4b:8a:62:94:
                    4a:93:f2:6f:a6:14:46:e1:81:a9:e4:0a:01:d5:4a:
                    27:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:BD:C1:EE:5D:6E:97:CD:1E:DF:4E:95:EC:1D:E1:34:66:04:EF:A0
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B329C4289F9911F1AC7361D6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.36.0/24
                  154.194.59.0/24
                  154.194.67.0/24
                  154.194.126.0/24
                  154.194.207.0/24
                  154.195.3.0/24
                  154.195.97.0-154.195.99.255
                  154.195.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:1b:3d:b9:ba:ba:7d:e0:d1:2d:15:76:2b:fa:c6:ee:d3:1b:
         c5:29:bd:d6:3f:de:79:08:1e:61:4f:a3:a4:2d:06:dd:1c:52:
         64:95:0d:e0:20:2d:98:46:c1:99:15:ee:bd:f2:02:3b:b7:8e:
         33:3a:a2:38:d2:6b:f6:7f:a6:cc:f3:04:45:3f:ad:27:69:69:
         09:fc:20:1f:11:56:36:66:a2:e1:60:11:af:65:32:98:e2:77:
         4d:cf:3d:c1:f7:37:a7:20:58:8d:fc:90:87:13:0b:86:7e:d6:
         d8:08:7d:b8:97:8b:69:3d:f5:7a:e1:f8:53:55:10:77:ef:54:
         73:2d:c8:a9:25:d2:ec:3d:a6:f5:84:60:72:34:5d:98:52:c5:
         1e:92:ea:d9:20:b0:eb:fd:75:1f:ed:f8:ac:91:f5:f7:71:2c:
         58:ef:e6:d2:f1:5b:63:53:e9:89:79:6a:77:e6:41:57:4a:c4:
         e0:b2:1e:e3:f5:83:32:39:b2:cf:79:d5:30:e5:86:0b:2f:2e:
         28:6a:1d:32:e5:8f:a8:d4:13:d6:b1:fb:3c:d4:86:d8:09:7b:
         cd:af:30:28:c4:5b:ca:09:96:50:e6:93:84:84:37:4f:93:b9:
         04:b4:ef:56:67:32:b3:f2:ef:c8:82:39:0a:5b:b8:4b:ef:87:
         1c:fb:e9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----