Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B759F8B2ACEE11F1AD03B614CF1D38B0.roa
File:                     B759F8B2ACEE11F1AD03B614CF1D38B0.roa (raw, json)
Hash identifier:          PZ8L4ep54ssQXz8qMAfZl+qEdXlVeKEHKEHvjJiN0v8=
Subject key identifier:   1D:FB:9E:0A:17:9E:DE:2B:14:EA:E4:C3:B4:95:64:31:65:B0:94:CE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E6FE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B759F8B2ACEE11F1AD03B614CF1D38B0.roa
Signing time:             Thu 10 Sep 2026 08:07:51 +0000
ROA not before:           Thu 10 Sep 2026 08:07:47 +0000
ROA not after:            Sat 10 Oct 2026 08:07:47 +0000
asID:                     17497
IP address blocks:        154.82.19.0/24 maxlen: 24
                          154.90.138.0/23 maxlen: 24
                          154.90.138.0/24 maxlen: 24
                          154.90.139.0/24 maxlen: 24
                          154.90.174.0/23 maxlen: 24
                          154.90.174.0/24 maxlen: 24
                          154.90.175.0/24 maxlen: 24
                          154.94.2.0/23 maxlen: 24
                          154.94.2.0/24 maxlen: 24
                          154.94.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124670 (0x1e6fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 10 08:07:47 2026 GMT
            Not After : Oct 10 08:07:47 2026 GMT
        Subject: CN=6aa26556-693b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:44:b1:cb:fe:52:5a:c5:2b:43:5b:c1:25:ec:
                    ee:3c:ee:2f:9c:6e:fa:70:d5:a8:da:b4:b3:a6:f8:
                    62:11:1a:16:26:b1:cf:e4:35:2a:9b:0d:ce:5e:d5:
                    23:9d:05:63:5b:ae:dc:64:f1:76:b5:41:28:55:61:
                    53:4e:f4:34:34:a0:4c:32:04:46:20:1f:df:f8:3f:
                    b2:fd:3e:63:20:50:ed:07:56:47:59:88:a2:a9:08:
                    67:ce:cf:a1:25:56:6f:dd:fb:a2:4b:50:9c:a9:b5:
                    20:84:ec:51:c6:21:f6:8c:e3:13:76:0f:07:5c:eb:
                    b2:e8:0a:43:b9:5a:ea:f5:11:db:f5:07:ff:0a:ee:
                    8b:f2:ec:d5:03:ee:41:82:1d:67:47:98:63:6a:e3:
                    3d:3b:fc:31:34:20:35:25:0b:72:02:db:ee:3c:dd:
                    b8:24:01:77:53:dc:0d:9d:8f:8d:52:9d:af:13:a5:
                    63:f6:08:ed:01:e7:cc:72:29:c3:62:9b:18:48:98:
                    5c:bb:e6:11:f1:b7:80:c7:ec:c5:11:c8:30:42:5e:
                    af:94:cc:bc:87:96:52:fc:d1:cf:65:ae:2f:2e:f9:
                    26:4a:56:18:16:e1:46:5f:68:e6:a7:20:6a:5e:7f:
                    4d:cc:b6:f8:ec:9e:53:ad:9c:8a:62:e1:f9:b5:4c:
                    36:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FB:9E:0A:17:9E:DE:2B:14:EA:E4:C3:B4:95:64:31:65:B0:94:CE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B759F8B2ACEE11F1AD03B614CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.19.0/24
                  154.90.138.0/23
                  154.90.174.0/23
                  154.94.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:9f:c5:59:ef:b4:50:e4:ca:f9:d4:0d:21:14:be:2a:4d:f2:
         ef:40:c6:2b:f0:53:5f:e3:f8:3a:ea:1b:a3:c2:0f:26:58:18:
         53:b3:ba:c9:ff:7f:ac:6c:5b:7d:d5:b2:39:c7:d3:39:d9:47:
         65:e2:d1:4d:d0:bc:bb:83:7c:85:05:40:36:13:bc:8f:06:cc:
         77:10:10:a2:e0:79:3c:35:8a:49:f9:e7:04:a0:80:d6:64:24:
         ef:1b:f4:a4:45:e1:d3:a4:3b:81:ad:91:3f:40:96:ca:0a:e4:
         33:9d:3d:10:cd:39:d7:d5:fd:9b:91:6a:a7:cf:e6:9d:73:75:
         80:ff:12:7b:7f:69:93:12:c7:e8:aa:32:4a:fd:2a:86:f8:fb:
         05:47:8d:c4:b0:65:74:02:0c:88:a9:97:29:5d:ad:fa:d8:25:
         d3:54:e3:13:99:50:12:78:76:90:e2:19:37:1a:bc:76:80:00:
         0a:c1:83:67:ef:51:a6:91:91:09:af:2b:1e:88:ce:15:d8:e1:
         43:73:90:77:10:48:45:b1:44:48:59:ef:75:de:aa:81:92:6c:
         29:06:77:9b:46:45:9c:5c:2c:7b:eb:e7:f2:d3:a9:1e:fb:7e:
         1c:eb:62:8c:2c:66:c4:04:56:fa:e8:eb:63:a1:75:d4:71:54:
         4b:50:44:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----