Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C43C8DBCB0CF11F1A45DCC12CF1D38B0.roa
File:                     C43C8DBCB0CF11F1A45DCC12CF1D38B0.roa (raw, json)
Hash identifier:          rPj8flJY4GVlb9WpilZVjplU9fyIOe6VqDiAQB3gVXs=
Subject key identifier:   46:32:2A:B6:31:37:64:5D:1A:84:68:8F:92:A5:DB:2F:98:70:C0:BB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E82F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C43C8DBCB0CF11F1A45DCC12CF1D38B0.roa
Signing time:             Tue 15 Sep 2026 06:36:22 +0000
ROA not before:           Tue 15 Sep 2026 06:36:18 +0000
ROA not after:            Thu 22 Oct 2026 06:36:18 +0000
asID:                     22516
IP address blocks:        154.199.160.0/19 maxlen: 24
                          154.199.224.0/19 maxlen: 24
                          154.202.32.0/19 maxlen: 24
                          154.207.32.0/19 maxlen: 24
                          154.207.64.0/18 maxlen: 24
                          154.207.192.0/18 maxlen: 24
                          154.212.32.0/19 maxlen: 24
                          154.219.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124975 (0x1e82f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 15 06:36:18 2026 GMT
            Not After : Oct 22 06:36:18 2026 GMT
        Subject: CN=6aa8e766-ae2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6d:09:0b:5d:e7:ef:d4:53:4a:1f:f0:5c:97:
                    82:7f:df:12:9f:5a:a2:b9:80:32:7a:48:15:10:f5:
                    e9:8d:5e:b5:2a:f6:97:15:49:85:de:32:1f:92:63:
                    a9:b7:0b:4e:d9:10:58:89:d9:56:4f:27:5f:4e:28:
                    d9:ec:6c:f7:8c:e0:e4:4a:56:cf:d4:26:c9:66:6f:
                    9b:98:43:94:a1:fa:49:0c:78:84:9f:ca:7e:27:00:
                    cb:e9:cc:52:37:12:eb:35:77:d8:6b:5c:b0:9b:d1:
                    54:12:cf:d4:0b:fc:29:f9:33:76:64:ce:c2:db:d6:
                    e8:a0:0f:de:40:7e:fb:6c:19:02:fe:26:ad:6f:03:
                    2c:07:8f:76:0e:b4:23:cd:b2:c3:b6:3c:ec:e8:df:
                    00:63:03:f5:7f:b7:dc:f6:71:4f:9b:a9:c7:62:52:
                    6b:b7:6a:d5:b7:e6:b5:6c:60:56:3c:66:8f:76:52:
                    9d:2a:e5:07:e1:a6:0e:67:d8:63:9d:3d:68:e7:28:
                    81:20:79:50:4d:c7:7f:78:ac:cd:83:55:16:f8:b7:
                    5c:72:75:48:d8:95:70:a2:a7:fd:7e:07:4e:f0:7c:
                    7c:38:e7:53:5f:5c:38:f8:87:a3:d5:fe:8c:df:12:
                    80:ea:a1:5a:5e:62:2e:ab:1a:a1:26:78:d3:57:a0:
                    3f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:32:2A:B6:31:37:64:5D:1A:84:68:8F:92:A5:DB:2F:98:70:C0:BB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C43C8DBCB0CF11F1A45DCC12CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.199.160.0/19
                  154.199.224.0/19
                  154.202.32.0/19
                  154.207.32.0-154.207.127.255
                  154.207.192.0/18
                  154.212.32.0/19
                  154.219.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b7:fd:59:e3:7c:2e:81:3a:10:2c:58:63:88:12:43:87:36:27:
         4d:71:95:4d:ac:b0:46:99:36:ea:a7:ea:86:7a:64:93:4b:50:
         20:09:d9:7d:2d:d9:d3:33:9b:61:4b:14:29:60:f4:4c:b5:2f:
         da:8c:fc:21:0e:12:ee:80:68:55:9e:2f:8b:d2:d1:74:55:9f:
         f8:da:98:45:1e:93:5d:da:2d:b0:fd:e6:cb:aa:d6:64:bf:dc:
         f4:64:00:31:59:9b:b8:63:96:2c:a3:cb:ea:62:9f:e3:44:c7:
         eb:9d:26:31:8d:17:53:07:c3:c8:4e:c6:82:cb:b8:60:9e:f4:
         ec:e7:df:66:cf:9f:98:8b:d4:52:78:2f:69:92:2f:4d:25:ed:
         1e:00:ae:1f:8f:95:ab:99:33:0e:84:c7:66:1d:7d:0c:bc:42:
         2b:05:2c:ea:cf:b3:dc:09:4b:ec:4d:38:c6:95:bd:03:46:34:
         ce:77:92:3e:68:d9:2f:5d:6a:9d:89:94:b3:5e:ab:f4:bc:68:
         c4:c0:66:28:0f:7e:51:fa:ab:3a:03:32:05:f6:8b:e9:af:de:
         28:87:a5:e3:0f:f2:eb:38:dc:3e:55:6d:16:49:dd:6e:ca:db:
         20:a4:63:56:70:3b:db:15:f1:77:65:91:31:09:71:ba:52:df:
         9c:04:d8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----