Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4FF1A4E9F8511F1B5949CDFCE1D38B0.roa
File:                     D4FF1A4E9F8511F1B5949CDFCE1D38B0.roa (raw, json)
Hash identifier:          DHMT+YBjWXlBifO7FsMQWbYdvYc4yk++blZ7YpooY+4=
Subject key identifier:   46:62:BA:77:98:CC:65:DA:67:D1:EE:32:CC:8E:D3:89:C8:CB:4E:89
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E1E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4FF1A4E9F8511F1B5949CDFCE1D38B0.roa
Signing time:             Mon 24 Aug 2026 06:34:18 +0000
ROA not before:           Mon 24 Aug 2026 06:34:14 +0000
ROA not after:            Thu 01 Oct 2026 06:34:14 +0000
asID:                     62240
IP address blocks:        154.195.20.0/24 maxlen: 24
                          154.195.21.0/24 maxlen: 24
                          154.195.22.0/24 maxlen: 24
                          154.195.23.0/24 maxlen: 24
                          154.196.31.0/24 maxlen: 24
                          154.196.68.0/24 maxlen: 24
                          154.196.72.0/24 maxlen: 24
                          154.196.73.0/24 maxlen: 24
                          154.196.74.0/24 maxlen: 24
                          154.196.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123366 (0x1e1e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 24 06:34:14 2026 GMT
            Not After : Oct  1 06:34:14 2026 GMT
        Subject: CN=6a8be5ea-31dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e6:e9:a6:1a:ec:41:e0:80:70:d4:b7:87:43:
                    fa:e2:36:3d:fc:b9:65:7b:41:bf:0e:a8:0d:2b:05:
                    5d:36:de:93:be:71:7e:2c:d5:a0:e2:6c:24:b8:1f:
                    f2:d2:a1:b6:67:3c:6e:e8:e5:18:bf:3d:44:cb:d0:
                    2a:e4:9c:ea:a6:68:73:29:77:93:f9:86:3b:26:e0:
                    3c:d4:32:0a:a7:e7:80:79:5c:91:9a:69:8f:4c:80:
                    e5:cf:e9:90:54:fd:2a:58:b4:06:d5:56:25:0f:fc:
                    1b:bb:51:80:fe:47:49:ab:91:74:8a:dd:a7:b7:27:
                    21:81:13:72:43:b8:b2:d4:61:55:37:e2:6b:54:ba:
                    fd:58:6f:67:63:c4:f7:bc:73:71:f7:75:ed:e9:89:
                    db:47:1f:6a:dc:6e:96:e9:92:36:e9:0e:bd:63:cb:
                    f9:e9:b8:75:7b:8c:b2:86:aa:0b:19:26:8d:86:31:
                    1c:f4:ae:8a:98:f6:c8:f8:38:84:5a:65:5f:5e:7e:
                    98:9a:8d:2f:0f:30:b4:65:91:b6:e5:c5:cc:7d:c8:
                    ce:fb:f3:59:f9:83:74:79:95:6e:13:b8:af:e1:6e:
                    91:6a:90:66:82:bf:95:1e:1d:19:89:5e:a1:33:f5:
                    09:be:d9:f4:2e:5b:4f:2a:1e:c3:5c:f2:37:1a:b7:
                    dc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:62:BA:77:98:CC:65:DA:67:D1:EE:32:CC:8E:D3:89:C8:CB:4E:89
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4FF1A4E9F8511F1B5949CDFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.195.20.0/22
                  154.196.31.0/24
                  154.196.68.0/24
                  154.196.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:5a:51:63:50:b1:35:62:3e:50:7c:e0:79:b4:bf:5f:0c:b8:
         b4:ca:1c:84:6e:ba:05:ef:c9:07:32:49:e4:d6:49:3f:58:87:
         e0:e9:8e:9e:5d:60:d9:59:0d:08:d6:e7:9b:70:ce:ee:08:0b:
         8b:3d:69:9d:95:73:62:cb:56:3f:8e:8b:37:17:cb:f7:c3:ed:
         67:40:7f:b3:ef:4f:73:b2:e8:d0:a4:17:77:96:1f:0e:74:cf:
         16:7d:2e:ce:1d:6a:e9:22:ad:9f:3c:44:40:cd:4e:3b:ac:5f:
         0b:9c:ff:12:96:4a:a8:17:fb:ad:36:9e:47:a9:fe:91:dc:ea:
         ff:a9:a1:c3:39:19:40:90:6b:6d:67:61:ba:da:26:3f:08:47:
         40:82:91:24:1b:d8:0d:82:40:92:04:8a:9d:e4:e2:64:ab:86:
         8a:b7:8d:38:73:c0:77:83:80:f9:17:d2:7c:1c:bd:8d:cf:18:
         3f:0e:76:5c:67:a8:5f:a4:57:34:ea:ab:ec:d0:a5:80:cd:75:
         59:2d:64:dc:86:28:8e:a6:cf:74:e7:96:f5:6b:7a:15:0c:1f:
         c2:e9:e3:c7:c5:ae:e7:c8:77:db:be:a8:2f:af:ba:23:18:50:
         23:f5:47:fe:ca:0e:2d:5c:47:7e:3d:b5:27:5a:5b:9b:81:ea:
         c6:f7:b8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----