Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5B5B0489F9811F1AF228ED0CE1D38B0.roa
File:                     D5B5B0489F9811F1AF228ED0CE1D38B0.roa (raw, json)
Hash identifier:          Lu3rnpMeK7eLtViBLI7RhWzfcEKHr0jlgUQpZPkETmg=
Subject key identifier:   3D:BB:B6:E1:78:17:3D:9F:06:BB:64:47:1D:1F:DF:B8:D7:BE:80:DC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E227
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5B5B0489F9811F1AF228ED0CE1D38B0.roa
Signing time:             Mon 24 Aug 2026 08:50:20 +0000
ROA not before:           Mon 24 Aug 2026 08:50:16 +0000
ROA not after:            Thu 01 Oct 2026 08:50:16 +0000
asID:                     62240
IP address blocks:        154.194.101.0/24 maxlen: 24
                          154.194.102.0/24 maxlen: 24
                          154.194.104.0/24 maxlen: 24
                          154.194.105.0/24 maxlen: 24
                          154.195.189.0/24 maxlen: 24
                          154.195.190.0/24 maxlen: 24
                          154.195.191.0/24 maxlen: 24
                          154.196.33.0/24 maxlen: 24
                          154.196.90.0/24 maxlen: 24
                          154.196.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123431 (0x1e227)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 24 08:50:16 2026 GMT
            Not After : Oct  1 08:50:16 2026 GMT
        Subject: CN=6a8c05cc-d504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a3:0b:e7:14:64:1c:88:86:c7:e0:75:bd:30:
                    64:8f:66:9f:9d:04:43:d1:e6:cf:9d:d1:c3:4c:04:
                    e8:7a:74:fc:4a:b3:7a:8c:53:1f:06:a5:e0:1c:8a:
                    2d:ff:d6:12:f4:f8:44:60:11:f6:82:2d:fd:56:2a:
                    b8:33:87:5c:41:cd:a9:cf:bb:8d:ef:69:3d:4c:1a:
                    4b:1c:61:ff:90:31:e1:9b:3c:74:c6:b8:65:9c:d4:
                    35:b7:c6:a8:50:86:a8:b7:b9:af:0b:90:d3:e0:df:
                    ff:8f:f1:74:ca:d8:71:80:f1:3a:d5:ef:1d:40:14:
                    e9:13:75:17:05:14:1d:ea:91:98:e8:28:28:08:ca:
                    d8:12:09:91:4f:2f:04:47:ae:1f:6d:34:d2:91:2f:
                    1e:89:43:52:e1:ae:27:2d:5d:95:8d:ea:be:89:ff:
                    55:bf:24:84:b3:89:7e:3b:cb:a6:64:cf:ed:c0:88:
                    58:97:20:e0:79:da:f0:9c:13:d8:f3:22:44:16:9a:
                    50:c9:1d:be:5d:8f:0e:52:e3:f1:56:96:03:6b:4f:
                    a9:f2:76:f8:ea:54:91:86:f0:77:f2:1a:5b:38:19:
                    d6:d2:c2:e0:2f:d0:07:0b:86:b0:46:4c:b2:2d:da:
                    33:0d:cb:90:98:d9:61:6e:98:f9:05:7a:90:ad:d4:
                    06:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BB:B6:E1:78:17:3D:9F:06:BB:64:47:1D:1F:DF:B8:D7:BE:80:DC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5B5B0489F9811F1AF228ED0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.101.0-154.194.102.255
                  154.194.104.0/23
                  154.195.189.0-154.195.191.255
                  154.196.33.0/24
                  154.196.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:87:85:da:9c:95:56:c1:56:fb:45:37:ea:4b:24:be:06:ea:
         e4:e5:38:b6:c3:2d:0b:5e:c0:dd:12:60:ef:e2:38:4a:d9:9f:
         22:7f:e0:22:72:ee:c4:35:80:87:55:ae:b4:df:7b:6e:a7:75:
         60:3c:b6:8a:50:24:43:a7:e3:ef:54:17:3d:a7:1d:d6:13:d1:
         b1:0e:9d:cf:77:c0:f4:94:43:36:80:aa:e6:2f:4f:21:ef:b6:
         d1:22:d8:93:4b:28:f0:f8:eb:a7:d4:d2:75:29:3a:9a:bd:72:
         64:1e:ad:2c:6e:36:fe:33:0e:45:0e:e0:a5:b3:64:be:7f:77:
         f8:be:93:73:46:ff:e5:8d:52:57:ee:d6:b4:82:a5:3f:fd:d9:
         12:b9:80:bf:af:6a:fc:43:9b:1e:22:2b:9c:34:3c:87:75:c4:
         ac:53:22:79:5e:a2:cf:61:6e:81:e2:45:d5:cc:b6:3a:f8:8b:
         1b:1b:5a:ec:37:14:de:9b:d9:e5:0c:6d:d9:3e:97:40:ec:50:
         6d:d1:be:b4:fe:04:c7:55:e3:be:e7:34:1c:3a:ff:95:2b:e9:
         79:9e:4a:f4:2f:c2:c4:75:8a:d1:34:a4:e1:04:06:9a:16:b2:
         94:73:36:f2:f4:d5:8e:8e:a7:26:9d:ab:55:81:26:69:ad:90:
         67:84:b4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----