Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E14F4A929F9111F1A156B0A6CE1D38B0.roa
File:                     E14F4A929F9111F1A156B0A6CE1D38B0.roa (raw, json)
Hash identifier:          AZvpR/KZayuyvkEg7RWkbLTOI8ccPXk6bqPtMt2azWM=
Subject key identifier:   F9:8A:ED:30:2D:DC:A8:2A:0D:7D:83:F3:33:B1:FD:D6:B4:7B:1F:89
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E210
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E14F4A929F9111F1A156B0A6CE1D38B0.roa
Signing time:             Mon 24 Aug 2026 08:00:33 +0000
ROA not before:           Mon 24 Aug 2026 08:00:28 +0000
ROA not after:            Thu 01 Oct 2026 08:00:28 +0000
asID:                     62240
IP address blocks:        154.194.103.0/24 maxlen: 24
                          154.195.123.0/24 maxlen: 24
                          154.195.125.0/24 maxlen: 24
                          154.195.126.0/24 maxlen: 24
                          154.196.16.0/24 maxlen: 24
                          154.196.17.0/24 maxlen: 24
                          154.196.19.0/24 maxlen: 24
                          154.196.20.0/24 maxlen: 24
                          154.196.21.0/24 maxlen: 24
                          154.196.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123408 (0x1e210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 24 08:00:28 2026 GMT
            Not After : Oct  1 08:00:28 2026 GMT
        Subject: CN=6a8bfa21-26e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:03:fc:54:c2:85:f4:26:1f:45:78:82:69:07:
                    e0:27:1e:85:28:2e:f7:39:e6:ad:3d:cd:c4:19:60:
                    70:7b:a2:20:dd:0a:50:05:5a:c2:e5:c3:87:8c:05:
                    1e:cf:5c:37:23:6d:22:13:36:ec:de:94:36:bd:77:
                    4f:f1:6c:df:61:52:84:2e:66:6b:68:8e:f2:c5:60:
                    5f:61:51:57:d9:42:21:81:b2:26:fd:b1:b3:bd:46:
                    80:da:83:47:b8:51:c0:a1:98:85:d1:03:2c:f0:58:
                    90:d1:a7:66:a0:f2:57:54:e4:bd:6d:6d:c6:3c:28:
                    e3:19:a9:0d:a2:76:26:18:c8:8c:b7:9c:58:1b:38:
                    a4:74:2d:3f:db:d4:ca:b4:dc:02:df:24:ec:c2:cc:
                    ad:e4:8a:66:50:fe:07:37:12:10:77:d6:5d:ee:54:
                    41:8f:db:4c:81:6f:3e:c4:fb:61:f8:be:ce:4e:34:
                    f9:d9:46:42:af:08:db:36:7b:8c:0e:16:18:c5:84:
                    66:77:c7:f7:d3:20:03:3a:eb:88:ef:f2:92:ac:53:
                    b5:31:f6:a5:e4:5a:5b:8a:4f:1a:2c:9c:94:ff:f1:
                    bf:c7:29:44:1b:cc:96:5d:ce:b3:31:69:18:01:d6:
                    56:b4:7c:07:35:7d:b3:18:27:f5:b5:42:77:87:56:
                    eb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8A:ED:30:2D:DC:A8:2A:0D:7D:83:F3:33:B1:FD:D6:B4:7B:1F:89
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E14F4A929F9111F1A156B0A6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.103.0/24
                  154.195.123.0/24
                  154.195.125.0-154.195.126.255
                  154.196.16.0/23
                  154.196.19.0-154.196.21.255
                  154.196.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:01:33:7a:b0:a0:a4:23:ac:23:4a:21:30:50:f4:e0:c8:f7:
         93:87:1c:f6:3f:78:9c:8e:d7:40:4e:07:a0:27:64:28:0c:39:
         b6:74:fc:88:3c:87:32:70:12:9f:ff:6b:86:78:df:87:3f:a4:
         35:e5:92:6e:5b:ef:c0:03:ad:64:9b:11:66:c7:f2:09:1e:7a:
         13:cf:20:f3:c0:40:84:72:2c:03:38:f7:29:13:37:01:dd:5a:
         79:51:4a:bc:78:fc:51:ea:64:43:ca:48:b8:57:d6:b8:b8:6a:
         e3:a1:58:86:d6:e5:11:88:89:be:b4:92:cc:fc:b7:ad:42:64:
         e2:b1:84:4d:b3:09:6d:71:fe:c5:cc:47:88:d9:85:7c:45:6e:
         01:79:ac:55:0b:11:8b:ab:6e:fd:2c:62:99:13:20:a4:2f:cf:
         63:21:ff:3a:48:09:22:f6:0a:6b:6e:53:d5:2d:4e:43:fc:ec:
         b7:02:3c:b2:b5:cd:95:45:dc:ea:71:bd:48:b3:0c:3d:36:5a:
         d7:dd:94:bd:a8:b1:7a:28:1b:8d:be:0f:5f:4e:0b:2b:b8:d6:
         ea:b3:8f:81:c5:d2:1c:8b:ce:ba:32:a4:e0:23:85:c6:06:72:
         29:9c:b1:89:14:4d:73:a6:48:9b:ca:02:51:8d:f7:dd:33:1c:
         b1:1d:5e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----