Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F53E5A1E9F9D11F18530A7F0CE1D38B0.roa
File:                     F53E5A1E9F9D11F18530A7F0CE1D38B0.roa (raw, json)
Hash identifier:          0fi2jvMHnGG6iCa6czUFLa2R9VxxJkUUkr0iUC+0h+w=
Subject key identifier:   99:69:B5:56:D6:D9:18:16:9B:69:3A:9B:96:8C:89:EA:02:FF:77:E0
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E235
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F53E5A1E9F9D11F18530A7F0CE1D38B0.roa
Signing time:             Mon 24 Aug 2026 09:27:00 +0000
ROA not before:           Mon 24 Aug 2026 09:26:56 +0000
ROA not after:            Fri 02 Oct 2026 09:26:56 +0000
asID:                     62240
IP address blocks:        154.85.26.0/24 maxlen: 24
                          154.85.97.0/24 maxlen: 24
                          154.85.99.0/24 maxlen: 24
                          154.90.1.0/24 maxlen: 24
                          154.90.129.0/24 maxlen: 24
                          154.90.130.0/24 maxlen: 24
                          154.90.131.0/24 maxlen: 24
                          154.90.142.0/24 maxlen: 24
                          154.90.143.0/24 maxlen: 24
                          154.90.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123445 (0x1e235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 24 09:26:56 2026 GMT
            Not After : Oct  2 09:26:56 2026 GMT
        Subject: CN=6a8c0e64-bda7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c1:d1:7d:20:9f:8b:b9:a0:81:d0:ab:d9:69:
                    2b:0e:78:71:62:1b:37:a9:23:d9:b7:31:ca:d2:f2:
                    fc:26:ee:c0:69:86:4a:e7:d2:41:f5:68:64:6b:8d:
                    93:e1:0a:66:40:54:e4:0f:d5:6f:ad:b2:4e:8e:c4:
                    32:a4:20:39:de:b7:62:c7:34:7d:d0:29:f7:41:da:
                    2d:5e:ff:73:39:71:22:ef:bf:ba:39:2f:a8:87:3e:
                    60:fe:e4:5f:ed:69:6a:bb:67:f6:5f:d7:12:80:af:
                    68:06:fe:57:f0:01:7f:59:59:ea:43:12:97:25:a3:
                    3e:98:89:b0:1e:3b:a4:10:4e:3e:c8:e1:f2:7d:2d:
                    ce:f6:7c:39:e8:02:19:e9:f9:89:d7:fd:eb:39:0a:
                    21:84:75:57:6f:d2:4d:a7:15:63:48:36:39:f0:d8:
                    76:dd:16:b2:18:a4:c6:46:f0:6f:9c:11:32:b2:c5:
                    9e:3e:0e:1b:d0:ef:ca:48:da:8b:25:33:43:3f:2d:
                    8d:ce:8d:91:0a:87:65:20:fc:fd:b4:24:5f:57:d0:
                    1d:38:e1:f4:33:ab:a5:f0:29:fc:44:59:94:e0:04:
                    fc:95:59:a8:43:a7:76:23:fd:92:80:83:c4:3e:5b:
                    f4:a1:d0:20:8c:b2:99:37:48:6f:97:df:14:2d:14:
                    21:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:69:B5:56:D6:D9:18:16:9B:69:3A:9B:96:8C:89:EA:02:FF:77:E0
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F53E5A1E9F9D11F18530A7F0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.85.26.0/24
                  154.85.97.0/24
                  154.85.99.0/24
                  154.90.1.0/24
                  154.90.129.0-154.90.131.255
                  154.90.142.0/23
                  154.90.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:82:7f:ba:1e:cf:32:a8:b1:9c:cb:7f:7c:a6:b6:b9:de:76:
         5b:ff:07:4d:22:b2:cd:13:a5:75:0d:9c:fe:d5:08:cf:c5:4c:
         0a:b9:7b:ee:8c:87:80:08:d9:f6:00:de:19:5a:e4:2a:81:cd:
         cc:88:2f:29:aa:6b:02:03:5f:fa:06:ea:fb:7b:a6:13:d9:e4:
         dd:0d:88:09:9b:22:53:db:a4:0f:9d:40:2c:eb:5d:33:7c:f3:
         e9:8d:ff:f5:fc:a7:ec:94:d9:0e:dc:2a:68:fa:ac:57:e3:9b:
         42:bf:2f:b6:7a:4c:b1:24:1a:b8:4c:46:ef:01:5d:26:52:34:
         f3:2b:de:d9:95:04:a2:ee:96:4f:56:4d:2b:8e:b1:b7:fd:ed:
         4e:24:54:6e:56:69:6b:0b:7c:1c:37:9e:16:ad:61:58:b1:70:
         07:57:3c:e2:a5:b7:5c:f0:61:49:8e:68:dd:ff:bd:bc:4e:c5:
         b2:29:b0:8f:7a:8c:ee:62:9f:c0:1d:da:21:9f:e0:9f:7c:6b:
         7b:38:67:ca:c7:40:46:3d:c2:19:ab:1e:a0:6c:94:23:76:c9:
         bf:8c:3b:bc:7a:1a:ce:55:02:3f:18:9d:ae:f1:f1:5d:57:b7:
         be:10:d2:8a:59:48:a6:99:64:47:54:6a:cd:a0:aa:0c:42:1c:
         84:7b:dc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----