Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C9097789C8B11F19C81130ECF1D38B0.roa
File:                     1C9097789C8B11F19C81130ECF1D38B0.roa (raw, json)
Hash identifier:          kZuC3ZDuqumsrcvf1POeiI0bs5hmVD4IkngDjc4y/KI=
Subject key identifier:   18:63:BC:A0:D2:AB:7E:26:1D:05:5C:43:05:6E:92:EC:62:3E:55:5C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E098
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C9097789C8B11F19C81130ECF1D38B0.roa
Signing time:             Thu 20 Aug 2026 11:34:32 +0000
ROA not before:           Thu 20 Aug 2026 11:34:28 +0000
ROA not after:            Sat 26 Sep 2026 11:34:28 +0000
asID:                     138915
IP address blocks:        154.203.128.0/23 maxlen: 24
                          154.203.130.0/23 maxlen: 24
                          154.203.132.0/24 maxlen: 24
                          154.203.133.0/24 maxlen: 24
                          154.203.134.0/24 maxlen: 24
                          154.203.136.0/24 maxlen: 24
                          154.203.165.0/24 maxlen: 24
                          154.203.178.0/24 maxlen: 24
                          154.203.181.0/24 maxlen: 24
                          154.206.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123032 (0x1e098)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 11:34:28 2026 GMT
            Not After : Sep 26 11:34:28 2026 GMT
        Subject: CN=6a86e648-58ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:43:8c:60:e0:e8:30:54:b8:a0:37:c1:44:c6:
                    c5:65:21:2d:6d:94:cb:c5:31:1c:e4:0b:0e:57:ff:
                    8e:17:27:54:82:e9:d7:80:23:7c:74:d2:45:fc:f0:
                    09:82:a4:b5:da:9f:95:d1:42:8c:59:66:d8:49:01:
                    71:a6:f9:ab:49:39:9f:c5:06:e0:01:5f:ff:45:6c:
                    96:53:cf:95:6f:79:a1:c9:97:c0:56:6e:38:94:87:
                    43:a4:f3:42:d0:de:a9:8c:3f:29:16:0f:a6:52:92:
                    0b:62:ba:2e:42:ad:e9:2c:82:5e:38:c4:99:08:09:
                    02:ea:ad:de:86:03:a5:c3:64:34:f7:d4:1b:f2:95:
                    02:38:5b:48:78:08:f6:8e:08:23:e5:e5:dc:1c:f5:
                    8f:3f:f7:9b:28:0d:f6:d9:48:ce:0a:9f:f5:af:87:
                    37:8e:77:2f:eb:6a:05:45:f5:90:79:64:d7:f5:6d:
                    e9:41:0b:81:00:79:94:a4:a6:8a:04:42:ed:02:cc:
                    13:36:9d:b8:8b:87:40:07:9c:63:98:41:d1:4c:79:
                    da:3a:c8:6b:d7:cb:44:cc:07:fe:2c:e6:06:6e:4a:
                    20:a7:3b:0d:62:a3:82:0b:59:6d:3b:3c:eb:3d:52:
                    d8:fa:c2:6e:86:75:5d:1f:fd:cc:cc:b6:ca:84:00:
                    22:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:63:BC:A0:D2:AB:7E:26:1D:05:5C:43:05:6E:92:EC:62:3E:55:5C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C9097789C8B11F19C81130ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.128.0-154.203.134.255
                  154.203.136.0/24
                  154.203.165.0/24
                  154.203.178.0/24
                  154.203.181.0/24
                  154.206.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:99:1f:6c:d6:57:72:96:91:16:cb:5b:a6:4f:c4:c2:d1:41:
         42:59:d2:b3:2a:7a:0e:94:3d:85:9e:f8:5d:b4:fa:f2:ef:49:
         70:13:87:ba:a6:b5:bc:bd:6f:31:e8:f5:07:da:88:1c:ca:43:
         17:d7:27:24:0b:91:5a:37:06:9f:3d:2e:0d:c5:b2:f8:99:c2:
         dc:ec:49:54:85:4b:a1:16:e7:2a:da:e4:dc:58:bf:6c:13:aa:
         f7:56:a5:7d:34:37:4c:77:85:c2:c2:62:9f:80:b9:20:f2:d3:
         51:0e:99:fa:21:e7:fa:fb:f7:29:c4:43:f7:76:9f:30:c8:53:
         1b:a4:48:1e:25:76:70:24:9e:11:e8:03:32:96:87:e3:11:b9:
         b7:db:a0:81:88:96:ac:70:d4:f7:6b:71:44:7f:4d:36:b8:61:
         ef:b1:a7:8d:87:a0:69:b3:e6:e2:0e:80:67:50:ec:23:f4:a1:
         9a:2a:12:06:92:89:e1:4e:06:19:3a:0d:60:10:10:59:f9:d1:
         53:17:e7:52:3c:0c:5b:ce:7c:f4:12:cb:c8:10:77:6d:f2:cc:
         58:4d:54:06:c4:4a:24:0e:c6:eb:33:0f:12:ed:0f:d5:ac:7e:
         d9:0d:eb:71:55:07:eb:d2:56:a6:33:d5:4b:ca:eb:e8:42:0d:
         bb:40:74:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----