Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41E9CBF89C8A11F18B453308CF1D38B0.roa
File:                     41E9CBF89C8A11F18B453308CF1D38B0.roa (raw, json)
Hash identifier:          8i0Zo+E8/uPnPlH6tU0ieInlXlkNdaNpSTxUfKR9h4I=
Subject key identifier:   72:72:21:DB:90:79:3B:50:74:5D:35:D8:95:9C:B5:2F:01:19:AC:8F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E094
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41E9CBF89C8A11F18B453308CF1D38B0.roa
Signing time:             Thu 20 Aug 2026 11:28:25 +0000
ROA not before:           Thu 20 Aug 2026 11:28:21 +0000
ROA not after:            Sat 26 Sep 2026 11:28:21 +0000
asID:                     138915
IP address blocks:        154.206.100.0/23 maxlen: 24
                          154.206.102.0/23 maxlen: 24
                          154.206.104.0/23 maxlen: 24
                          154.206.106.0/24 maxlen: 24
                          154.206.107.0/24 maxlen: 24
                          154.206.108.0/23 maxlen: 24
                          154.206.110.0/23 maxlen: 24
                          154.206.112.0/23 maxlen: 24
                          154.206.114.0/23 maxlen: 24
                          154.206.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123028 (0x1e094)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 11:28:21 2026 GMT
            Not After : Sep 26 11:28:21 2026 GMT
        Subject: CN=6a86e4d9-f291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f7:0a:40:9e:14:39:1b:8d:33:40:8b:ed:d6:
                    d3:4f:38:62:af:0a:f4:94:c8:08:26:80:af:d9:38:
                    d1:7b:e8:cf:34:7b:21:f3:59:03:a7:8d:05:ce:4e:
                    fc:89:63:d8:17:b3:aa:9b:10:99:02:23:a8:32:85:
                    ec:20:1b:bc:4f:28:84:aa:69:b8:f3:55:f9:f7:92:
                    0f:1f:f0:81:61:64:7b:56:8d:06:a5:42:1b:9f:3b:
                    ae:e6:84:76:52:c0:a4:ae:bf:a2:f3:51:12:a2:0c:
                    0d:0c:d7:ee:2b:e6:50:69:7a:1e:56:c8:d5:1a:22:
                    35:0f:c5:49:aa:5c:a9:f6:77:b3:9a:e7:bf:b5:d0:
                    9c:b9:e3:ce:eb:b3:11:f6:0a:a7:a9:f7:18:06:94:
                    ab:ea:e0:6d:8a:d9:14:ef:cf:e7:f9:69:02:d5:75:
                    f5:97:b7:fd:bc:80:ae:24:45:af:fb:4f:11:ce:2f:
                    f5:4b:00:9c:85:42:93:32:1a:1d:7a:f7:d6:d7:64:
                    b9:04:d5:33:12:c6:16:b5:62:5c:37:db:51:64:05:
                    73:10:ae:59:a7:b4:f5:fa:43:22:b2:e1:21:d0:ee:
                    20:aa:8e:96:fe:de:d6:d8:e7:d4:75:7d:de:53:bb:
                    64:27:84:9a:58:a1:65:23:01:0a:ac:7d:f5:43:95:
                    92:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:72:21:DB:90:79:3B:50:74:5D:35:D8:95:9C:B5:2F:01:19:AC:8F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41E9CBF89C8A11F18B453308CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.206.100.0-154.206.117.255

    Signature Algorithm: sha256WithRSAEncryption
         8b:30:d7:06:ae:1d:8f:e6:3d:8b:ef:54:1f:84:ba:56:9f:f8:
         44:21:c9:1d:33:6b:55:31:56:6e:3b:c6:34:16:c5:50:c4:64:
         e6:3f:e5:6e:f5:a3:7f:25:d9:8d:a2:e8:da:e0:5c:fa:63:41:
         fc:a7:b0:ca:7f:79:a5:2a:10:9b:f0:cf:d3:7d:d6:a4:7e:fa:
         be:53:b6:ba:c0:90:70:71:90:33:cd:1c:40:c0:a7:fc:d4:9c:
         c9:4d:cd:6c:de:9a:35:a9:98:1c:0a:65:d2:15:97:08:80:ac:
         05:4f:3d:30:c9:6f:aa:0b:33:9a:76:8a:6c:b7:d3:a4:63:a6:
         e8:68:70:d4:d7:9e:9f:e8:16:44:ca:07:15:da:c4:da:ac:31:
         6f:9c:4c:c9:0b:13:3e:e2:45:41:40:e3:9e:55:1f:12:2e:5d:
         66:dc:6e:29:d9:14:85:f8:7f:0f:55:8a:96:c5:8f:9c:57:14:
         07:7b:d3:65:46:14:41:ea:25:9c:9d:6e:44:fd:08:fc:d1:fa:
         7e:8d:92:f3:f4:46:b9:00:63:ef:57:fb:13:e1:a7:0b:f2:6c:
         7b:40:a7:c4:ba:d4:f7:03:1a:ca:a8:39:e0:c8:ca:38:1b:05:
         dd:1f:bf:ef:63:79:d6:aa:0c:fa:66:77:b6:a0:b8:2b:f2:d0:
         58:52:a9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----