Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/566EC7F0A79211F1963CC61ACF1D38B0.roa
File:                     566EC7F0A79211F1963CC61ACF1D38B0.roa (raw, json)
Hash identifier:          pO9oQfxCfpZGMSD1VHE5scdfU3EtaPhyVcy1pCsLSg0=
Subject key identifier:   73:CD:0C:D6:46:37:CD:9D:88:40:8D:D8:46:70:B3:FC:A3:C3:FA:40
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E52F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/566EC7F0A79211F1963CC61ACF1D38B0.roa
Signing time:             Thu 03 Sep 2026 12:23:58 +0000
ROA not before:           Thu 03 Sep 2026 12:23:54 +0000
ROA not after:            Sat 10 Oct 2026 12:23:54 +0000
asID:                     138915
IP address blocks:        154.223.27.0/24 maxlen: 24
                          154.223.30.0/24 maxlen: 24
                          154.223.32.0/24 maxlen: 24
                          154.223.33.0/24 maxlen: 24
                          154.223.34.0/23 maxlen: 24
                          154.223.37.0/24 maxlen: 24
                          154.223.40.0/23 maxlen: 24
                          154.223.42.0/24 maxlen: 24
                          154.223.43.0/24 maxlen: 24
                          154.223.78.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124207 (0x1e52f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  3 12:23:54 2026 GMT
            Not After : Oct 10 12:23:54 2026 GMT
        Subject: CN=6a9966de-5f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7c:55:88:c9:44:98:e1:ee:28:89:2d:e4:ab:
                    ea:0d:75:24:ad:a8:c6:b3:db:6d:3d:8d:52:72:d2:
                    ed:80:d2:50:8b:9b:bb:89:ef:42:0e:e9:0a:60:01:
                    7e:f8:d0:30:8c:2c:f0:cd:c0:ac:88:e3:c3:25:b4:
                    e0:9b:ce:e6:e7:17:24:ab:37:3f:b8:2c:d8:7a:91:
                    34:3d:4b:01:d3:50:d0:cf:39:11:7a:77:1e:c4:14:
                    5e:53:aa:60:e2:9c:2e:ed:b5:f1:a1:fd:d1:1b:82:
                    d3:ca:7c:ea:6a:72:60:fc:cc:f1:68:00:81:7b:77:
                    2a:18:4f:2c:91:02:71:20:5d:ef:44:ee:0d:39:65:
                    6b:08:f3:70:42:56:d4:57:96:e9:89:9e:24:51:86:
                    f5:c5:da:3b:8e:bb:70:e4:b7:ef:9e:42:76:fe:00:
                    94:8d:c6:5b:c4:48:af:ee:7c:4c:69:94:a8:d9:b2:
                    99:21:0b:0e:c0:6d:d0:1e:27:f8:9a:f9:f6:ca:40:
                    f8:dd:8e:f7:ce:c9:20:44:5c:dd:5f:38:ec:2d:dd:
                    94:43:8d:b2:9a:b3:fb:cb:76:9e:42:c0:5e:34:cf:
                    fe:d2:14:d1:3f:9d:77:7b:3b:9d:82:62:e9:f8:2d:
                    c3:86:f3:4a:4c:dd:67:34:0e:3c:73:b6:89:34:09:
                    82:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CD:0C:D6:46:37:CD:9D:88:40:8D:D8:46:70:B3:FC:A3:C3:FA:40
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/566EC7F0A79211F1963CC61ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.223.27.0/24
                  154.223.30.0/24
                  154.223.32.0/22
                  154.223.37.0/24
                  154.223.40.0/22
                  154.223.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cb:bd:af:17:ce:9b:5d:19:36:01:0d:63:ce:fe:62:e7:8c:41:
         48:c0:7a:b4:55:81:fa:f6:4b:5a:c2:4f:54:c0:7f:53:8c:a4:
         bf:0a:6a:bb:0d:bc:05:7f:0b:3f:17:05:e1:81:06:e3:04:e4:
         aa:23:74:54:9a:c3:28:23:43:1f:67:22:9e:f9:77:14:a6:e7:
         f5:3f:87:97:15:0a:9e:04:ba:2a:22:10:8b:cc:d4:74:90:98:
         5c:1c:4d:d8:7c:6d:bc:08:7c:f3:e8:99:1f:02:59:5b:a7:ea:
         30:c4:d8:c3:3b:b1:ff:88:51:d6:de:92:e2:fc:02:15:fc:11:
         06:7b:42:98:f4:ae:e5:ad:bb:73:fa:1c:40:32:1a:c3:04:fc:
         94:2a:fb:9d:6f:ee:62:e2:ac:65:1b:78:ee:91:ad:16:8c:84:
         79:92:f4:92:78:0f:25:42:60:25:1d:4c:e6:83:12:ca:f2:be:
         0a:47:3f:4f:ea:56:96:28:8a:51:d3:c3:21:e4:d1:79:6b:42:
         3c:0d:79:44:de:81:98:8c:80:53:e5:2e:be:91:d0:71:cb:2e:
         9b:38:34:47:33:f7:54:59:ff:08:07:10:16:ad:79:d6:59:68:
         13:4a:2c:96:31:cb:85:2d:84:d6:d1:55:02:14:9c:96:06:0a:
         c9:7f:24:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----