Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75594752971711F189ECFD02CF1D38B0.roa
File:                     75594752971711F189ECFD02CF1D38B0.roa (raw, json)
Hash identifier:          RpkCPZVpZ1TsaxCRr5RARKqo3cuwC2vAPe78HBhY48A=
Subject key identifier:   7E:B2:F4:B1:81:5D:70:3F:3F:FD:7A:38:A9:DE:C9:55:AE:5B:AC:62
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DF13
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75594752971711F189ECFD02CF1D38B0.roa
Signing time:             Thu 13 Aug 2026 13:04:04 +0000
ROA not before:           Thu 13 Aug 2026 13:03:59 +0000
ROA not after:            Thu 24 Sep 2026 13:03:59 +0000
asID:                     214143
IP address blocks:        154.82.172.0/23 maxlen: 24
                          154.82.174.0/23 maxlen: 24
                          154.82.176.0/23 maxlen: 24
                          154.82.178.0/23 maxlen: 24
                          154.82.180.0/24 maxlen: 24
                          154.83.18.0/23 maxlen: 24
                          154.83.32.0/24 maxlen: 24
                          154.83.40.0/23 maxlen: 24
                          154.83.42.0/23 maxlen: 24
                          154.83.72.0/23 maxlen: 24
                          154.83.74.0/23 maxlen: 24
                          154.83.76.0/23 maxlen: 24
                          154.92.209.0/24 maxlen: 24
                          154.93.1.0/24 maxlen: 24
                          154.93.3.0/24 maxlen: 24
                          154.93.26.0/24 maxlen: 24
                          154.93.28.0/22 maxlen: 24
                          154.94.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122643 (0x1df13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 13 13:03:59 2026 GMT
            Not After : Sep 24 13:03:59 2026 GMT
        Subject: CN=6a7dc0c4-cda1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1a:39:a7:7f:a5:50:ab:36:d3:9b:51:a5:b1:
                    f4:1c:7e:fc:b6:07:a9:0c:c2:2a:09:f4:c5:ad:17:
                    2c:05:15:f6:49:92:38:6c:8b:da:63:8f:6e:76:76:
                    9f:e5:17:0b:16:a1:9c:27:c5:ad:94:5a:b3:e4:47:
                    2d:d7:48:f8:d7:50:84:b4:dc:5a:88:05:f7:56:8e:
                    c9:13:fa:c8:64:65:c8:d7:a1:41:08:4b:fd:90:0b:
                    22:d8:17:b2:f6:42:84:ba:1f:5f:e4:f9:7b:20:ee:
                    15:fc:50:19:05:17:a4:37:76:aa:35:aa:31:a8:e5:
                    ac:8b:fe:e8:d8:75:37:a8:6a:6b:6e:08:44:d5:a2:
                    f0:d0:52:92:ad:ab:6d:10:6f:8d:06:94:fd:b0:18:
                    90:1a:b4:33:49:b5:a6:f9:36:a5:74:c5:40:cb:ed:
                    e4:a6:4e:31:ae:78:da:b1:10:62:27:e9:6c:e8:33:
                    fa:01:a8:68:f9:1f:3d:36:9a:2e:34:4b:23:75:a4:
                    72:f4:2d:49:7e:43:94:28:8c:a8:50:d0:23:39:f7:
                    c5:1c:8e:94:b8:28:ee:0d:d7:ae:fd:cf:e6:fa:37:
                    d7:ea:04:ca:01:f2:de:fa:3d:62:80:d0:f2:b0:9e:
                    f4:1a:5f:e5:3e:49:66:06:39:ef:b3:5b:bd:b5:50:
                    4e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B2:F4:B1:81:5D:70:3F:3F:FD:7A:38:A9:DE:C9:55:AE:5B:AC:62
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75594752971711F189ECFD02CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.172.0-154.82.180.255
                  154.83.18.0/23
                  154.83.32.0/24
                  154.83.40.0/22
                  154.83.72.0-154.83.77.255
                  154.92.209.0/24
                  154.93.1.0/24
                  154.93.3.0/24
                  154.93.26.0/24
                  154.93.28.0/22
                  154.94.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:de:56:b8:0a:75:6e:8d:eb:34:ac:41:6e:4f:af:ea:e1:c7:
         7e:77:9f:9a:fa:de:37:96:1f:eb:7b:32:be:c1:df:5e:b1:df:
         55:43:a9:60:61:20:39:66:cb:f3:b5:f0:85:09:43:d1:5e:98:
         3c:50:65:2a:28:de:c6:ac:20:63:92:d1:c3:d9:bf:85:d2:b7:
         36:c0:b3:e2:5b:ed:67:a8:98:1d:25:d1:03:3c:0c:c8:64:b1:
         4e:ed:a2:56:ad:20:4f:f2:2c:42:12:90:bc:5a:57:56:d4:85:
         8e:0c:28:c9:09:70:99:7f:f3:73:29:15:ff:b5:d8:06:19:62:
         f0:e2:43:7c:99:bd:7d:75:55:b7:be:0d:fa:f6:4a:a6:d9:8f:
         42:88:0e:c2:76:d9:97:13:10:11:58:0f:29:64:4c:d3:b5:96:
         f8:65:b4:8e:7c:52:01:95:d6:5d:a4:2b:7a:62:c3:fd:ba:24:
         ee:e7:4c:ae:6f:dd:87:7b:d3:45:27:2b:c3:52:ed:71:bc:61:
         0e:3e:c2:64:cc:88:a3:f9:c2:78:c8:ab:33:d1:bf:d9:f3:b8:
         d2:40:bb:90:dc:e8:a6:3a:84:d5:c3:72:52:f3:66:2f:93:10:
         ae:c9:a4:64:da:18:b2:33:00:1e:ad:c4:52:ec:65:42:c8:6a:
         8a:df:24:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----