Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/778C86B69CA211F1A9283117CF1D38B0.roa
File:                     778C86B69CA211F1A9283117CF1D38B0.roa (raw, json)
Hash identifier:          JNZnBn7XzqbbV45jSjrDqQDzrsNCr+5dneTIvL3yO9g=
Subject key identifier:   BC:54:A0:30:15:3D:42:C3:91:E9:8E:18:D8:6E:94:43:E4:25:DC:AE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E0CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/778C86B69CA211F1A9283117CF1D38B0.roa
Signing time:             Thu 20 Aug 2026 14:21:43 +0000
ROA not before:           Thu 20 Aug 2026 14:21:39 +0000
ROA not after:            Sat 26 Sep 2026 14:21:39 +0000
asID:                     138915
IP address blocks:        154.93.84.0/23 maxlen: 24
                          154.93.86.0/24 maxlen: 24
                          154.93.92.0/24 maxlen: 24
                          154.93.98.0/24 maxlen: 24
                          154.93.99.0/24 maxlen: 24
                          154.93.102.0/24 maxlen: 24
                          154.93.126.0/24 maxlen: 24
                          154.93.127.0/24 maxlen: 24
                          154.94.66.0/23 maxlen: 24
                          154.94.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123084 (0x1e0cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 14:21:39 2026 GMT
            Not After : Sep 26 14:21:39 2026 GMT
        Subject: CN=6a870d77-dc2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:65:a4:3a:48:91:12:b1:f2:ea:01:38:e2:08:
                    0e:fc:b3:c9:6e:45:42:1b:d5:92:6c:b4:54:48:3d:
                    73:c5:ac:c0:59:43:1c:d3:26:e4:95:16:b6:5d:4e:
                    fd:eb:40:f1:9b:77:4c:4b:9e:c0:db:a5:ce:8e:da:
                    96:7b:07:dd:34:b3:6a:95:53:eb:dc:9c:ba:31:0f:
                    61:4b:66:3f:17:e2:60:87:ee:b6:81:43:2d:0a:39:
                    ce:42:df:e4:f4:cd:9d:89:66:9e:83:7f:59:25:14:
                    bd:ff:f4:2f:df:3d:d6:37:7d:a2:22:f2:34:51:58:
                    b1:a3:1b:c7:ee:4f:67:01:d5:00:dd:1c:48:92:50:
                    3d:cd:3c:ee:48:d1:d5:b9:00:9a:38:c1:d2:05:34:
                    06:f1:36:e0:c6:51:0b:8c:7d:3c:32:6f:7c:17:4d:
                    06:8c:e5:17:90:94:cd:6c:91:7a:62:72:e6:59:19:
                    24:10:4c:ab:28:a9:2d:53:1e:65:98:6f:9f:43:60:
                    55:d8:f8:0b:97:3f:bf:1c:29:76:96:31:78:8a:14:
                    e5:52:a1:48:7d:bc:26:5f:b8:b3:8a:91:04:35:ad:
                    32:c4:92:52:d6:31:7a:70:e8:dd:03:3a:f3:5b:a7:
                    5b:ed:2d:2c:e4:47:ee:2d:81:18:2d:80:34:c5:23:
                    1b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:54:A0:30:15:3D:42:C3:91:E9:8E:18:D8:6E:94:43:E4:25:DC:AE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/778C86B69CA211F1A9283117CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.93.84.0-154.93.86.255
                  154.93.92.0/24
                  154.93.98.0/23
                  154.93.102.0/24
                  154.93.126.0/23
                  154.94.66.0/23
                  154.94.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:2b:d4:40:85:7c:28:47:a7:b6:18:85:1a:66:2e:e9:6a:8a:
         9c:2c:55:4d:5d:d0:18:2b:25:c0:27:82:82:a9:58:65:81:8e:
         fa:04:44:25:ad:32:f3:54:ea:73:76:e2:fe:47:8d:8e:9e:2d:
         a6:58:6d:eb:78:48:26:1b:61:19:47:e2:be:71:07:b7:c5:08:
         a5:a1:1e:d3:c8:1f:04:fa:70:91:d8:cf:b9:34:1e:89:31:f0:
         ce:8c:4d:ef:20:ed:28:e5:93:f9:94:7b:a0:bd:56:33:af:2f:
         af:2e:d6:a7:4a:d2:17:71:0d:47:d2:39:c7:c9:40:83:dd:0c:
         50:cc:db:b7:44:f0:29:e8:21:36:05:df:50:0e:88:5b:a2:63:
         9e:f7:e9:11:2c:96:8d:93:75:17:28:76:7d:a5:6a:c3:74:8c:
         1e:07:d3:55:3b:b9:81:0f:f6:04:e2:4e:c4:4e:c1:96:ba:0a:
         40:31:49:2c:f1:a1:fa:0c:d7:75:d5:63:63:8c:21:0e:5f:3c:
         93:60:ae:e5:93:e1:9d:df:34:7b:5c:d3:0d:eb:8b:f5:a6:3d:
         b9:8f:20:0a:f1:30:f5:8f:00:d7:ba:1f:b6:ab:bc:53:8c:b8:
         e6:16:16:84:e7:76:75:ad:5a:c1:d5:b4:c2:71:df:fb:3b:f3:
         77:a7:e5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----