Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A9715829CA111F19CAD1B13CF1D38B0.roa
File:                     9A9715829CA111F19CAD1B13CF1D38B0.roa (raw, json)
Hash identifier:          hlNK0oCda6t6Gg9IH3pS03WdNnd5bBgghx21gb7KYNY=
Subject key identifier:   6E:68:88:B0:DF:A7:6D:7F:2B:29:3A:8F:DE:7E:3C:B2:CC:82:1D:DF
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E0CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A9715829CA111F19CAD1B13CF1D38B0.roa
Signing time:             Thu 20 Aug 2026 14:15:33 +0000
ROA not before:           Thu 20 Aug 2026 14:15:29 +0000
ROA not after:            Sat 26 Sep 2026 14:15:29 +0000
asID:                     138915
IP address blocks:        154.93.72.0/24 maxlen: 24
                          154.93.74.0/24 maxlen: 24
                          154.93.96.0/24 maxlen: 24
                          154.93.97.0/24 maxlen: 24
                          154.94.86.0/24 maxlen: 24
                          154.94.87.0/24 maxlen: 24
                          154.94.100.0/24 maxlen: 24
                          154.94.116.0/24 maxlen: 24
                          154.94.123.0/24 maxlen: 24
                          154.94.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123082 (0x1e0ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 14:15:29 2026 GMT
            Not After : Sep 26 14:15:29 2026 GMT
        Subject: CN=6a870c04-343f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:dd:c8:31:34:fc:bd:0e:da:6a:2c:b7:0e:3d:
                    b0:0a:73:de:31:47:10:00:65:e7:27:ed:10:0c:e8:
                    05:33:60:8a:e5:db:ee:d3:60:5b:8d:28:51:9a:a2:
                    cc:be:01:d0:de:7d:98:1d:fc:ed:b8:26:0e:c1:95:
                    db:25:56:f3:e5:13:6e:68:dc:69:72:90:8d:d5:3f:
                    bd:a5:2b:9f:d1:0c:78:5e:10:aa:7e:46:61:94:bb:
                    2c:dc:93:3a:76:da:fc:a5:9c:77:6c:fc:70:6d:bc:
                    39:d3:e2:82:26:b9:dc:32:db:d8:b1:30:82:dc:51:
                    c5:d8:31:b6:f1:87:0c:62:cb:a8:9a:4f:95:1a:92:
                    23:bd:80:9c:04:1e:c9:2b:17:90:55:60:b3:8d:bc:
                    5b:7d:0b:ea:9a:65:82:0d:fd:56:7b:05:72:c4:2e:
                    14:54:27:34:c5:47:bb:2a:8b:9e:ca:80:98:9a:38:
                    9f:a9:1e:9f:fd:05:01:fb:f1:7d:5c:5f:97:4a:65:
                    e5:d1:27:0a:e6:e3:5d:61:e6:dc:3d:26:f1:f0:c6:
                    3c:6e:2a:20:27:4c:bd:9d:68:70:fb:aa:26:33:4d:
                    52:45:5c:42:76:fa:a7:fc:3c:ca:d6:1f:d9:cc:9a:
                    d7:3d:c5:00:9e:0e:83:32:37:4e:f9:86:46:b0:4a:
                    89:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:68:88:B0:DF:A7:6D:7F:2B:29:3A:8F:DE:7E:3C:B2:CC:82:1D:DF
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A9715829CA111F19CAD1B13CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.93.72.0/24
                  154.93.74.0/24
                  154.93.96.0/23
                  154.94.86.0/23
                  154.94.100.0/24
                  154.94.116.0/24
                  154.94.123.0-154.94.124.255

    Signature Algorithm: sha256WithRSAEncryption
         2c:69:4f:7b:5b:0f:fb:00:22:74:9f:db:89:8e:41:60:f8:62:
         cc:a4:a1:bc:0f:5f:0a:4c:20:7d:15:98:1a:60:d6:d8:18:2a:
         0d:11:d2:2b:eb:73:82:2b:8b:6b:04:89:ff:e8:a2:e3:87:1d:
         c0:35:73:90:54:57:fd:f8:a4:85:84:56:08:43:af:aa:5d:c6:
         9e:ca:5a:f8:09:16:b3:27:60:47:ae:6b:ab:91:05:55:fd:e8:
         1a:7e:2d:0e:5c:b0:d6:60:90:c4:4a:6f:56:7e:1e:26:ae:24:
         69:b9:a9:fc:33:c4:6a:a3:fc:c4:2c:dc:8e:4b:4a:86:d2:5e:
         e4:ff:49:f1:c0:39:d3:bf:1a:f3:22:46:03:f0:79:12:c5:b3:
         09:09:d3:35:13:50:b8:c6:cd:a5:ea:c0:78:df:d7:ab:b1:43:
         00:04:6a:62:c7:14:28:3c:60:13:4e:65:af:68:95:1f:33:e0:
         36:c5:f7:e9:af:e4:9f:04:a5:6a:28:48:84:ac:52:3e:08:6c:
         2c:43:95:09:a3:91:33:6b:ee:3b:22:58:c9:73:fb:29:2a:a8:
         35:56:6a:1b:9c:03:c0:cd:98:6f:7c:f2:d9:f1:71:cd:a1:1f:
         dd:14:8d:6e:0c:26:59:4a:73:2a:7d:58:ec:06:ab:57:f1:cc:
         a4:c2:c9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----