Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D48F807AA76F11F1A849C0D0CE1D38B0.roa
File:                     D48F807AA76F11F1A849C0D0CE1D38B0.roa (raw, json)
Hash identifier:          vJbzr30UFTMxVLVS2u6GIYJu/xOf4jYS63XZfWpKGeI=
Subject key identifier:   84:71:CA:DB:8F:FE:BC:41:64:F8:00:FF:20:09:C2:74:3C:01:47:E2
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E4FB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D48F807AA76F11F1A849C0D0CE1D38B0.roa
Signing time:             Thu 03 Sep 2026 08:16:58 +0000
ROA not before:           Thu 03 Sep 2026 08:16:54 +0000
ROA not after:            Sat 10 Oct 2026 08:16:54 +0000
asID:                     138915
IP address blocks:        154.93.46.0/24 maxlen: 24
                          154.93.47.0/24 maxlen: 24
                          154.93.48.0/24 maxlen: 24
                          154.93.49.0/24 maxlen: 24
                          154.93.52.0/23 maxlen: 24
                          154.93.54.0/23 maxlen: 24
                          154.93.56.0/23 maxlen: 24
                          154.93.58.0/24 maxlen: 24
                          154.93.59.0/24 maxlen: 24
                          154.93.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124155 (0x1e4fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  3 08:16:54 2026 GMT
            Not After : Oct 10 08:16:54 2026 GMT
        Subject: CN=6a992cfa-09e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e8:2d:42:0f:10:59:4e:8f:55:8b:30:08:fb:
                    06:58:d2:74:ba:32:86:90:03:24:c2:45:1a:e3:b4:
                    02:23:ae:8f:1a:d2:42:a9:a4:55:d0:8c:13:40:69:
                    ec:e5:1f:f4:7b:2d:8a:0d:28:f9:42:a0:ab:28:d3:
                    72:4d:15:46:2e:16:8f:ab:6a:3b:9b:87:b3:51:1f:
                    6b:84:32:d7:bd:06:5a:4d:fc:7e:10:a6:85:b7:22:
                    5d:42:13:ec:f1:c1:27:89:7e:94:c1:f0:69:77:e4:
                    cf:99:4d:5b:2f:a2:ad:bb:4b:49:07:1c:97:f9:e3:
                    96:47:a5:94:48:e6:13:04:4b:6c:06:34:f0:4d:11:
                    00:f4:0d:86:4b:12:5f:c7:63:a8:59:7d:00:ef:c4:
                    7e:5f:93:7b:49:c9:5f:30:a0:da:54:0c:06:eb:33:
                    a0:c2:f9:2e:71:7f:54:63:49:34:9f:69:52:f5:98:
                    19:71:bf:83:48:9b:98:01:6e:5d:84:2e:51:11:76:
                    a8:c2:6e:98:54:23:4a:0b:c6:5f:83:a2:46:49:5e:
                    35:18:fb:9a:f2:91:fa:88:bb:cd:4d:ac:e0:47:21:
                    32:25:d5:f9:e0:e9:70:e3:e3:4a:f7:ee:f9:5c:69:
                    14:5a:0b:5e:8a:11:b9:86:d1:51:89:2f:bd:1d:9c:
                    e5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:71:CA:DB:8F:FE:BC:41:64:F8:00:FF:20:09:C2:74:3C:01:47:E2
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D48F807AA76F11F1A849C0D0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.93.46.0-154.93.49.255
                  154.93.52.0-154.93.59.255
                  154.93.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:73:8c:0e:3d:8e:80:55:f6:57:3d:18:84:0c:be:b6:42:c5:
         9b:f6:e6:48:e6:02:f5:3b:c3:77:de:76:27:2b:6c:19:1b:44:
         1f:96:0a:e8:20:83:e3:4e:9b:09:ff:ca:0f:b6:ca:ed:9f:93:
         16:87:89:71:37:a5:fd:51:d1:fc:26:bc:b1:4d:92:95:2f:4a:
         1d:8e:8a:6c:38:ce:8d:ac:67:fe:a2:0b:d0:74:71:c0:9b:2d:
         80:8a:4d:f4:60:6e:1c:79:13:7a:66:4d:7d:88:e9:d6:b6:45:
         0d:64:ed:56:06:7a:f2:54:23:41:b4:b0:b2:d7:ef:0f:71:4a:
         ca:2e:a8:dc:70:a1:43:46:0a:44:b9:b6:c4:f4:8b:99:eb:3e:
         9a:a0:67:09:3e:79:f5:db:65:02:1b:f9:d4:8a:33:8b:78:14:
         9b:4e:1a:1d:22:bf:66:6a:d0:be:7f:41:3a:24:37:11:50:d9:
         eb:ed:b4:f8:44:b1:b5:ad:01:0e:5a:85:b0:cb:ce:3f:02:9e:
         fa:cc:1e:ec:bf:96:f6:95:8b:9c:73:f6:b0:49:95:46:ae:e3:
         19:cf:b7:44:90:35:36:ed:90:d2:29:ee:53:0c:07:7d:f8:db:
         32:40:03:a5:be:34:e0:33:d6:32:9d:7f:99:2e:d4:11:4f:7a:
         d2:48:e0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----