Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED3444EC9C8B11F1869B8212CF1D38B0.roa
File:                     ED3444EC9C8B11F1869B8212CF1D38B0.roa (raw, json)
Hash identifier:          B5qh6G2vSS4JPKOeHcI67xzs6HWVeZynXwGlvq7oOb0=
Subject key identifier:   FB:E9:C8:2A:92:46:4B:C4:17:19:B2:4B:EE:7E:86:67:A1:C5:EC:4F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E09A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED3444EC9C8B11F1869B8212CF1D38B0.roa
Signing time:             Thu 20 Aug 2026 11:40:22 +0000
ROA not before:           Thu 20 Aug 2026 11:40:18 +0000
ROA not after:            Sat 26 Sep 2026 11:40:18 +0000
asID:                     138915
IP address blocks:        154.203.143.0/24 maxlen: 24
                          154.203.144.0/23 maxlen: 24
                          154.203.163.0/24 maxlen: 24
                          154.205.140.0/24 maxlen: 24
                          154.205.157.0/24 maxlen: 24
                          154.205.158.0/24 maxlen: 24
                          154.205.159.0/24 maxlen: 24
                          154.206.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123034 (0x1e09a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 11:40:18 2026 GMT
            Not After : Sep 26 11:40:18 2026 GMT
        Subject: CN=6a86e7a6-76ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7c:bc:77:64:ca:91:ae:0b:30:12:a5:1e:5c:
                    ee:ae:46:dc:49:9e:5a:50:4f:30:82:66:66:aa:59:
                    cf:99:13:3e:7c:d6:db:8d:06:a1:c2:b7:e2:95:8d:
                    63:a0:b1:fc:2c:58:e7:c6:6c:4c:28:48:66:0b:72:
                    ab:4e:e1:3f:54:42:6f:c2:75:28:9a:eb:fd:76:28:
                    33:43:72:ee:b0:22:72:9e:77:56:fd:00:37:a3:cb:
                    5a:f7:02:31:52:9b:8b:4f:1a:2e:26:51:1d:65:13:
                    20:37:19:85:34:db:48:e2:0a:7a:36:71:b8:02:fb:
                    fd:d5:8f:ab:8d:d9:8b:0a:ce:ee:ff:7f:98:97:cc:
                    65:cf:0c:91:10:97:28:ae:ae:c6:4a:b5:22:37:3c:
                    53:05:08:cb:db:2b:f5:36:ca:ba:16:9b:cd:33:e7:
                    56:49:16:98:11:d5:5a:78:d6:fb:ac:81:81:30:8e:
                    7d:fa:c8:9b:3a:90:e1:e2:41:66:09:94:17:f6:05:
                    5e:33:eb:aa:48:9b:7e:da:6b:43:3f:a6:54:99:cc:
                    4c:aa:5a:25:f1:64:73:45:9a:82:17:61:e0:69:13:
                    4a:5b:0f:b2:73:5b:8b:57:bb:c1:c1:fa:df:1d:7f:
                    f5:1e:a8:01:90:28:94:d1:08:1f:36:6b:3b:fc:f1:
                    ec:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E9:C8:2A:92:46:4B:C4:17:19:B2:4B:EE:7E:86:67:A1:C5:EC:4F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED3444EC9C8B11F1869B8212CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.143.0-154.203.145.255
                  154.203.163.0/24
                  154.205.140.0/24
                  154.205.157.0-154.205.159.255
                  154.206.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:95:81:65:95:fd:dc:fe:1e:4d:66:b3:72:11:98:f1:7f:51:
         c0:b1:57:1d:c6:6b:e8:40:ee:0b:a1:2c:a7:60:e5:0a:f4:a5:
         9f:1e:2f:f4:68:58:b1:f3:73:31:49:7c:78:18:d1:3f:9a:bd:
         50:3b:90:d3:f0:03:bb:e2:85:d1:f0:14:78:3b:b2:97:72:ef:
         d2:78:ed:a4:83:b7:9e:cc:6b:66:c5:d1:52:bd:bf:0e:ba:02:
         5a:d1:45:88:07:f1:36:e2:c5:4a:4b:62:23:ea:d4:5a:02:ce:
         64:b5:96:e2:18:dc:bd:f4:a2:51:b8:bb:64:6e:f4:85:51:4e:
         55:2e:b5:82:c4:d4:50:91:56:ed:62:ff:db:ce:24:09:42:e5:
         0d:f7:0a:55:b3:b9:82:04:1c:3a:d3:c6:34:62:a0:fd:b8:ba:
         af:77:dd:aa:55:eb:dc:32:77:73:00:ab:3b:8a:64:bb:0b:85:
         73:a5:73:10:54:d2:a0:4d:a7:c2:28:ce:2f:68:a1:38:87:b8:
         e8:df:8c:64:5e:44:9d:2f:d8:ef:4c:1c:f9:41:cd:46:80:d2:
         bc:a8:33:ee:e6:5d:31:f9:42:56:01:d0:1f:a2:04:ef:69:7b:
         7a:14:1e:69:6c:85:79:57:b9:00:4a:bd:35:e8:8b:b8:7f:c9:
         b6:c2:8a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----