Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F93549BAA76E11F192192AC9CE1D38B0.roa
File:                     F93549BAA76E11F192192AC9CE1D38B0.roa (raw, json)
Hash identifier:          bHc3Gyn1q4kLfLNX2hmb4+lNLjTU3Q+R8/cxLQZukv4=
Subject key identifier:   22:22:BF:9A:69:61:DA:43:CA:C8:B1:C4:DD:00:84:12:92:09:09:E5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E4F9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F93549BAA76E11F192192AC9CE1D38B0.roa
Signing time:             Thu 03 Sep 2026 08:10:50 +0000
ROA not before:           Thu 03 Sep 2026 08:10:46 +0000
ROA not after:            Sat 10 Oct 2026 08:10:46 +0000
asID:                     138915
IP address blocks:        154.90.46.0/23 maxlen: 24
                          154.93.32.0/24 maxlen: 24
                          154.93.33.0/24 maxlen: 24
                          154.93.34.0/23 maxlen: 24
                          154.93.36.0/23 maxlen: 24
                          154.93.38.0/23 maxlen: 24
                          154.93.40.0/23 maxlen: 24
                          154.93.42.0/23 maxlen: 24
                          154.93.44.0/24 maxlen: 24
                          154.93.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124153 (0x1e4f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  3 08:10:46 2026 GMT
            Not After : Oct 10 08:10:46 2026 GMT
        Subject: CN=6a992b8a-c81e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:63:54:73:36:e4:7e:e7:48:22:45:cf:25:98:
                    d2:9a:04:a4:bd:f3:40:cd:b3:f2:cb:2c:ee:ec:1a:
                    79:9a:84:da:e7:e9:4b:ab:d7:be:14:28:8d:66:df:
                    fd:09:cb:fb:82:86:43:25:27:d4:7c:40:51:b7:51:
                    22:44:e1:d1:7b:a2:1b:09:6a:e0:d3:54:db:07:fc:
                    7c:5e:39:3c:1d:b8:bd:2f:f1:ee:d0:54:62:f6:06:
                    01:73:3f:f4:0d:38:10:85:8c:97:2f:ea:0d:46:fa:
                    e6:5f:e7:e7:af:4c:b2:c3:12:6d:60:df:d0:1b:ac:
                    2b:66:e2:ed:37:d7:31:07:12:67:28:b9:73:5b:2a:
                    c7:78:8d:d1:3e:75:a7:1f:26:6b:0e:eb:10:58:36:
                    60:0c:44:af:38:f7:98:42:45:37:2d:9b:80:57:a5:
                    6a:6e:1f:4d:7d:e3:0c:e1:5d:8b:9f:42:a2:0d:cd:
                    78:38:da:9b:2a:e9:15:c6:3b:f2:8e:f1:9e:56:be:
                    97:bc:98:33:3e:f6:ee:f1:7b:d8:34:a9:d0:78:bf:
                    8c:ca:66:91:76:b1:0c:01:01:4f:24:27:dd:c6:49:
                    f2:f2:c8:7d:ae:89:47:db:8f:7a:88:68:b9:79:95:
                    3d:d8:ff:c9:dd:45:c0:d3:76:be:39:18:93:8b:f8:
                    6d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:22:BF:9A:69:61:DA:43:CA:C8:B1:C4:DD:00:84:12:92:09:09:E5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F93549BAA76E11F192192AC9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.90.46.0/23
                  154.93.32.0-154.93.45.255

    Signature Algorithm: sha256WithRSAEncryption
         d2:c8:27:69:23:c5:ae:36:15:49:39:77:5b:b1:be:2f:9b:54:
         e7:89:b8:ff:62:f8:1e:be:96:d6:68:fd:73:99:11:91:15:41:
         dc:a2:a4:63:b5:7e:8c:3a:a6:bf:8f:52:9f:9e:13:e6:c5:07:
         b8:ec:f7:03:c8:79:55:c9:33:60:7f:7c:98:4e:43:97:75:b7:
         65:d9:ee:37:a3:c9:05:d5:3e:b4:73:e3:4b:40:49:1f:fb:97:
         e9:50:1a:36:63:28:0c:c8:90:d9:a4:b0:39:0c:f8:28:db:ca:
         af:92:ae:6e:cf:6a:64:e4:d1:fb:a1:a0:9a:3d:1f:d6:80:c5:
         9f:9d:8d:26:a3:76:e2:a2:81:77:e9:8b:ec:8b:3a:f7:66:7a:
         14:c9:a7:08:b6:f6:ef:ab:2a:16:40:70:c1:60:e1:5d:bc:6c:
         85:35:3c:29:c9:77:0e:d8:12:ad:d2:53:74:96:a7:20:d4:a2:
         d5:44:42:34:80:f4:32:14:af:6e:bb:05:cc:f0:d1:2d:fe:25:
         f8:f2:d3:9b:a6:00:48:d5:18:81:8e:b3:b0:6a:6a:44:b9:17:
         09:4a:3d:64:01:e5:bf:6f:af:3d:27:5c:ea:03:02:42:df:d9:
         3a:85:77:36:9a:c6:f3:93:41:e7:64:73:c2:83:66:b5:70:03:
         0e:96:e9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----