Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9371588A76911F197E451ABCE1D38B0.roa
File:                     F9371588A76911F197E451ABCE1D38B0.roa (raw, json)
Hash identifier:          4CK9j4VGwjza5VTXDxkvtVIPKv3InsBU4veKvSzEb4Q=
Subject key identifier:   C1:99:C7:F7:75:57:24:1E:55:2C:B9:0D:F4:2C:A8:41:80:17:3D:04
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E4E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9371588A76911F197E451ABCE1D38B0.roa
Signing time:             Thu 03 Sep 2026 07:35:02 +0000
ROA not before:           Thu 03 Sep 2026 07:34:58 +0000
ROA not after:            Sat 10 Oct 2026 07:34:58 +0000
asID:                     138915
IP address blocks:        154.223.44.0/24 maxlen: 24
                          154.223.45.0/24 maxlen: 24
                          154.223.46.0/24 maxlen: 24
                          154.223.47.0/24 maxlen: 24
                          154.223.48.0/24 maxlen: 24
                          154.223.49.0/24 maxlen: 24
                          154.223.51.0/24 maxlen: 24
                          154.223.52.0/23 maxlen: 24
                          154.223.54.0/23 maxlen: 24
                          154.223.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124131 (0x1e4e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  3 07:34:58 2026 GMT
            Not After : Oct 10 07:34:58 2026 GMT
        Subject: CN=6a992326-b709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:96:48:16:13:ab:be:e9:18:92:91:90:bb:3e:
                    ef:2d:30:69:c9:a6:5b:ed:53:b8:15:9c:15:81:1f:
                    53:9c:7d:db:33:60:b2:b5:9e:a3:9c:99:64:74:a5:
                    2e:ae:f3:f2:bf:40:fc:0c:43:26:23:75:5f:61:42:
                    e3:2d:ec:be:df:9f:3f:b4:3c:ee:83:14:5c:9a:0c:
                    33:39:d1:8e:d4:a1:2d:d8:de:8b:f6:74:00:08:e1:
                    6f:1e:7d:b1:c0:d3:ca:8b:ff:25:c2:8b:f1:38:0d:
                    27:a8:ac:4c:8a:45:c0:53:48:8f:b0:7c:f8:00:d5:
                    1f:85:ad:b6:7d:3b:00:64:a3:93:d3:df:cc:88:9c:
                    e0:ab:a3:ea:7b:54:7a:a5:04:75:b1:3b:2b:8c:4d:
                    88:89:a8:08:3b:72:8e:1a:18:3b:02:ad:a4:5b:27:
                    8b:aa:89:96:dc:a2:8c:e7:ed:76:1a:83:bb:65:3d:
                    1f:61:bc:96:a5:73:44:ba:43:c2:03:4b:2a:c5:6a:
                    e4:cb:43:c6:d6:d4:da:64:cb:1d:69:28:ef:38:f7:
                    4e:1c:3c:17:5e:66:35:15:f6:be:ae:37:4f:5a:4b:
                    f1:41:bf:0d:00:ea:69:83:c2:56:65:c5:82:ac:d3:
                    21:2a:47:9f:fb:81:50:b7:d4:b0:a4:53:17:bb:b1:
                    29:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:99:C7:F7:75:57:24:1E:55:2C:B9:0D:F4:2C:A8:41:80:17:3D:04
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9371588A76911F197E451ABCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.223.44.0-154.223.49.255
                  154.223.51.0-154.223.57.255

    Signature Algorithm: sha256WithRSAEncryption
         5b:62:d3:c1:d5:4f:5d:1b:ed:d4:ed:75:8c:67:f3:3a:12:99:
         9e:53:a7:a6:85:d5:9e:bc:eb:44:e7:c0:22:bc:86:41:d9:98:
         8f:96:5c:87:b3:5c:d2:91:fd:51:23:73:a4:f2:36:85:06:41:
         3a:56:e0:c3:28:e6:f6:0c:ba:b3:8a:79:af:4c:17:4e:52:58:
         b8:c0:80:8b:3f:1b:3b:49:f0:07:b7:70:68:09:06:b3:5c:fa:
         41:12:ec:62:38:8b:39:12:56:64:92:61:42:f6:c4:07:ff:66:
         7a:bd:3c:c4:6e:6d:be:8d:2b:41:bf:ad:94:b6:8d:5e:67:cb:
         ff:90:cb:32:0a:e8:f0:4d:c6:52:5f:bf:b7:e6:de:c9:35:d2:
         d6:eb:d9:b7:ca:e6:ae:50:27:e8:61:10:40:5e:94:7c:1b:94:
         cf:f7:17:1d:80:0c:22:c2:30:fa:e7:8b:98:d4:0f:9e:e2:cd:
         fb:a3:43:fd:52:19:20:45:e0:ca:50:29:5d:dc:4f:63:65:6e:
         58:b5:c8:b7:1f:c7:16:48:08:63:0e:ee:9b:0c:f1:a9:70:4a:
         e1:d5:a5:7f:d9:f7:58:9f:95:dd:40:48:bc:15:a4:a0:40:30:
         dc:a5:41:e1:0a:0c:81:78:99:d4:4d:c4:1a:05:34:1a:c4:ee:
         eb:e1:1d:ec
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----