Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00581896994411F1B3175CBACE1D38B0.roa
File:                     00581896994411F1B3175CBACE1D38B0.roa (raw, json)
Hash identifier:          PJN/Kt4DjV27n7eZZArFda0ltRI8P7HbyiAy6ZUxMLU=
Subject key identifier:   95:0C:81:3A:42:76:AD:9B:A2:F0:37:99:C4:D8:1E:EE:4D:B5:E5:B5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DF48
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00581896994411F1B3175CBACE1D38B0.roa
Signing time:             Sun 16 Aug 2026 07:27:57 +0000
ROA not before:           Sun 16 Aug 2026 07:27:53 +0000
ROA not after:            Tue 22 Sep 2026 07:27:53 +0000
asID:                     11404
IP address blocks:        154.202.164.0/22 maxlen: 24
                          154.202.176.0/20 maxlen: 24
                          154.207.128.0/20 maxlen: 24
                          154.207.176.0/20 maxlen: 24
                          154.209.8.0/21 maxlen: 24
                          154.209.24.0/21 maxlen: 24
                          154.209.64.0/21 maxlen: 24
                          154.209.80.0/21 maxlen: 24
                          154.209.224.0/20 maxlen: 24
                          154.209.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 15 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122696 (0x1df48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 16 07:27:53 2026 GMT
            Not After : Sep 22 07:27:53 2026 GMT
        Subject: CN=6a81667d-680a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1a:e8:b1:c2:77:e7:b5:ae:e2:d1:89:e7:bc:
                    e8:42:32:29:0f:3e:93:58:e4:5a:75:19:93:c6:47:
                    97:c9:ed:f3:03:87:e9:92:7e:b9:c6:74:97:62:35:
                    84:02:f2:3d:d9:37:68:10:74:61:fe:25:cc:15:ec:
                    93:aa:70:80:3a:b8:51:bd:56:e3:da:e7:42:85:f5:
                    ab:ee:54:a7:83:ba:32:10:68:01:58:ba:d5:e8:ea:
                    6c:85:1c:05:22:f4:4d:db:79:31:33:3b:d8:b1:b4:
                    a1:96:8d:c5:05:0c:37:e0:3f:38:f1:9a:89:ce:84:
                    20:35:33:89:18:d7:09:0b:68:d3:24:d5:a2:58:b3:
                    69:6d:ea:72:f4:43:23:7b:5f:2e:fc:53:ed:0c:d7:
                    b6:92:8c:39:04:f0:f7:f0:fd:b1:c5:46:3d:f3:45:
                    6e:91:db:1d:98:46:b8:bb:5e:cf:17:0f:99:0c:6d:
                    45:83:26:f0:2b:62:96:87:72:4e:38:62:fb:7b:71:
                    18:57:e9:c7:fc:44:fe:1f:9f:72:cb:08:39:30:fe:
                    17:ec:0b:9a:ad:bf:1b:e8:bc:91:65:ad:ff:c5:0c:
                    dd:a8:39:0f:2c:25:7f:59:cc:8a:b9:28:d6:1e:03:
                    cb:81:af:86:97:95:74:9f:cc:f5:00:e2:fc:62:51:
                    d8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0C:81:3A:42:76:AD:9B:A2:F0:37:99:C4:D8:1E:EE:4D:B5:E5:B5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00581896994411F1B3175CBACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.164.0/22
                  154.202.176.0/20
                  154.207.128.0/20
                  154.207.176.0/20
                  154.209.8.0/21
                  154.209.24.0/21
                  154.209.64.0/21
                  154.209.80.0/21
                  154.209.224.0-154.209.247.255

    Signature Algorithm: sha256WithRSAEncryption
         c7:29:51:59:e7:11:5b:fa:1b:a3:34:51:64:10:a4:6f:eb:49:
         04:d0:2f:89:0c:61:45:f4:eb:87:4d:65:10:ce:76:2f:61:45:
         dd:d2:54:c3:5e:6f:0d:ec:f5:f3:34:f3:0c:b6:52:6a:e4:8c:
         d7:09:7c:a3:2a:72:8e:c7:fa:04:b4:b9:b0:1f:4a:24:81:6f:
         4e:fc:99:23:75:70:4c:81:17:27:f3:3a:2a:5c:4c:ab:1d:6f:
         49:40:d0:56:73:1f:09:32:b7:02:1b:21:13:dd:1c:8c:0b:77:
         f3:0b:e6:bb:76:0b:ae:68:18:72:4e:a0:9d:56:46:38:46:b2:
         e0:4e:34:15:7b:1c:df:84:03:05:3c:79:28:67:08:11:26:de:
         c7:bd:76:e9:dc:37:12:fe:85:fa:a4:bf:23:4e:4b:04:b3:2a:
         38:7c:64:50:7a:65:2a:c6:be:4d:a3:62:4a:d5:e9:50:a5:be:
         5f:07:a8:95:86:54:55:03:3b:e7:ee:fe:e4:a1:c1:32:32:ef:
         11:45:e4:19:0d:3a:e0:cc:56:ea:5f:c8:21:ce:c3:8f:9b:d7:
         7a:1a:b6:da:57:c6:e6:0e:98:2b:66:88:9e:5a:34:63:cb:1c:
         17:2e:81:a7:c3:b1:74:ca:78:b7:72:5b:ce:d7:14:5b:77:b1:
         db:d2:97:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----