Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/046548649CA011F189CEB10ACF1D38B0.roa
File:                     046548649CA011F189CEB10ACF1D38B0.roa (raw, json)
Hash identifier:          iZyCZ40vt0JqE7Hx3h0h4h2cOSV9MPMZdmQ8j+SSoAw=
Subject key identifier:   C8:D8:B9:E6:68:79:FF:18:7F:2C:E9:FC:8B:DF:3F:2D:FF:D7:30:05
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E0C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/046548649CA011F189CEB10ACF1D38B0.roa
Signing time:             Thu 20 Aug 2026 14:04:11 +0000
ROA not before:           Thu 20 Aug 2026 14:04:07 +0000
ROA not after:            Sat 26 Sep 2026 14:04:07 +0000
asID:                     63139
IP address blocks:        154.194.68.0/24 maxlen: 24
                          154.203.160.0/24 maxlen: 24
                          154.203.161.0/24 maxlen: 24
                          154.203.162.0/24 maxlen: 24
                          154.203.163.0/24 maxlen: 24
                          154.203.164.0/24 maxlen: 24
                          154.203.165.0/24 maxlen: 24
                          154.203.166.0/24 maxlen: 24
                          154.203.167.0/24 maxlen: 24
                          154.203.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123078 (0x1e0c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 14:04:07 2026 GMT
            Not After : Sep 26 14:04:07 2026 GMT
        Subject: CN=6a87095b-4ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:62:05:07:0a:e7:94:ca:ef:98:36:ae:51:aa:
                    a6:02:8f:2f:31:b3:10:99:04:b4:64:41:e7:e5:e6:
                    45:9a:b0:fa:6d:db:84:c1:bf:c7:d1:d2:7b:2b:c4:
                    9c:8c:fa:63:32:78:f3:ea:ae:e0:2e:a9:6e:af:29:
                    de:2c:ab:c7:34:49:a6:13:1c:c1:55:44:cf:f9:e8:
                    1f:0f:5e:fa:d0:a0:00:57:9a:39:c7:7e:21:45:9a:
                    2d:21:07:f3:e1:8a:0f:91:24:89:1c:fe:7e:60:15:
                    1b:0c:d5:63:66:59:19:6b:61:ca:6a:2f:14:01:ae:
                    c4:54:06:4f:84:13:c8:e2:35:ef:7b:56:a9:a3:87:
                    64:91:e3:9f:0f:ed:74:23:6c:12:c1:0e:c9:cd:98:
                    88:09:7b:e8:64:e5:d6:c6:a6:b0:73:3c:cd:e7:7b:
                    08:80:92:d5:e7:9a:1a:c6:c0:7f:23:b3:42:8a:5e:
                    89:7e:99:ba:6b:84:78:29:05:f2:fc:5a:f2:bc:f7:
                    f4:4c:72:17:0b:a0:62:61:4b:8e:60:9c:5d:78:61:
                    f5:0c:93:f1:fb:ad:f8:cb:3b:5a:62:97:51:cc:a0:
                    b9:fd:fa:5b:70:4c:2b:d8:95:1a:92:c9:63:34:f6:
                    94:7a:ab:d7:83:81:46:28:6c:12:d2:68:b9:35:ab:
                    4f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D8:B9:E6:68:79:FF:18:7F:2C:E9:FC:8B:DF:3F:2D:FF:D7:30:05
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/046548649CA011F189CEB10ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.68.0/24
                  154.203.160.0-154.203.168.255

    Signature Algorithm: sha256WithRSAEncryption
         92:58:5c:55:be:90:86:c2:73:a5:d0:07:e9:9f:b1:7b:6b:20:
         2f:65:af:ad:ac:33:64:00:38:81:5c:78:0f:0f:64:70:5d:fa:
         d4:16:e0:8e:a5:f7:bf:50:9c:18:3c:f5:76:4b:5e:ad:b3:a4:
         f4:6b:d8:20:62:47:77:58:f3:6b:43:bc:d7:f4:68:fe:13:2a:
         79:fd:57:d9:2e:9f:14:46:c4:ce:1b:f3:72:01:3d:6e:15:28:
         5f:79:91:b8:3b:a1:d4:8b:76:0c:81:fd:0f:89:09:52:eb:c7:
         58:93:4d:a1:c8:2b:fb:e6:87:ba:49:d4:bd:a9:27:7a:fa:be:
         12:92:08:50:a4:6d:65:89:a8:ae:6a:db:36:5e:8e:6f:70:cf:
         a8:bf:b0:e3:07:df:f4:96:0d:04:b3:fa:23:44:2e:9f:53:f7:
         cf:e9:0d:08:93:66:27:36:94:97:9e:ce:ab:20:a4:ac:15:c6:
         cd:66:f5:dc:97:00:46:68:35:38:c3:03:c3:b7:11:88:0b:4b:
         78:d7:a8:45:fd:7c:59:36:95:7b:c8:65:82:55:9e:ae:37:91:
         f8:57:2d:90:3e:67:79:cb:53:ec:7a:1a:3f:83:94:21:be:04:
         35:5f:e5:b2:6f:54:7c:86:03:88:a7:8f:16:03:37:e4:e0:31:
         9c:7e:b8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----