Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/058102B4962F11F18315EEFCCE1D38B0.roa
File:                     058102B4962F11F18315EEFCCE1D38B0.roa (raw, json)
Hash identifier:          luzBiEQEUyUKIcE2683Dsv2WKotVj7RTag7/u+q+eVE=
Subject key identifier:   B1:2B:7B:CD:44:5F:D0:BF:C3:F8:85:0D:9A:E9:17:14:16:EB:B3:58
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DE4C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/058102B4962F11F18315EEFCCE1D38B0.roa
Signing time:             Wed 12 Aug 2026 09:20:13 +0000
ROA not before:           Wed 12 Aug 2026 09:20:09 +0000
ROA not after:            Sun 12 Aug 2029 09:20:09 +0000
asID:                     17561
IP address blocks:        154.207.37.0/24 maxlen: 24
                          154.207.38.0/24 maxlen: 24
                          154.207.39.0/24 maxlen: 24
                          154.207.40.0/24 maxlen: 24
                          154.207.41.0/24 maxlen: 24
                          154.207.42.0/24 maxlen: 24
                          154.207.43.0/24 maxlen: 24
                          154.207.44.0/24 maxlen: 24
                          154.207.45.0/24 maxlen: 24
                          154.207.46.0/24 maxlen: 24
                          154.207.47.0/24 maxlen: 24
                          154.207.48.0/24 maxlen: 24
                          154.207.49.0/24 maxlen: 24
                          154.207.50.0/24 maxlen: 24
                          154.207.51.0/24 maxlen: 24
                          154.207.52.0/24 maxlen: 24
                          154.207.53.0/24 maxlen: 24
                          154.207.54.0/24 maxlen: 24
                          154.207.55.0/24 maxlen: 24
                          154.207.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122444 (0x1de4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 12 09:20:09 2026 GMT
            Not After : Aug 12 09:20:09 2029 GMT
        Subject: CN=6a7c3acd-15a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fc:c8:37:75:77:78:3d:ad:06:59:b9:1f:4b:
                    b5:a9:30:d7:67:ce:3a:43:c9:1d:a0:0f:c4:c3:82:
                    06:c3:3b:04:55:e1:0d:d5:22:01:34:2a:f0:ee:7a:
                    0e:da:52:2d:c8:b2:f7:10:f0:65:4c:81:90:5c:f5:
                    7d:17:ff:4a:48:69:60:55:05:e1:47:ef:be:c3:c3:
                    81:c3:f0:85:c2:ac:59:e7:a5:2e:8c:69:41:8b:bf:
                    a7:23:2b:e5:e7:70:b5:01:af:9a:d7:41:f4:8d:81:
                    d8:70:71:81:36:1c:ba:74:7c:cc:d0:09:03:12:a9:
                    86:fd:42:d8:c2:30:fd:ab:00:9d:cd:7b:aa:71:5a:
                    96:ea:59:c2:6b:07:c5:38:04:77:c9:1f:d0:f3:58:
                    1d:d8:aa:e1:a6:64:a2:8f:98:98:33:14:20:a6:f3:
                    f3:6f:9d:b5:e0:54:12:10:60:26:84:57:33:11:32:
                    88:68:ad:d4:b3:5a:50:0f:4e:2b:ed:08:4f:22:36:
                    b0:93:8b:da:81:87:96:56:cf:e5:70:89:d0:3b:24:
                    cf:ea:c5:4b:37:ca:32:23:d1:a0:6a:8e:d4:bb:b5:
                    e2:29:d7:ec:21:74:d5:40:6a:8b:80:7b:c9:0e:e3:
                    e5:27:1a:99:69:85:cd:35:c1:d1:b0:00:83:df:f1:
                    2a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2B:7B:CD:44:5F:D0:BF:C3:F8:85:0D:9A:E9:17:14:16:EB:B3:58
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/058102B4962F11F18315EEFCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.207.37.0-154.207.56.255

    Signature Algorithm: sha256WithRSAEncryption
         64:c0:2b:71:b2:43:8d:36:54:be:3c:1e:5c:2f:ea:fd:03:0f:
         73:19:4e:a4:f5:8c:05:a7:9d:48:e4:ac:c9:02:37:f3:7b:a2:
         84:80:de:f9:13:c9:63:59:43:b7:e3:1a:40:30:70:56:58:c7:
         a8:12:82:8e:8c:cb:8e:56:c9:b7:98:5e:35:d7:99:e3:d0:24:
         66:61:4c:38:aa:fb:7e:9e:ae:11:f5:da:ce:30:9d:52:4d:49:
         dc:db:93:10:f3:72:39:96:9f:e3:09:19:b7:84:50:94:ec:f7:
         07:c4:19:a2:79:aa:18:55:43:7a:20:08:fb:2e:dd:26:c6:a4:
         53:2a:5c:f4:97:04:d5:8c:88:75:ac:6d:7c:25:94:0c:5b:3e:
         af:27:3b:7f:08:fd:51:b0:53:04:65:0b:ee:c4:f8:5d:0b:7b:
         43:a9:d4:96:7b:26:d3:67:50:44:67:04:7c:26:08:76:ab:05:
         e6:ef:be:ad:7f:af:9c:9f:7d:ae:59:7c:73:cb:db:07:82:cd:
         0e:dc:dd:6d:37:9b:73:34:8e:97:f0:83:ba:8b:33:fb:45:d2:
         6a:49:0a:ae:51:97:d0:19:77:5e:cb:82:d0:26:cd:43:dc:4d:
         20:4c:ff:bd:78:1b:70:a2:03:5a:2c:7b:5a:5e:0d:aa:6f:5d:
         a5:2e:c6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----