Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1046A0B8970211F1B7B93602CF1D38B0.roa
File:                     1046A0B8970211F1B7B93602CF1D38B0.roa (raw, json)
Hash identifier:          mS4d31ls4KUlvpKYpTsVIJ01+GGvkjmqTsXRh/IM01w=
Subject key identifier:   AF:F8:41:D1:A0:87:CA:90:AA:61:EE:C3:8B:49:DC:5A:E2:4C:E1:F3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DEF7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1046A0B8970211F1B7B93602CF1D38B0.roa
Signing time:             Thu 13 Aug 2026 10:30:55 +0000
ROA not before:           Thu 13 Aug 2026 10:30:50 +0000
ROA not after:            Thu 24 Sep 2026 10:30:50 +0000
asID:                     9304
IP address blocks:        154.92.176.0/24 maxlen: 24
                          154.92.184.0/24 maxlen: 24
                          154.92.186.0/24 maxlen: 24
                          154.92.190.0/24 maxlen: 24
                          154.92.192.0/24 maxlen: 24
                          154.92.193.0/24 maxlen: 24
                          154.92.194.0/24 maxlen: 24
                          154.92.195.0/24 maxlen: 24
                          154.92.196.0/24 maxlen: 24
                          154.92.197.0/24 maxlen: 24
                          154.92.198.0/24 maxlen: 24
                          154.92.200.0/24 maxlen: 24
                          154.92.201.0/24 maxlen: 24
                          154.92.202.0/24 maxlen: 24
                          154.92.203.0/24 maxlen: 24
                          154.92.204.0/24 maxlen: 24
                          154.92.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122615 (0x1def7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 13 10:30:50 2026 GMT
            Not After : Sep 24 10:30:50 2026 GMT
        Subject: CN=6a7d9cdf-286f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bf:a8:69:94:50:e2:a5:5b:f3:30:9d:d4:30:
                    9a:b7:08:dd:51:45:f9:68:ad:37:af:f1:20:39:27:
                    4e:04:bc:dc:eb:4b:f5:f2:a9:ac:16:5a:43:21:27:
                    0a:53:8f:a2:b1:13:3d:d5:46:ae:4c:a5:f9:79:51:
                    e9:14:0e:30:89:44:72:54:d6:2d:4f:a6:e1:db:49:
                    0d:a4:9f:15:d5:3f:9b:4c:d4:87:87:fc:68:38:5c:
                    57:0e:ba:6d:57:df:9e:cf:49:84:05:a9:55:37:35:
                    f2:16:f3:73:3a:0e:ea:ce:9c:33:28:08:99:4e:6b:
                    06:1f:db:81:cc:d2:de:80:43:52:f1:f0:8f:61:56:
                    97:bf:ae:25:42:fb:b7:9e:3b:4c:9c:76:5d:01:86:
                    57:ac:3c:97:8b:fd:e1:9c:5a:e8:64:e3:0d:89:24:
                    8b:92:83:b2:51:1a:ee:f1:4e:6d:62:cb:7f:a4:00:
                    c3:af:a8:ce:21:22:dc:f0:63:99:38:da:83:ae:35:
                    9d:fc:94:0d:a9:27:c0:e6:de:ab:1e:01:16:fe:29:
                    a3:06:cb:d3:d0:ab:c3:f9:b3:ea:a8:eb:0f:ea:77:
                    c2:77:41:35:68:ff:46:1f:d1:37:88:4b:af:9b:4f:
                    b4:0f:3e:d3:b0:01:fe:45:9b:cd:ec:1e:a1:47:bb:
                    00:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F8:41:D1:A0:87:CA:90:AA:61:EE:C3:8B:49:DC:5A:E2:4C:E1:F3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1046A0B8970211F1B7B93602CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.176.0/24
                  154.92.184.0/24
                  154.92.186.0/24
                  154.92.190.0/24
                  154.92.192.0-154.92.198.255
                  154.92.200.0-154.92.204.255
                  154.92.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:f6:14:1f:5d:01:56:5b:92:84:ee:49:8d:a5:08:46:d0:9c:
         32:96:b9:0f:87:96:44:41:2d:6c:4a:5a:9a:d0:f6:2f:44:ad:
         25:25:fc:89:43:81:19:85:86:e2:5b:2b:d2:30:81:a6:78:5e:
         a7:65:62:8d:a1:43:4f:31:c8:27:24:94:04:6e:6c:e4:62:a3:
         64:9b:85:87:9d:81:23:d1:49:d8:40:17:42:af:2b:a4:e7:e2:
         96:da:f7:40:85:0b:1a:f8:e7:fd:f0:0e:f4:ca:b6:4f:aa:1b:
         37:40:08:3b:02:a8:41:64:df:9a:a3:e9:4e:9d:a7:b7:3a:04:
         be:7e:d6:fa:30:b5:01:d4:87:6e:66:94:a1:7a:9c:00:ef:1b:
         2a:a9:77:11:d3:aa:eb:7a:2c:ee:1f:46:4f:e1:e4:95:d5:5c:
         5b:63:fb:b3:82:ae:8d:4f:3b:a9:5f:b5:f4:e5:fd:f1:4f:a0:
         2f:b6:23:88:80:cb:02:e8:40:b1:ad:b7:3a:c1:3a:7b:d7:95:
         11:29:7c:c6:e5:9a:4e:79:15:d0:6a:9a:35:ce:da:d6:f5:c8:
         b1:b1:1f:fe:ec:b7:a7:e4:e4:13:a5:50:d6:d3:75:6e:a0:6b:
         3e:c2:27:22:cb:9c:89:ce:c0:52:34:17:48:83:4d:00:92:60:
         47:a1:0f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----