Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/110FAE32970111F1A467ECF9CE1D38B0.roa
File:                     110FAE32970111F1A467ECF9CE1D38B0.roa (raw, json)
Hash identifier:          MDG+yaxHdFtBIRWeKvadQhI+OhQHtx1mftxR+xA0ScQ=
Subject key identifier:   69:5B:C5:F1:CF:85:05:D2:1F:B9:F6:49:EC:21:8B:28:F3:8C:AB:F9
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DEF5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/110FAE32970111F1A467ECF9CE1D38B0.roa
Signing time:             Thu 13 Aug 2026 10:23:47 +0000
ROA not before:           Thu 13 Aug 2026 10:23:42 +0000
ROA not after:            Thu 24 Sep 2026 10:23:42 +0000
asID:                     2914
IP address blocks:        154.92.176.0/24 maxlen: 24
                          154.92.184.0/24 maxlen: 24
                          154.92.186.0/24 maxlen: 24
                          154.92.190.0/24 maxlen: 24
                          154.92.199.0/24 maxlen: 24
                          154.92.205.0/24 maxlen: 24
                          154.92.206.0/24 maxlen: 24
                          154.92.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 23 Aug 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122613 (0x1def5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 13 10:23:42 2026 GMT
            Not After : Sep 24 10:23:42 2026 GMT
        Subject: CN=6a7d9b33-cf47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f5:a2:75:3d:be:aa:6d:31:42:68:ea:23:84:
                    d2:ca:c1:1f:d6:9f:60:9e:44:e2:6a:44:54:87:d9:
                    c5:bc:fd:03:6d:64:e3:06:05:0e:c6:31:c1:2a:06:
                    38:3a:b3:64:dd:de:4e:43:a3:e5:7f:b5:da:04:ea:
                    bd:66:0a:b5:22:76:b6:b2:d5:91:3a:bc:f1:f4:3a:
                    d0:e9:74:78:cb:41:b4:79:64:32:e6:4f:45:ac:87:
                    eb:8d:cd:2c:90:29:bf:30:87:0c:c1:b2:f8:fc:c4:
                    0f:5a:03:58:17:56:84:86:76:62:f3:79:ff:18:6c:
                    ff:f1:6b:30:9f:bb:e0:9d:78:8d:b2:39:f9:7c:3b:
                    5c:a2:20:97:ae:31:e3:0d:82:ec:a8:c6:7f:04:d5:
                    72:5c:3a:f9:69:b5:27:c0:d1:b1:42:da:73:ef:93:
                    a6:7a:86:ae:f4:22:51:cd:51:3e:63:8d:ae:ec:f5:
                    11:eb:c4:dc:59:10:b8:e6:a9:53:44:f3:93:8b:32:
                    9a:6a:59:a9:64:33:15:7c:9f:b6:bd:df:05:0c:1d:
                    7b:73:64:33:c8:c7:3e:be:22:61:a8:f2:24:d3:77:
                    64:0e:c5:8a:97:0a:77:a4:4c:a8:c2:02:78:e4:c7:
                    cf:cf:de:81:27:d7:2d:68:62:e7:bb:69:23:ff:47:
                    66:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5B:C5:F1:CF:85:05:D2:1F:B9:F6:49:EC:21:8B:28:F3:8C:AB:F9
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/110FAE32970111F1A467ECF9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.176.0/24
                  154.92.184.0/24
                  154.92.186.0/24
                  154.92.190.0/24
                  154.92.199.0/24
                  154.92.205.0-154.92.206.255
                  154.92.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:5e:76:c2:76:77:65:bc:b0:41:29:bb:1d:d9:e9:e9:3e:00:
         72:ec:2d:91:83:2a:38:72:8b:48:97:e1:41:46:f8:c7:8c:fa:
         d2:a1:dd:ee:29:be:86:fb:f7:09:6d:dc:69:3a:2f:4c:23:39:
         ba:9b:89:64:5f:10:94:50:ef:54:4d:3e:58:15:1f:e6:f9:ea:
         67:3b:62:db:c1:3a:d4:70:03:4d:80:19:5a:cb:df:f1:4c:db:
         2a:02:8e:6b:08:44:cd:a9:f0:e3:2e:f0:89:73:61:fc:0c:93:
         27:30:11:5b:dd:ac:dd:10:66:60:86:b1:60:e7:ad:62:fd:63:
         d0:da:40:54:1a:f6:90:3a:7b:9e:a1:d5:e8:49:3e:45:4f:cb:
         3f:b5:d9:61:41:c3:f6:84:da:12:24:bd:c3:2d:0d:82:b4:94:
         af:26:87:b9:be:77:70:c6:52:34:10:bc:31:e9:5b:45:3c:4f:
         5e:5f:2f:77:b1:96:d4:bf:bc:1c:5b:5b:b6:f0:84:12:eb:40:
         f8:a2:9c:77:53:e4:a4:6e:cc:65:fc:0f:0d:e5:1d:a0:87:f5:
         65:fd:e7:17:94:ad:02:19:6a:bf:83:85:e7:2d:00:1e:26:68:
         90:fd:d5:30:6f:7d:6a:0d:b1:10:5b:13:72:f8:ed:ca:6c:f1:
         63:a6:fc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----