Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15866270963011F18D203101CF1D38B0.roa
File:                     15866270963011F18D203101CF1D38B0.roa (raw, json)
Hash identifier:          ZQ+5MPYeLrDSCx12qM9KRS7ZfD3ny9VQbQpnoJMgwsU=
Subject key identifier:   25:CB:26:B8:56:A1:E8:C4:36:37:CC:0D:DB:89:73:B5:F0:41:79:14
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DE4E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15866270963011F18D203101CF1D38B0.roa
Signing time:             Wed 12 Aug 2026 09:27:49 +0000
ROA not before:           Wed 12 Aug 2026 09:27:45 +0000
ROA not after:            Sun 12 Aug 2029 09:27:45 +0000
asID:                     17561
IP address blocks:        154.207.57.0/24 maxlen: 24
                          154.207.58.0/24 maxlen: 24
                          154.207.59.0/24 maxlen: 24
                          154.207.60.0/24 maxlen: 24
                          154.207.61.0/24 maxlen: 24
                          154.207.62.0/24 maxlen: 24
                          154.207.63.0/24 maxlen: 24
                          154.207.64.0/24 maxlen: 24
                          154.207.65.0/24 maxlen: 24
                          154.207.66.0/24 maxlen: 24
                          154.207.67.0/24 maxlen: 24
                          154.207.68.0/24 maxlen: 24
                          154.207.69.0/24 maxlen: 24
                          154.207.70.0/24 maxlen: 24
                          154.207.71.0/24 maxlen: 24
                          154.207.72.0/24 maxlen: 24
                          154.207.73.0/24 maxlen: 24
                          154.207.74.0/24 maxlen: 24
                          154.207.75.0/24 maxlen: 24
                          154.207.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122446 (0x1de4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 12 09:27:45 2026 GMT
            Not After : Aug 12 09:27:45 2029 GMT
        Subject: CN=6a7c3c95-e689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e5:ce:d9:60:a8:f2:91:11:1d:e9:57:87:1f:
                    d0:b6:86:d1:38:f8:b4:b0:38:a4:06:d1:4b:f4:38:
                    4d:29:28:e4:7f:11:62:28:3a:2c:e6:74:0f:2f:e5:
                    16:8a:75:23:04:69:72:35:3d:84:6b:0d:3f:58:0a:
                    bd:bd:8e:9b:4b:d6:d0:20:4b:22:86:fc:b8:7d:a5:
                    67:e8:a9:c7:95:9f:dc:e7:ce:f5:5b:51:6d:fc:f5:
                    b2:4b:bf:21:9a:7f:d8:59:83:59:b4:12:cf:df:e3:
                    f9:4d:e1:42:d4:68:c0:ba:7f:ba:5c:d0:b6:45:40:
                    77:db:af:55:bc:64:dc:70:89:88:54:ac:71:7d:de:
                    69:91:de:58:1d:ef:38:4b:e6:00:52:6b:b5:16:78:
                    94:9e:24:6e:78:50:bc:c1:55:4a:be:e3:3a:38:75:
                    12:24:82:14:fd:a9:2a:40:13:a2:84:a2:65:e9:45:
                    06:8c:cb:fe:ba:e2:8d:78:be:76:5e:6a:b5:67:c9:
                    ba:10:6e:1a:05:52:8c:82:11:a0:13:b5:e9:18:8b:
                    a4:e4:87:55:1d:64:d6:b2:88:d2:80:6f:52:4e:e2:
                    e8:20:6f:f8:0f:f8:66:e0:1a:84:7b:8b:06:64:a9:
                    80:03:94:6f:e9:d5:0f:e2:a4:3e:e4:90:69:22:8a:
                    93:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CB:26:B8:56:A1:E8:C4:36:37:CC:0D:DB:89:73:B5:F0:41:79:14
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15866270963011F18D203101CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.207.57.0-154.207.76.255

    Signature Algorithm: sha256WithRSAEncryption
         3f:c0:58:4c:a5:a7:d7:d5:af:75:50:3f:2a:f0:b6:90:1b:35:
         75:09:4f:7f:c9:73:fe:6e:f0:ff:7f:d5:68:cd:53:48:e8:f3:
         d3:a1:40:f7:04:0d:21:ac:bc:03:50:e5:8f:36:fe:38:fa:5f:
         40:70:7e:aa:fb:26:f4:29:5d:cf:70:f8:72:66:eb:c5:4a:06:
         b6:6b:3f:ac:20:bf:d2:43:15:1a:f3:46:e9:4d:3e:f4:19:40:
         da:77:67:1b:41:72:f3:c5:bb:c9:2c:bc:9d:23:75:3e:36:b1:
         3c:ad:03:63:74:74:51:79:92:b2:94:ad:12:b3:f8:43:e5:5a:
         86:c2:7a:bd:a0:29:e1:21:5e:5b:0a:3a:dd:77:82:f4:cc:9e:
         98:cc:eb:ff:ae:ec:c7:77:f7:1b:14:cc:07:7b:b0:fc:eb:7a:
         4d:fe:69:50:ac:2e:ba:48:78:57:da:ea:de:d7:15:ab:c9:ba:
         f2:53:98:94:23:a9:ac:32:a6:66:de:db:8c:89:93:a9:3f:48:
         ff:1b:c7:79:f6:00:83:00:d1:41:42:7f:1b:99:84:dc:a2:73:
         18:83:0b:f8:e5:30:67:e1:48:a9:13:66:8d:da:90:7d:c7:55:
         3b:0c:30:78:a3:8e:04:bd:ea:61:46:2b:3f:50:3b:e0:50:96:
         0e:bd:21:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----