Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18DEF5089D0211F1B8A40BD3CE1D38B0.roa
File:                     18DEF5089D0211F1B8A40BD3CE1D38B0.roa (raw, json)
Hash identifier:          LfPwTx1HDNGNtSXk4LzHaM0pAuFuMe/8VytiLda02Dk=
Subject key identifier:   B8:50:26:8E:2F:09:5B:D5:0C:EA:AD:FB:AF:A0:85:0D:91:33:A3:6C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E11B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18DEF5089D0211F1B8A40BD3CE1D38B0.roa
Signing time:             Fri 21 Aug 2026 01:46:16 +0000
ROA not before:           Fri 21 Aug 2026 01:46:12 +0000
ROA not after:            Tue 22 Sep 2026 01:46:12 +0000
asID:                     22516
IP address blocks:        154.199.160.0/19 maxlen: 24
                          154.199.224.0/19 maxlen: 24
                          154.202.32.0/19 maxlen: 24
                          154.207.32.0/19 maxlen: 24
                          154.207.64.0/18 maxlen: 24
                          154.207.192.0/18 maxlen: 24
                          154.212.32.0/19 maxlen: 24
                          154.219.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 12:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123163 (0x1e11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 21 01:46:12 2026 GMT
            Not After : Sep 22 01:46:12 2026 GMT
        Subject: CN=6a87ade8-f727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:54:53:0e:15:7d:1e:72:6e:8e:9d:8f:cc:8d:
                    5b:db:ed:f8:ca:cd:25:7a:b1:7a:58:58:03:9f:1a:
                    2d:4d:97:42:0b:46:b9:8a:88:39:5b:77:42:98:f8:
                    47:3b:56:dd:07:5d:f8:f1:bb:a0:ba:37:90:ed:d4:
                    54:26:e1:70:b0:79:4a:a7:6f:a7:d5:5d:9c:47:94:
                    bf:05:86:16:bb:24:0c:db:bd:8f:e8:6d:64:90:95:
                    a4:e2:ac:6d:aa:9b:88:73:d4:cd:54:37:1e:cf:a6:
                    e7:ca:5d:71:ec:43:e4:06:d5:b3:fa:a3:61:29:0d:
                    2c:43:4a:80:16:b0:ef:f7:1a:a3:5b:cb:83:40:3c:
                    6f:3d:f3:c1:ca:46:24:ad:a3:d5:a0:0f:cf:41:34:
                    e6:d2:24:ae:d9:60:15:09:1f:a4:92:cf:d9:11:23:
                    9f:97:31:fd:c4:93:b5:5a:f5:4e:8d:e4:6b:9c:2f:
                    aa:95:e0:32:27:97:5a:70:75:57:e2:4c:9e:38:8b:
                    2c:cf:7d:5e:73:3d:d6:c4:85:95:2d:4b:a3:3b:77:
                    9d:5c:43:11:0e:f2:cc:68:de:12:96:ee:24:f5:dc:
                    3a:81:f2:ad:de:0e:2b:f4:be:4c:f1:75:12:1f:dc:
                    70:09:4b:b7:1f:de:a8:96:dd:2a:68:52:03:42:4d:
                    db:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:50:26:8E:2F:09:5B:D5:0C:EA:AD:FB:AF:A0:85:0D:91:33:A3:6C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18DEF5089D0211F1B8A40BD3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.199.160.0/19
                  154.199.224.0/19
                  154.202.32.0/19
                  154.207.32.0-154.207.127.255
                  154.207.192.0/18
                  154.212.32.0/19
                  154.219.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2d:13:a2:b6:6a:62:25:70:6f:ae:5a:f8:18:14:22:fa:f7:01:
         15:4e:2c:02:16:9b:f9:43:cd:f6:21:60:c0:b8:ab:ae:02:40:
         dc:de:2b:7f:f4:6c:4f:e3:3b:2f:19:2b:ef:9c:b0:49:f9:e8:
         a5:21:5d:62:2a:d9:c3:b7:9a:1c:3e:9a:1e:9f:35:f1:93:6c:
         6a:6b:5d:5d:ed:9a:c6:8f:21:90:18:50:10:bf:f8:f3:fc:ba:
         70:8f:99:62:43:82:28:80:c1:9c:60:ae:9a:24:19:10:7c:54:
         ff:9b:7f:f7:65:de:6f:ed:d7:d4:00:34:75:e6:d8:db:e9:6b:
         bb:22:2c:ed:6f:71:d0:51:8a:c5:db:24:bb:cc:46:fb:4f:46:
         24:97:7f:60:37:70:52:79:5b:ce:3a:9d:ab:c8:8f:84:fb:c8:
         2a:fb:20:c8:96:02:70:ef:2d:1e:7c:d5:5d:83:2e:80:ba:d2:
         17:76:f6:71:01:2b:32:d4:85:d5:cc:98:db:41:a7:07:80:b0:
         b5:f4:8b:75:a1:9d:c7:ff:e6:2a:13:f6:2d:ea:c7:99:43:9d:
         98:27:4c:a5:aa:86:34:ae:68:b7:fa:f4:42:20:e8:57:d4:36:
         a0:7a:cb:06:35:77:ba:4e:f1:8b:ab:7e:92:6c:07:87:ca:ee:
         fa:f1:58:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----