Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19CB8C9AAEB111F189E3FBB8CE1D38B0.roa
File:                     19CB8C9AAEB111F189E3FBB8CE1D38B0.roa (raw, json)
Hash identifier:          /NWp4pkjEHE6wNtDa53EadIMrgXyr5yyGxCnti8Nxfo=
Subject key identifier:   04:8A:A1:4F:F2:29:0B:83:74:9D:52:EB:12:CC:FE:2C:0D:34:F8:5B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E7E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19CB8C9AAEB111F189E3FBB8CE1D38B0.roa
Signing time:             Sat 12 Sep 2026 13:51:49 +0000
ROA not before:           Sat 12 Sep 2026 13:51:45 +0000
ROA not after:            Tue 22 Sep 2026 13:51:45 +0000
asID:                     55020
IP address blocks:        154.193.192.0/20 maxlen: 24
                          154.193.208.0/21 maxlen: 24
                          154.193.216.0/21 maxlen: 24
                          154.193.224.0/20 maxlen: 24
                          154.193.240.0/20 maxlen: 24
                          154.204.8.0/21 maxlen: 24
                          154.204.128.0/18 maxlen: 24
                          154.204.183.0/24 maxlen: 24
                          154.210.2.0/24 maxlen: 24
                          154.211.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124898 (0x1e7e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 12 13:51:45 2026 GMT
            Not After : Sep 22 13:51:45 2026 GMT
        Subject: CN=6aa558f5-64ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bd:3c:0b:c3:9f:4e:d6:e5:8c:1f:1f:e3:2a:
                    70:fa:9d:5b:92:15:54:40:34:a1:4e:2e:5e:14:d1:
                    c1:45:84:44:07:a6:34:30:40:5b:6e:59:0b:db:be:
                    c7:67:ee:4a:63:07:e8:de:3f:ef:c2:62:3e:2a:e2:
                    0c:7b:df:be:46:d2:8f:40:52:33:27:7c:2d:ca:38:
                    cd:5c:77:f6:3e:5b:0a:c4:8a:00:f1:07:8f:81:8b:
                    dd:8e:96:e1:df:f6:1b:4b:e7:d8:4d:f4:a8:da:db:
                    3b:eb:13:63:ec:2e:d5:b4:14:41:d1:f4:28:c5:69:
                    cd:af:6a:05:0f:f3:fd:66:42:35:b3:3f:04:ed:ab:
                    83:f6:a0:c2:7f:76:51:14:ef:d7:ab:00:db:a7:90:
                    79:75:62:7d:b5:52:ee:31:7a:eb:0e:86:bf:2a:11:
                    71:38:c5:a2:71:d8:6c:02:77:43:b1:af:8a:62:d0:
                    8b:e7:f8:59:6d:55:d5:9c:05:ed:77:1b:4c:2f:64:
                    d1:f3:6d:ce:0d:4d:59:b4:b9:18:8f:3c:9b:2a:a4:
                    81:ed:74:80:19:ef:50:f6:20:5d:82:c8:6c:63:30:
                    d2:f8:09:9d:5f:e0:bb:09:c7:b9:4b:ed:f9:45:48:
                    cb:62:4d:0d:cd:02:0a:f3:43:aa:9f:df:74:f1:36:
                    a7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8A:A1:4F:F2:29:0B:83:74:9D:52:EB:12:CC:FE:2C:0D:34:F8:5B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19CB8C9AAEB111F189E3FBB8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.192.0/18
                  154.204.8.0/21
                  154.204.128.0/18
                  154.210.2.0/24
                  154.211.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:60:a0:f1:75:c4:01:a8:1b:10:71:b9:78:22:a8:43:f9:6a:
         68:3b:43:14:bd:e3:9b:7f:11:26:e8:3e:7a:e1:c5:5b:f3:28:
         38:d7:ec:25:50:a1:f2:61:e3:ad:b9:c6:ef:75:d5:15:d1:d6:
         0c:69:a6:4a:8d:57:31:91:7b:c7:26:4c:4b:75:0c:c1:41:c4:
         56:b5:5c:56:6e:96:ae:b1:c9:a4:c0:66:99:25:49:b0:f2:fb:
         bb:4e:53:12:c0:28:b8:b1:d4:f2:09:30:cd:e8:9d:47:2e:fc:
         30:e6:63:76:d9:97:25:35:89:e3:2b:c9:42:63:a1:c8:e5:0c:
         e7:21:7a:33:87:a5:e6:0e:17:10:5b:18:cf:ab:fe:b4:fa:9d:
         8f:d9:9c:bd:fb:e6:67:20:1c:88:2d:53:c6:bb:0a:6b:8d:ac:
         05:37:f6:90:a1:51:4d:be:7b:4c:58:3e:b9:ee:2d:77:3f:26:
         5f:b6:f3:20:6b:8e:11:2f:8a:ee:60:03:12:d4:84:18:3c:a9:
         0f:f3:da:d2:07:cc:5a:1d:94:a2:3e:2d:13:92:8e:43:a2:4c:
         b8:05:b5:3f:05:b0:3b:09:fa:c7:24:c1:d0:03:6e:94:d6:d3:
         c2:0b:52:3e:e6:ca:3d:42:76:a7:2f:3b:b8:45:61:e2:a3:50:
         c2:58:87:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----