Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2479DD28994311F1BD4E49B6CE1D38B0.roa
File:                     2479DD28994311F1BD4E49B6CE1D38B0.roa (raw, json)
Hash identifier:          wsYOrzYAip51pBMEaZEce+d8YDWMixlLaaaCM/e201w=
Subject key identifier:   1D:9E:1F:CF:13:01:C3:FA:3F:EC:4C:70:29:69:9D:66:46:B0:85:32
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DF46
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2479DD28994311F1BD4E49B6CE1D38B0.roa
Signing time:             Sun 16 Aug 2026 07:21:48 +0000
ROA not before:           Sun 16 Aug 2026 07:21:44 +0000
ROA not after:            Tue 22 Sep 2026 07:21:44 +0000
asID:                     11404
IP address blocks:        154.209.248.0/22 maxlen: 24
                          154.212.8.0/21 maxlen: 24
                          154.212.16.0/21 maxlen: 24
                          154.212.24.0/22 maxlen: 24
                          154.212.140.0/22 maxlen: 24
                          154.212.148.0/22 maxlen: 24
                          154.212.152.0/21 maxlen: 24
                          154.213.160.0/21 maxlen: 24
                          154.213.196.0/22 maxlen: 24
                          154.219.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 15 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122694 (0x1df46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 16 07:21:44 2026 GMT
            Not After : Sep 22 07:21:44 2026 GMT
        Subject: CN=6a81650c-4f45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ee:6f:da:89:29:3d:4e:a0:5d:f1:8a:e1:08:
                    1a:7f:9a:d8:fc:0e:4e:c7:e6:c6:4b:ef:e1:27:ab:
                    7b:67:1c:3e:ce:97:c3:31:4c:67:83:62:1c:5a:b3:
                    33:ba:dc:a7:01:b7:1e:0d:86:b0:5f:ca:4a:11:a4:
                    77:50:a0:b8:32:bc:9b:d0:ba:23:c1:0d:8e:fe:4f:
                    c3:90:ea:e1:af:48:44:77:c8:32:f8:9e:a1:66:6b:
                    7a:3d:cc:9e:94:39:a3:7d:86:60:ac:7e:70:40:0f:
                    ab:46:33:ab:df:4f:da:d6:44:c4:5e:87:1b:f8:a0:
                    c4:19:24:10:b2:9c:63:d0:1b:81:c1:1e:de:69:f9:
                    00:c7:25:46:dd:b5:36:4f:a4:54:17:5e:f5:cc:ae:
                    c3:40:6f:11:5f:03:ec:2f:65:92:61:74:94:0c:78:
                    d2:33:8c:3e:64:a6:04:ef:e5:84:5a:da:90:79:cd:
                    f4:ac:3b:c6:b7:ca:68:a3:31:8e:fd:d9:49:0d:3d:
                    00:d2:93:1c:a0:ca:3d:6a:a9:96:0d:de:2a:30:89:
                    7d:8e:4f:8c:de:d0:b8:c5:8a:ab:1b:4e:32:b1:f4:
                    82:72:c4:37:90:ae:ba:0f:54:73:24:b4:68:54:19:
                    2a:57:58:0d:0b:18:35:2b:4e:26:d0:56:d1:3b:c1:
                    9c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:9E:1F:CF:13:01:C3:FA:3F:EC:4C:70:29:69:9D:66:46:B0:85:32
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2479DD28994311F1BD4E49B6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.209.248.0/22
                  154.212.8.0-154.212.27.255
                  154.212.140.0/22
                  154.212.148.0-154.212.159.255
                  154.213.160.0/21
                  154.213.196.0/22
                  154.219.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9e:c9:cd:5e:5a:17:69:59:b5:80:6e:60:12:26:d3:e5:cf:4c:
         85:cc:57:e1:5a:63:ba:a8:96:96:6d:40:de:6f:25:de:17:0b:
         57:f0:84:11:e7:1b:4a:dc:b5:cb:68:18:a1:57:fb:a6:02:46:
         3d:8f:b3:ad:42:e7:69:60:30:a0:7b:94:2f:be:d6:5f:9d:f3:
         62:12:28:98:67:6b:fd:43:31:29:5a:09:f1:29:3a:77:46:7e:
         02:e1:3e:dc:8b:33:f4:46:e7:35:78:92:48:11:cc:65:82:f7:
         e3:7e:25:40:78:3a:24:8c:00:55:47:a9:11:57:6d:ae:1e:11:
         a4:51:62:7f:fb:75:a7:9f:41:62:91:98:64:6f:45:55:41:a8:
         7c:29:d1:5c:2a:d1:6a:73:96:f5:08:de:53:1e:9a:8e:c0:81:
         72:c0:6a:b8:77:49:a6:51:e8:20:43:57:20:d7:ed:ca:8d:d4:
         f9:a8:53:bb:3f:ab:9a:89:9f:49:0c:5e:d1:dc:00:0c:11:fe:
         69:1e:12:ed:55:5b:96:fe:8e:df:44:4e:11:69:a1:29:11:a2:
         26:c2:ce:eb:4a:ce:b9:6f:76:77:43:24:04:fd:a0:ec:9b:d6:
         cb:72:d7:29:96:38:af:58:f3:59:a1:75:21:fc:ce:59:bc:7a:
         39:3f:7d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----