Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24A076E69BAE11F1A8CCD3D6CE1D38B0.roa
File:                     24A076E69BAE11F1A8CCD3D6CE1D38B0.roa (raw, json)
Hash identifier:          gD5XLedhvqsXiC1oGOizZms/RCpbIvkXiwNhRM5hzaU=
Subject key identifier:   70:BA:67:35:29:55:D8:D8:01:71:30:B3:69:7F:ED:FB:C0:C5:29:66
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DFFB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24A076E69BAE11F1A8CCD3D6CE1D38B0.roa
Signing time:             Wed 19 Aug 2026 09:12:47 +0000
ROA not before:           Wed 19 Aug 2026 09:12:43 +0000
ROA not after:            Thu 19 Nov 2026 09:12:43 +0000
asID:                     18013
IP address blocks:        154.210.16.0/20 maxlen: 24
                          154.212.132.0/22 maxlen: 24
                          154.212.135.0/24 maxlen: 24
                          154.215.2.0/23 maxlen: 24
                          154.221.2.0/23 maxlen: 24
                          154.221.8.0/21 maxlen: 24
                          154.222.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 21 Sep 2026 18:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122875 (0x1dffb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 19 09:12:43 2026 GMT
            Not After : Nov 19 09:12:43 2026 GMT
        Subject: CN=6a85738f-400c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:17:71:40:20:11:30:3f:0b:b6:73:3a:93:b2:
                    0c:ac:8a:96:a6:e6:3b:58:5c:2e:2b:8c:d3:fc:bb:
                    22:83:45:9b:e9:36:74:d4:9b:9e:3d:5a:c3:1d:7d:
                    ed:44:d5:65:c7:8c:47:db:af:c3:ac:76:46:ce:9c:
                    5b:61:62:55:df:84:f2:70:d7:30:58:f1:38:62:4d:
                    2c:ca:53:e1:17:70:63:d7:38:6b:16:0a:ef:5d:9c:
                    db:82:f1:b3:c9:af:a1:d1:69:7c:5f:7f:2d:9b:97:
                    f2:7b:81:b6:b0:68:db:5d:9f:3a:9e:1f:01:b7:be:
                    f4:e5:a8:a0:a9:67:c0:aa:f6:d1:ca:44:2e:e6:41:
                    30:c9:20:14:e6:0b:14:be:60:47:26:c1:74:ea:03:
                    88:c9:90:86:79:28:88:70:74:b4:6c:5a:65:34:76:
                    b5:4f:4f:74:4d:a9:25:a6:5f:55:c2:9b:93:7e:ac:
                    d5:09:7b:ea:74:78:83:67:a2:cf:5b:06:1d:d6:73:
                    57:43:65:0a:52:b3:7b:e1:60:ad:59:1e:e5:9e:3e:
                    dc:d9:1e:91:7b:e7:a0:8d:fc:07:8a:6c:be:23:b6:
                    ef:e8:14:80:9c:06:75:0c:03:9e:e5:5f:01:af:c3:
                    e9:47:8f:c4:b4:36:bf:58:aa:99:62:de:c3:5e:f3:
                    0b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BA:67:35:29:55:D8:D8:01:71:30:B3:69:7F:ED:FB:C0:C5:29:66
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24A076E69BAE11F1A8CCD3D6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.16.0/20
                  154.212.132.0/22
                  154.215.2.0/23
                  154.221.2.0/23
                  154.221.8.0/21
                  154.222.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:db:c0:cf:df:2e:3a:61:7a:df:58:5e:dc:d7:4a:26:38:93:
         7c:70:a5:27:e6:c7:68:1b:92:dd:68:61:a8:7b:3a:b1:8e:85:
         4e:35:8f:55:19:fb:56:2a:26:77:d7:51:d2:c2:e2:83:39:9a:
         5d:51:88:ef:7e:bb:f0:7e:a4:fb:a1:96:ec:a3:cb:c6:6f:cc:
         47:bd:2e:00:cd:97:ea:f1:23:fb:3d:41:ba:f6:4f:2e:42:c4:
         65:c5:3b:71:e7:3a:9f:06:5e:00:38:6b:51:13:f7:29:b0:f2:
         0b:b1:2a:51:91:07:ff:bd:07:d8:e0:18:03:4b:8a:81:b2:79:
         8a:d4:9a:3d:f4:c7:71:e1:d7:16:8c:bd:d2:ff:11:66:64:8b:
         99:f3:1c:7f:bc:4c:1f:31:8b:1f:63:e2:b9:58:16:3e:4d:35:
         38:b9:9e:f6:b9:d7:5f:5e:d2:30:1f:68:6f:f3:13:be:17:b4:
         17:6f:d1:22:71:ef:c4:b8:21:97:e9:6c:3c:7f:d1:c0:80:aa:
         04:99:ac:a4:82:ff:73:b2:1f:25:bd:1a:fe:d0:4a:02:f8:03:
         d4:16:4a:ec:a4:76:f5:2d:45:7f:6b:43:a5:75:f4:c7:04:d5:
         e4:f9:f0:57:9c:39:15:33:36:23:43:53:6d:2d:ca:e7:9f:d0:
         93:82:8d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----