Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27C0AE9E9C9F11F1947FCF04CF1D38B0.roa
File:                     27C0AE9E9C9F11F1947FCF04CF1D38B0.roa (raw, json)
Hash identifier:          pfMEWMHPrKgdAfn7zfKAJuiS2pSAZB010CsOIT0ea1Y=
Subject key identifier:   5A:60:06:88:B1:FA:64:17:F8:C7:04:DF:04:99:00:BF:32:72:9D:41
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E0C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27C0AE9E9C9F11F1947FCF04CF1D38B0.roa
Signing time:             Thu 20 Aug 2026 13:58:01 +0000
ROA not before:           Thu 20 Aug 2026 13:57:57 +0000
ROA not after:            Sat 26 Sep 2026 13:57:57 +0000
asID:                     63139
IP address blocks:        154.203.182.0/24 maxlen: 24
                          154.203.183.0/24 maxlen: 24
                          154.203.184.0/24 maxlen: 24
                          154.203.185.0/24 maxlen: 24
                          154.203.186.0/24 maxlen: 24
                          154.203.187.0/24 maxlen: 24
                          154.203.188.0/24 maxlen: 24
                          154.203.189.0/24 maxlen: 24
                          154.203.190.0/24 maxlen: 24
                          154.203.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123076 (0x1e0c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 13:57:57 2026 GMT
            Not After : Sep 26 13:57:57 2026 GMT
        Subject: CN=6a8707e9-8a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ae:7d:a0:fd:ef:b5:d4:bc:79:73:1b:af:8c:
                    be:44:d9:a6:48:21:5f:95:78:19:7f:d2:57:a7:d3:
                    45:b4:db:70:5c:c9:e3:ef:27:e1:9e:36:62:db:5c:
                    4b:43:88:de:5c:04:be:1d:16:c0:cf:5e:ca:de:5c:
                    07:49:8c:a1:fe:d3:8e:5d:bc:cb:b9:52:7b:a5:98:
                    25:3c:e0:de:de:ee:07:e8:f1:f6:ac:46:43:4a:dc:
                    56:aa:5b:e1:44:8d:10:a3:a4:ac:ba:5d:ef:cd:e4:
                    3d:68:ef:32:2b:c8:40:f1:d8:4b:dd:d9:f2:65:1f:
                    95:46:60:81:13:2a:1b:cb:a6:c7:1f:9c:a9:65:35:
                    17:e6:42:0e:5a:82:c0:26:60:f3:c2:3a:0d:6f:6e:
                    49:85:71:bf:5f:c9:d0:ff:2d:db:ff:51:a4:e2:1e:
                    74:48:68:71:68:93:2b:77:8d:e8:fe:8a:1d:73:ed:
                    0e:1f:f5:1d:17:72:7d:64:4b:8f:eb:aa:b6:c6:ee:
                    30:6c:a6:60:f0:5f:a0:f5:74:63:9f:0d:f6:21:27:
                    4f:51:5d:09:47:c6:0a:f4:1b:40:64:5d:70:61:bd:
                    b3:8f:91:ea:5f:74:fc:48:aa:d3:a3:0b:30:b9:60:
                    0e:16:c3:df:0e:01:48:e8:fa:f9:0f:30:5a:f0:41:
                    88:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:60:06:88:B1:FA:64:17:F8:C7:04:DF:04:99:00:BF:32:72:9D:41
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27C0AE9E9C9F11F1947FCF04CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.182.0-154.203.191.255

    Signature Algorithm: sha256WithRSAEncryption
         af:21:28:ac:95:1d:09:78:16:85:80:5d:0e:e7:53:8d:af:f6:
         f6:38:ed:4a:36:e1:9c:92:ca:48:59:bf:7e:1b:33:68:68:a4:
         7a:41:08:d6:5f:6e:a2:39:df:e8:e1:4b:76:21:7c:65:c4:29:
         aa:3b:fa:5a:f7:5b:20:7a:ce:cd:da:3b:60:7b:1b:f1:d9:02:
         ab:da:e7:59:13:da:f9:c2:d7:5b:9d:44:12:8a:e9:8c:73:14:
         c3:d9:54:ac:b9:58:72:2a:f5:11:ba:1e:96:3f:c1:34:ec:98:
         cf:d5:26:6f:b4:65:24:f0:7f:76:7f:43:8e:22:69:91:fe:c7:
         8c:f4:17:3d:7e:09:1e:f4:eb:5d:20:a7:9f:56:d7:fc:a9:fa:
         04:82:9b:8a:e3:2f:d8:8a:89:0f:b9:32:58:1b:64:d7:55:83:
         d8:9e:90:0a:7c:8d:b7:16:5f:9d:58:3e:45:3c:14:79:98:7e:
         0d:e9:0a:f8:16:c3:61:87:14:fa:b4:1a:6c:b9:34:10:c2:55:
         db:85:70:fd:d4:7a:45:af:6f:39:09:81:e3:1b:3a:62:ac:14:
         12:48:c3:e7:b6:5e:74:d7:77:66:63:8e:61:30:73:b1:d7:1b:
         67:73:03:bd:71:4a:32:95:3d:48:2f:cd:1b:49:c9:e0:57:d6:
         00:2a:aa:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----