Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CAEE330A06911F1AA58E1C3CE1D38B0.roa
File:                     2CAEE330A06911F1AA58E1C3CE1D38B0.roa (raw, json)
Hash identifier:          QXXtVAtAVkdTRMeetadH6ygJN85ETiqllTFdbsDt00s=
Subject key identifier:   6A:F1:98:06:30:DD:24:E9:AF:5F:A8:4B:B4:3E:CD:09:2A:F5:F2:EF
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E2D8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CAEE330A06911F1AA58E1C3CE1D38B0.roa
Signing time:             Tue 25 Aug 2026 09:41:41 +0000
ROA not before:           Tue 25 Aug 2026 09:41:37 +0000
ROA not after:            Sat 28 Nov 2026 09:41:37 +0000
asID:                     45669
IP address blocks:        154.198.70.0/24 maxlen: 24
                          154.198.71.0/24 maxlen: 24
                          154.198.72.0/24 maxlen: 24
                          154.198.73.0/24 maxlen: 24
                          154.198.74.0/24 maxlen: 24
                          154.198.123.0/24 maxlen: 24
                          154.198.124.0/24 maxlen: 24
                          154.198.125.0/24 maxlen: 24
                          154.198.126.0/24 maxlen: 24
                          154.198.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 05:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123608 (0x1e2d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 25 09:41:37 2026 GMT
            Not After : Nov 28 09:41:37 2026 GMT
        Subject: CN=6a8d6355-1d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:8a:dc:60:96:40:99:c5:e4:ee:ab:68:43:3e:
                    02:f8:88:42:b1:bf:ae:c4:24:c7:c7:d6:06:41:38:
                    05:c0:a7:f1:be:c2:90:21:97:c3:00:11:5c:47:90:
                    4f:0d:cf:a7:66:29:71:aa:a4:e0:3b:37:51:ff:a5:
                    82:2a:4b:c8:8d:61:9f:49:1e:57:4a:7c:17:0e:8c:
                    a9:ab:f8:1f:e6:b4:38:7d:e6:91:53:59:70:f7:38:
                    3f:dc:98:e2:bc:29:7e:0f:73:d3:f5:c4:bd:26:bb:
                    15:ae:fa:2d:4b:89:69:60:9f:04:29:7d:77:11:77:
                    eb:5c:7b:60:19:e0:e9:21:65:7f:79:2f:09:47:d8:
                    b1:6e:70:04:a0:28:29:95:e0:6c:55:48:25:6b:89:
                    e7:2b:29:ed:97:53:1d:29:98:9f:a3:2f:ec:39:b7:
                    4e:3f:d6:bf:39:04:9d:49:61:d1:51:65:8e:dd:87:
                    c2:1d:d4:87:91:50:5b:0b:ca:df:d0:4e:05:95:24:
                    10:14:8b:79:2a:b7:3b:f2:8f:d3:f7:85:f4:31:9c:
                    5e:cd:88:49:20:05:05:56:4d:40:f4:03:45:91:48:
                    78:a7:4e:48:14:4c:ee:3d:f0:ab:c4:97:a3:24:cd:
                    86:55:c3:66:5e:a8:33:08:8d:32:95:1b:03:b9:4a:
                    19:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F1:98:06:30:DD:24:E9:AF:5F:A8:4B:B4:3E:CD:09:2A:F5:F2:EF
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CAEE330A06911F1AA58E1C3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.198.70.0-154.198.74.255
                  154.198.123.0-154.198.127.255

    Signature Algorithm: sha256WithRSAEncryption
         1e:69:dd:e9:98:f5:8d:e0:2a:33:55:1b:6f:27:e4:84:3c:f2:
         8f:4c:25:6f:02:b9:d6:78:02:09:c8:a2:d8:38:c8:79:8e:82:
         4e:1a:0a:62:9a:39:73:7a:01:8f:c5:b4:6c:c8:00:a2:89:46:
         b8:5c:be:03:12:d4:af:e5:d6:ee:84:fb:5c:3b:78:b1:6b:80:
         56:a4:9c:53:29:47:31:fa:97:bb:7a:a1:62:96:92:8b:0f:d1:
         c2:78:18:ec:ec:d6:ec:5f:b6:13:b9:4f:ae:3e:67:be:4a:49:
         97:88:f4:42:55:0d:5c:2c:0b:1d:fc:10:70:12:9e:9d:49:32:
         ea:f4:24:6b:1d:d7:ce:e9:c4:dc:6a:37:58:e2:96:08:e7:fd:
         ca:4b:ce:6c:22:09:42:ec:31:25:10:5e:a9:e4:a1:0f:35:35:
         cc:fd:a8:b2:8f:df:74:e1:36:40:bd:f3:7c:cd:c1:90:43:65:
         21:0a:10:28:70:cb:b7:ef:7d:23:00:1c:c0:fd:8c:fb:a9:eb:
         0e:f9:95:95:e2:82:ff:13:5f:56:f0:1b:56:1c:7d:e0:b8:ea:
         2d:c2:b2:ac:0f:7a:38:76:73:23:a8:2d:76:6c:b0:f0:09:fa:
         c2:76:ad:d1:03:53:f8:42:11:99:32:cb:0b:14:b1:19:f6:12:
         d8:6e:05:78
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----