Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E59DCDC9BA311F1B5DA5815CF1D38B0.roa
File:                     2E59DCDC9BA311F1B5DA5815CF1D38B0.roa (raw, json)
Hash identifier:          imGjkc+cAebcNY6afjjdN3A7IZbKBvKBcuUnziV2pwg=
Subject key identifier:   68:5E:8D:59:3C:87:6E:90:28:4B:71:F4:F6:E4:AA:1F:F8:CE:C5:55
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DFE4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E59DCDC9BA311F1B5DA5815CF1D38B0.roa
Signing time:             Wed 19 Aug 2026 07:54:19 +0000
ROA not before:           Wed 19 Aug 2026 07:54:15 +0000
ROA not after:            Thu 19 Nov 2026 07:54:15 +0000
asID:                     137951
IP address blocks:        154.212.132.0/22 maxlen: 24
                          154.212.135.0/24 maxlen: 24
                          154.215.4.0/22 maxlen: 24
                          154.215.4.0/23 maxlen: 24
                          154.215.6.0/23 maxlen: 24
                          154.215.8.0/22 maxlen: 24
                          154.215.8.0/23 maxlen: 24
                          154.215.10.0/23 maxlen: 24
                          154.218.128.0/18 maxlen: 24
                          154.221.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122852 (0x1dfe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 19 07:54:15 2026 GMT
            Not After : Nov 19 07:54:15 2026 GMT
        Subject: CN=6a85612b-3870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3a:58:8d:07:51:d0:82:38:ad:25:a6:8b:84:
                    7e:31:2d:76:97:c1:1f:81:c5:d6:f3:d2:48:47:f8:
                    25:4c:d4:29:83:e6:b6:3f:0c:75:0b:85:0c:17:0e:
                    61:f3:06:46:2b:c6:32:b0:2f:0a:26:29:e3:ce:8e:
                    ce:89:8a:00:a6:07:b4:d4:5f:ac:ad:ca:63:14:a3:
                    c2:10:8b:5a:b8:c7:02:84:b2:13:9b:71:35:09:09:
                    32:66:16:96:ea:36:9f:7a:e5:0f:f7:b0:fd:2b:68:
                    f9:f5:c0:79:6f:d8:2a:0a:48:f0:92:fa:5c:bd:35:
                    18:cd:85:3b:41:f8:b1:8b:4b:d2:96:34:bc:d5:12:
                    a0:7f:d7:f0:59:35:4d:a4:56:e5:42:ce:3c:93:74:
                    45:ff:c7:44:ab:17:f2:01:51:27:1d:c9:0d:68:38:
                    b1:55:07:c7:fc:99:a8:b6:44:e2:3f:95:6c:0b:0b:
                    ac:fe:49:7d:71:d7:16:72:86:c8:70:bf:46:df:72:
                    f8:0f:b9:c2:fc:14:6e:ac:ad:e8:e8:69:9d:e1:4b:
                    31:90:6f:89:a1:cd:b5:5a:c4:6e:21:2f:53:33:52:
                    b0:26:93:b0:a3:36:5d:fa:8f:a1:cb:ab:57:65:0b:
                    33:20:ca:18:aa:a3:45:3a:83:71:61:9d:ed:b6:19:
                    74:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:5E:8D:59:3C:87:6E:90:28:4B:71:F4:F6:E4:AA:1F:F8:CE:C5:55
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E59DCDC9BA311F1B5DA5815CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.212.132.0/22
                  154.215.4.0-154.215.11.255
                  154.218.128.0/18
                  154.221.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:01:fd:47:85:fc:29:f9:b3:40:a0:b0:4b:2b:98:47:06:27:
         68:b9:5d:42:a3:24:14:24:44:5e:d8:06:dd:34:78:75:ac:68:
         2b:ee:29:06:35:1e:93:87:8e:26:d4:2f:5d:98:80:2a:0a:44:
         07:18:7e:e4:a5:a0:d4:5d:5f:b8:df:45:67:26:41:df:1a:6b:
         6d:53:70:3c:4f:b7:67:46:a8:c0:25:55:c9:20:b6:a1:4e:48:
         12:e1:bc:61:48:06:7e:86:88:b4:8c:9a:53:49:15:c1:e9:df:
         30:3c:59:db:3d:b6:db:ed:66:91:e9:4f:77:df:a7:8a:4c:28:
         e5:f4:dc:b6:a1:cd:63:29:e3:c0:cf:63:c6:4f:46:58:15:19:
         d4:46:49:5c:95:ab:dc:76:5c:e0:00:98:2f:10:11:95:4e:fb:
         22:53:11:c6:44:bf:39:29:21:a4:64:43:7b:14:b1:ad:5e:05:
         1c:6b:0a:37:78:87:d3:c0:4c:00:ea:38:0c:e7:30:c6:82:d0:
         d3:d2:ab:fc:03:0a:93:a0:a0:1c:74:76:44:3c:3b:31:24:cd:
         f2:00:9a:b8:b4:f0:8b:de:87:0d:c5:2b:f8:f9:46:91:97:bb:
         a7:ab:cd:e6:24:9b:25:c5:cd:e1:8a:30:73:89:69:96:2d:7c:
         a2:cb:00:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----