Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32F4A7309C9911F1B9B299E2CE1D38B0.roa
File:                     32F4A7309C9911F1B9B299E2CE1D38B0.roa (raw, json)
Hash identifier:          jvd7wsR2k92gBLZ/OT2PBTeA6VKtHI5getPzM+ztwtQ=
Subject key identifier:   81:EF:1C:18:CE:47:E3:FA:A4:A7:64:08:55:D6:10:32:FB:B0:26:9E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E0B6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32F4A7309C9911F1B9B299E2CE1D38B0.roa
Signing time:             Thu 20 Aug 2026 13:15:23 +0000
ROA not before:           Thu 20 Aug 2026 13:15:19 +0000
ROA not after:            Sat 26 Sep 2026 13:15:19 +0000
asID:                     63139
IP address blocks:        154.93.67.0/24 maxlen: 24
                          154.93.68.0/24 maxlen: 24
                          154.93.69.0/24 maxlen: 24
                          154.93.70.0/24 maxlen: 24
                          154.93.71.0/24 maxlen: 24
                          154.93.72.0/24 maxlen: 24
                          154.93.73.0/24 maxlen: 24
                          154.93.74.0/24 maxlen: 24
                          154.93.75.0/24 maxlen: 24
                          154.93.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123062 (0x1e0b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 13:15:19 2026 GMT
            Not After : Sep 26 13:15:19 2026 GMT
        Subject: CN=6a86fdeb-b0e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ae:27:4b:ad:6a:c4:9e:a9:78:10:14:8e:34:
                    fc:4f:bf:57:89:4f:d3:12:d2:39:77:9e:8d:7b:fd:
                    59:97:f5:7e:25:d3:9c:75:67:b2:5c:cb:53:1d:1c:
                    c9:68:5d:5a:9d:de:54:81:33:fe:eb:7e:30:65:f6:
                    c0:76:63:a9:51:0b:f6:e7:6e:20:40:29:1a:61:ad:
                    0d:e3:20:dd:5b:9e:c5:4c:7e:1e:13:17:b1:01:50:
                    32:f1:46:ba:65:25:db:22:13:80:cc:c1:ad:9e:b7:
                    66:ec:9a:12:79:4b:90:63:75:99:c6:af:b1:d2:0a:
                    e1:29:58:84:e0:8a:ba:e8:c5:67:8b:5e:67:2a:b9:
                    dd:44:37:3e:d4:70:d3:87:7f:6e:09:a1:fd:bc:98:
                    11:89:d8:ed:3d:7c:eb:38:e0:bd:7a:1e:23:bd:73:
                    67:51:32:19:8a:c4:a9:ca:58:76:58:f0:fa:f1:d2:
                    0d:dd:4a:ae:5f:48:39:83:ba:61:1b:b0:e1:65:04:
                    1d:1e:e4:91:a4:49:df:85:d4:6b:49:fd:56:18:fa:
                    8c:ff:aa:73:5f:20:2a:ea:23:88:8e:ef:e2:bc:ee:
                    5c:36:5c:89:02:ae:3e:58:a0:2f:cb:95:33:d6:40:
                    da:a3:b0:df:66:99:52:0e:79:00:79:be:c6:cc:e5:
                    df:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EF:1C:18:CE:47:E3:FA:A4:A7:64:08:55:D6:10:32:FB:B0:26:9E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32F4A7309C9911F1B9B299E2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.93.67.0-154.93.76.255

    Signature Algorithm: sha256WithRSAEncryption
         50:9c:c0:ad:fd:14:f6:f4:e8:02:f2:f9:ae:42:21:ea:07:b9:
         24:e5:62:49:03:92:a3:6e:89:cf:9b:f2:cc:03:00:6a:a2:26:
         27:e1:1a:5f:b9:37:16:f8:41:12:6f:fc:9e:4c:75:b1:0b:e7:
         44:2f:72:79:49:bf:f5:25:df:3d:4a:1c:44:bb:aa:c0:14:a1:
         a2:d8:df:fa:ac:ba:d0:4c:10:2e:72:86:0c:d4:9f:c8:41:7a:
         7f:11:64:65:e5:c5:ae:89:85:09:96:c4:05:ab:be:3a:6c:78:
         b5:97:21:5e:c9:1e:d9:8a:1b:b5:16:24:d7:97:ad:e6:23:c3:
         12:10:79:09:e8:cf:03:86:5b:9c:2f:15:a7:42:fa:73:ce:cd:
         0d:22:cb:2a:3f:4b:8e:48:5e:65:8a:72:d2:9a:e6:4d:2b:5b:
         60:6a:ea:fc:a6:f3:83:22:de:e6:b8:70:31:32:a3:1d:60:ce:
         cc:01:b0:9b:80:28:de:61:5e:e5:e9:29:24:5a:9e:9c:d8:68:
         a2:12:88:51:e9:35:48:bc:61:ae:d0:1e:49:85:5c:c4:3a:ba:
         a1:64:1a:6f:e3:07:8a:26:43:11:04:09:65:60:34:9b:d4:fd:
         25:fa:80:63:40:66:5d:f2:bb:e4:5c:ec:b4:17:62:52:06:12:
         82:e4:4a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----