Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37A5AED4A82C11F1AAC12DC4CE1D38B0.roa
File:                     37A5AED4A82C11F1AAC12DC4CE1D38B0.roa (raw, json)
Hash identifier:          kmcJSWGpo/TSWL46fPXzqr/qLLZACkk0MiFf6qszDtQ=
Subject key identifier:   CC:55:48:53:CF:AD:9A:DB:3E:73:6F:53:AB:7C:8F:28:9A:6A:78:02
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E53C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37A5AED4A82C11F1AAC12DC4CE1D38B0.roa
Signing time:             Fri 04 Sep 2026 06:45:29 +0000
ROA not before:           Fri 04 Sep 2026 06:45:25 +0000
ROA not after:            Sat 03 Oct 2026 06:45:25 +0000
asID:                     11427
IP address blocks:        154.82.28.0/22 maxlen: 24
                          154.85.100.0/22 maxlen: 24
                          154.85.124.0/22 maxlen: 24
                          154.88.32.0/22 maxlen: 24
                          154.90.160.0/21 maxlen: 24
                          154.90.176.0/21 maxlen: 24
                          154.90.192.0/19 maxlen: 24
                          154.94.16.0/20 maxlen: 24
                          154.94.128.0/18 maxlen: 24
                          154.94.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 12:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124220 (0x1e53c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  4 06:45:25 2026 GMT
            Not After : Oct  3 06:45:25 2026 GMT
        Subject: CN=6a9a6909-f7f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:22:ce:6d:7c:13:ec:08:e1:c2:8c:20:30:de:
                    d4:7f:86:fd:fb:ad:06:91:cc:74:78:56:24:b3:b9:
                    5c:6b:29:be:49:fa:a2:cb:2f:7c:a4:c9:f2:2e:2e:
                    f0:a2:76:06:8a:43:d4:2f:c3:4c:73:5a:60:fa:37:
                    83:a3:1e:e1:a3:27:a3:7c:ea:04:64:ad:17:1a:80:
                    9f:f3:c2:f1:38:62:6a:83:33:2f:74:f8:2b:ed:fe:
                    9c:f2:fb:d7:c7:98:ff:86:72:7d:21:97:70:ec:c0:
                    df:9f:1d:77:04:ce:9a:00:41:4f:8f:7b:10:e0:c5:
                    31:c0:2b:3d:c7:a1:77:38:ba:3e:31:d3:54:35:24:
                    f4:ac:43:81:4e:8d:1a:23:72:20:fe:7d:ab:72:41:
                    5d:a4:9b:76:be:c0:26:55:ac:c0:a2:e4:6e:ca:c0:
                    75:4f:80:9d:bc:03:4f:58:ad:93:40:87:85:d7:e5:
                    c7:39:6d:c6:4b:a3:88:08:fb:1b:71:aa:1b:0d:55:
                    8e:f6:44:aa:95:08:47:0d:ab:04:e9:0c:81:ac:07:
                    49:26:6f:a2:2a:42:32:7e:f7:3a:07:5f:64:3c:08:
                    1c:1b:e8:d1:65:5a:52:bd:e1:18:aa:e3:24:ba:b7:
                    16:7b:30:12:83:1f:ab:b9:5c:df:24:de:67:c9:3e:
                    b5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:55:48:53:CF:AD:9A:DB:3E:73:6F:53:AB:7C:8F:28:9A:6A:78:02
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37A5AED4A82C11F1AAC12DC4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.28.0/22
                  154.85.100.0/22
                  154.85.124.0/22
                  154.88.32.0/22
                  154.90.160.0/21
                  154.90.176.0/21
                  154.90.192.0/19
                  154.94.16.0/20
                  154.94.128.0/18
                  154.94.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c8:c2:2c:61:1f:a3:99:86:10:90:3f:40:5e:21:63:0d:8d:dd:
         1b:37:8f:60:17:66:05:f5:fd:82:80:1c:66:6c:ce:d5:cd:ff:
         48:d0:2f:84:b3:f5:0a:38:f2:84:f1:bf:a8:03:fa:2b:b3:44:
         21:fa:96:e7:0b:9e:c4:b8:82:3f:1d:95:5e:21:13:ea:46:b7:
         df:b8:2f:04:a8:a2:44:18:02:8c:92:9d:4f:d5:e9:1a:a9:2a:
         9a:43:2d:d7:ee:65:e7:6a:5f:0e:e6:f1:4d:c3:4c:c6:7f:9c:
         af:8c:51:60:f4:ba:97:b1:e9:5e:d3:33:08:83:1e:29:f6:3d:
         e6:9a:63:b4:35:4b:5f:3e:c5:5a:b9:7e:c8:3f:89:16:c5:b7:
         ad:5d:19:8b:e5:a0:ba:23:89:69:39:7e:b9:65:d2:2c:d9:4b:
         e3:94:1c:e0:69:89:ac:a8:c1:35:1d:49:95:8b:53:2a:0b:cf:
         12:5b:3d:5f:58:79:d7:1c:9c:96:23:63:33:6a:3e:51:73:0e:
         17:de:c8:ed:4f:02:42:1c:d1:d9:dc:a8:38:14:aa:0f:14:fe:
         60:99:a4:52:2e:8b:e4:7c:86:1b:ab:53:67:37:7b:b5:54:7d:
         b9:a1:53:f7:3d:16:e0:26:11:32:47:08:8f:0b:7b:56:3c:c1:
         0e:7c:bd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----