Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DB88E10963211F184FEA60ECF1D38B0.roa
File:                     3DB88E10963211F184FEA60ECF1D38B0.roa (raw, json)
Hash identifier:          XhWqV1rgMEFIkIwa7zgHQy5rHJBWya6eOoiBjVLKCsA=
Subject key identifier:   14:72:D6:18:3F:38:C4:84:51:B6:05:CE:6C:C9:A9:72:2D:7A:E4:DD
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DE52
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DB88E10963211F184FEA60ECF1D38B0.roa
Signing time:             Wed 12 Aug 2026 09:43:16 +0000
ROA not before:           Wed 12 Aug 2026 09:43:12 +0000
ROA not after:            Sun 12 Aug 2029 09:43:12 +0000
asID:                     17561
IP address blocks:        154.83.130.0/24 maxlen: 24
                          154.83.131.0/24 maxlen: 24
                          154.83.132.0/24 maxlen: 24
                          154.83.133.0/24 maxlen: 24
                          154.83.138.0/24 maxlen: 24
                          154.83.139.0/24 maxlen: 24
                          154.83.142.0/24 maxlen: 24
                          154.83.143.0/24 maxlen: 24
                          154.83.144.0/24 maxlen: 24
                          154.83.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122450 (0x1de52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 12 09:43:12 2026 GMT
            Not After : Aug 12 09:43:12 2029 GMT
        Subject: CN=6a7c4033-a8b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fa:2d:2a:29:00:b1:b9:38:0d:0e:07:31:90:
                    72:89:ea:e8:06:eb:4a:7f:a3:67:27:f2:19:e7:dc:
                    3b:9e:7a:53:1b:4b:86:60:82:dc:8f:5c:f7:c4:d5:
                    10:21:90:c1:8f:48:d1:56:4e:62:2a:12:95:c9:6f:
                    df:6d:2e:f9:35:42:f9:c0:86:98:30:31:a0:c9:ff:
                    5d:b1:80:b0:cb:84:ec:99:4a:b0:07:56:72:16:b1:
                    b1:36:07:e8:0d:d8:c9:c8:ee:43:86:55:f0:c6:e4:
                    91:0a:40:66:05:c4:e0:35:76:76:b1:49:70:fb:eb:
                    7a:81:33:90:1b:1e:e4:5c:74:cf:f2:01:08:e4:85:
                    92:49:67:00:09:ab:0a:96:3f:c9:e9:89:38:26:e9:
                    6a:2e:40:26:01:7c:39:39:f1:65:0f:29:46:c1:16:
                    8a:eb:3d:94:1b:02:78:66:0f:a0:2a:76:83:5b:b5:
                    c4:d8:aa:6b:e6:2f:a3:38:c9:dc:44:bf:df:ce:56:
                    e7:d2:81:fd:84:45:06:c7:e6:1f:d9:38:79:5c:25:
                    b7:77:ab:51:0c:3b:3a:06:0b:07:7d:6a:13:e9:57:
                    03:65:5d:7a:15:59:6d:d8:76:78:3d:ec:a2:94:27:
                    4a:4b:d4:fe:8d:6e:26:03:8b:12:a1:7e:bd:90:e0:
                    03:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:72:D6:18:3F:38:C4:84:51:B6:05:CE:6C:C9:A9:72:2D:7A:E4:DD
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DB88E10963211F184FEA60ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.130.0-154.83.133.255
                  154.83.138.0/23
                  154.83.142.0-154.83.145.255

    Signature Algorithm: sha256WithRSAEncryption
         81:9d:d4:2c:f5:1e:4c:e9:ef:77:9f:7a:92:ea:27:33:42:f4:
         b2:ae:84:41:2a:d1:26:fe:77:e4:a8:7b:9e:80:d5:84:18:56:
         ef:3c:0f:5f:16:27:83:dd:3d:69:95:14:44:2e:d8:a7:89:16:
         d7:b6:52:eb:5c:d9:15:5f:e3:40:eb:7c:2b:e4:d5:4d:f7:75:
         f7:96:85:9e:24:9a:70:a0:02:b5:1a:3c:a2:72:cf:44:fa:e8:
         31:21:3d:ca:26:51:e9:50:9c:71:6f:c5:48:32:f8:8a:d1:a5:
         c7:da:14:e2:9f:ba:f4:b5:54:fd:5f:9d:87:d6:d3:57:e1:93:
         df:8b:ed:76:3a:27:9f:50:98:7b:35:17:22:33:3b:06:20:c5:
         78:50:cd:b2:d4:23:7d:65:70:f9:c3:eb:2a:b9:75:82:6e:95:
         fa:5e:d4:7d:b3:bd:4c:35:87:44:7e:56:e7:ec:2f:d5:09:b9:
         74:21:6c:fa:4b:ef:92:0e:2f:cb:30:43:c7:a4:e0:b0:08:57:
         b8:f6:da:1d:1e:e0:74:08:1d:db:6d:5f:b0:45:cf:92:75:96:
         3f:d4:88:92:68:27:d8:6e:c1:2e:95:ab:81:ab:6c:49:f7:30:
         cd:ff:f4:8d:6e:af:bd:f0:4b:05:56:57:cd:98:8d:1e:ad:3a:
         61:6f:29:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----