Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43762BCCAC7711F18C4052B5CE1D38B0.roa
File:                     43762BCCAC7711F18C4052B5CE1D38B0.roa (raw, json)
Hash identifier:          FOA8SYn46DKYdkqDYv98hQ8aVauYGofZ1Fort+69Gfs=
Subject key identifier:   39:FA:20:29:5D:D7:49:46:0E:08:EE:CA:FB:F9:AD:DA:6A:C4:B8:0C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E6C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43762BCCAC7711F18C4052B5CE1D38B0.roa
Signing time:             Wed 09 Sep 2026 17:52:46 +0000
ROA not before:           Wed 09 Sep 2026 17:52:42 +0000
ROA not after:            Mon 30 Nov 2026 17:52:42 +0000
asID:                     399077
IP address blocks:        154.91.84.0/24 maxlen: 24
                          154.91.85.0/24 maxlen: 24
                          154.91.86.0/24 maxlen: 24
                          154.91.87.0/24 maxlen: 24
                          154.91.88.0/24 maxlen: 24
                          154.91.89.0/24 maxlen: 24
                          154.91.90.0/24 maxlen: 24
                          154.91.91.0/24 maxlen: 24
                          154.91.92.0/24 maxlen: 24
                          154.91.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 07:35:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124612 (0x1e6c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  9 17:52:42 2026 GMT
            Not After : Nov 30 17:52:42 2026 GMT
        Subject: CN=6aa19cee-99cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:89:c6:73:d1:74:d5:fa:fd:3f:58:b7:34:01:
                    b4:78:5d:eb:5d:df:fa:72:97:cf:26:d6:ea:67:dc:
                    bf:89:b9:5e:97:fd:e7:a1:e1:02:bd:01:68:65:8c:
                    a2:2e:41:3a:ba:47:fa:62:62:d0:dc:b3:d2:f0:04:
                    16:a6:cc:63:75:d5:2b:98:38:7b:07:7a:61:c0:32:
                    4e:92:09:72:df:2f:b0:99:fb:bf:01:1e:5a:67:99:
                    1f:0d:2c:12:26:80:9e:52:11:6c:8f:49:3d:eb:ad:
                    f5:28:a8:c6:a6:90:d7:7d:5a:e8:7e:de:df:77:3d:
                    f6:f8:a0:68:7c:53:7a:84:45:0a:1b:60:a2:1f:77:
                    13:74:5e:6c:41:e2:41:49:64:ed:b0:6f:50:55:7d:
                    99:9d:99:f1:4e:c0:30:b9:4d:d8:e7:e3:70:40:a4:
                    ff:6c:ee:87:8b:a5:09:25:8b:d7:51:ab:92:2d:45:
                    38:a9:4e:c8:18:1e:4a:01:85:9d:5d:a1:3c:31:b8:
                    56:03:b2:74:63:90:1e:31:2a:f9:c0:d2:7b:25:18:
                    43:c3:22:92:52:74:7b:3e:b7:68:ca:73:ee:68:8f:
                    d6:1b:4d:9f:75:87:d2:30:37:10:c0:0d:87:a2:32:
                    98:a4:cd:d2:c3:5f:a8:0b:8f:f7:97:9f:b0:a4:99:
                    70:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:FA:20:29:5D:D7:49:46:0E:08:EE:CA:FB:F9:AD:DA:6A:C4:B8:0C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43762BCCAC7711F18C4052B5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.91.84.0-154.91.93.255

    Signature Algorithm: sha256WithRSAEncryption
         42:77:43:1a:bd:71:c1:d5:d8:10:f3:b4:52:fd:db:20:57:b1:
         9a:43:d2:f4:25:03:a2:4a:a2:8a:47:30:e4:7a:51:ee:f9:9c:
         bd:1b:9a:3c:1d:b3:3e:55:8e:4d:f9:2f:2b:03:93:42:f8:26:
         c6:19:de:1f:c5:32:d5:07:c3:c1:0b:ec:e4:2d:dd:68:a5:d3:
         7e:69:48:dd:9e:01:02:d2:d5:74:c5:08:5d:c3:48:1a:ef:d6:
         77:7a:3d:64:b2:b4:2e:30:55:36:b3:c2:23:ff:85:3d:3a:30:
         17:a7:c0:46:1d:37:93:58:92:14:d2:c4:69:b6:cd:1a:d6:00:
         cd:95:a5:53:11:92:85:0d:77:04:b7:8b:7c:2b:af:cc:96:fc:
         ed:89:71:66:8c:51:f3:22:10:e2:ef:d8:9f:77:67:fa:e3:e2:
         8a:44:fa:77:3d:13:4d:8c:29:e9:a1:87:f6:c1:a0:f3:03:23:
         dc:ab:3d:ac:73:0f:e4:d6:4a:23:80:17:ad:73:46:ac:30:01:
         71:9b:de:b3:41:57:3a:0c:62:61:4d:ab:97:65:1f:db:5a:1c:
         c2:00:28:a5:d2:41:bf:fa:47:f3:c7:d3:2c:be:e8:03:83:c4:
         b6:11:31:be:23:6b:3c:eb:1e:65:c0:aa:27:da:ff:f3:f6:56:
         d3:4e:02:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----