Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4ED9F5A4A06811F1A74D28BBCE1D38B0.roa
File:                     4ED9F5A4A06811F1A74D28BBCE1D38B0.roa (raw, json)
Hash identifier:          OEfKZzrpCmNVpJdyT/KWi811nG8xy8kXS9i2Oa/DdlY=
Subject key identifier:   14:79:85:46:54:18:DB:BE:7D:5B:50:AD:22:D6:82:41:46:BF:1C:2B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E2D4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4ED9F5A4A06811F1A74D28BBCE1D38B0.roa
Signing time:             Tue 25 Aug 2026 09:35:29 +0000
ROA not before:           Tue 25 Aug 2026 09:35:25 +0000
ROA not after:            Sat 28 Nov 2026 09:35:25 +0000
asID:                     45669
IP address blocks:        154.198.94.0/24 maxlen: 24
                          154.198.95.0/24 maxlen: 24
                          154.198.115.0/24 maxlen: 24
                          154.198.116.0/24 maxlen: 24
                          154.198.117.0/24 maxlen: 24
                          154.198.118.0/24 maxlen: 24
                          154.198.119.0/24 maxlen: 24
                          154.198.120.0/24 maxlen: 24
                          154.198.121.0/24 maxlen: 24
                          154.198.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 05:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123604 (0x1e2d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 25 09:35:25 2026 GMT
            Not After : Nov 28 09:35:25 2026 GMT
        Subject: CN=6a8d61e1-5c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:22:94:96:ed:10:79:ac:b9:4e:c3:13:0f:de:
                    13:b6:f7:7f:e8:2a:c4:7b:bc:1e:09:ab:bc:14:55:
                    1a:09:5f:d9:14:1b:dc:15:74:45:4f:e3:1d:19:21:
                    78:2c:a1:43:75:7b:64:13:4f:a3:20:3c:79:8f:27:
                    e7:04:7d:1c:3e:96:0c:47:44:1c:43:57:17:83:77:
                    0a:04:da:e2:59:65:8f:6f:d6:91:e8:32:bd:6b:a3:
                    d7:fc:5f:a0:fe:c4:b4:f0:70:87:f5:7c:4d:ee:7f:
                    d7:56:61:9f:c6:72:a4:b0:4a:bc:ba:6c:a7:13:f8:
                    f8:bf:15:95:0c:df:f3:eb:be:11:ee:cd:e8:c1:bf:
                    2b:8d:13:36:11:6a:c4:8d:0e:87:47:df:9f:72:f9:
                    c5:91:83:8f:9f:e4:65:29:e3:0e:0b:97:ff:c5:80:
                    cd:bc:2b:17:4f:1d:de:11:5f:f7:93:42:56:91:5e:
                    83:78:87:fe:4f:ee:52:77:c2:07:a0:6d:68:33:96:
                    9c:42:9d:29:bb:53:3d:e2:79:5d:5e:27:3a:c0:b1:
                    7b:2b:8f:4c:dc:bf:0e:37:12:8f:c9:fc:a6:b8:b9:
                    22:fa:8e:ed:59:cb:04:9e:c5:a0:ed:c5:21:41:01:
                    7d:18:cb:dd:1d:16:55:1d:c8:95:c8:d4:03:5f:36:
                    80:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:79:85:46:54:18:DB:BE:7D:5B:50:AD:22:D6:82:41:46:BF:1C:2B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4ED9F5A4A06811F1A74D28BBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.198.94.0/23
                  154.198.115.0-154.198.122.255

    Signature Algorithm: sha256WithRSAEncryption
         4f:5a:9c:f9:2e:50:df:b9:48:87:1c:b4:32:16:50:e0:ec:0b:
         41:92:fa:f9:17:91:aa:1f:1c:99:e7:95:26:95:ef:a8:b4:e7:
         59:ad:cf:e1:b6:26:54:9e:16:63:2a:ad:cd:80:1e:0a:74:ba:
         f3:89:37:a4:91:71:56:db:7f:f9:53:53:37:34:32:9f:aa:11:
         54:fc:da:06:61:fd:fe:cc:f1:78:56:1b:97:19:23:aa:fb:82:
         98:9b:d9:32:cb:5f:cf:6a:2e:1a:8d:07:ae:7a:49:94:60:1e:
         5f:41:ac:48:3d:40:f0:a5:15:6a:28:fc:08:a1:97:9c:82:63:
         0c:1b:54:0c:29:c6:1d:6f:7a:5f:ac:7e:90:fb:4d:df:7d:66:
         48:b6:26:6d:cf:e4:ae:5a:0b:dd:bb:02:5a:9f:dc:18:3e:c4:
         18:9f:6d:c2:41:98:4c:1a:4e:79:3a:1f:52:84:17:69:10:cf:
         84:13:fa:72:a3:8d:9c:1e:43:8e:4a:91:48:22:d3:8a:72:c3:
         0f:30:0f:f3:ba:3c:f8:35:18:e1:f9:b3:0c:51:89:98:26:da:
         91:a0:3d:06:2d:43:a4:2d:cd:59:3c:f1:a1:9f:95:77:2e:c3:
         a4:84:4c:dc:32:9f:00:b5:28:a7:75:ea:a3:9b:0a:90:cf:87:
         1b:9e:d9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----