Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6482582E963611F1985E2CA9CE1D38B0.roa
File:                     6482582E963611F1985E2CA9CE1D38B0.roa (raw, json)
Hash identifier:          YE3YxjkOB8zCcE6J1Fx/VwkSMxmmEDNVCLyM+GSQs9o=
Subject key identifier:   AA:38:79:6C:16:99:BC:67:82:33:C1:5B:B7:49:AD:6D:1A:5C:48:0D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DE63
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6482582E963611F1985E2CA9CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 10:12:59 +0000
ROA not before:           Wed 12 Aug 2026 10:12:55 +0000
ROA not after:            Sun 12 Aug 2029 10:12:55 +0000
asID:                     17561
IP address blocks:        154.207.209.0/24 maxlen: 24
                          154.207.210.0/24 maxlen: 24
                          154.207.211.0/24 maxlen: 24
                          154.207.212.0/24 maxlen: 24
                          154.207.213.0/24 maxlen: 24
                          154.207.214.0/24 maxlen: 24
                          154.207.215.0/24 maxlen: 24
                          154.207.216.0/24 maxlen: 24
                          154.207.217.0/24 maxlen: 24
                          154.207.218.0/24 maxlen: 24
                          154.207.219.0/24 maxlen: 24
                          154.207.220.0/24 maxlen: 24
                          154.207.221.0/24 maxlen: 24
                          154.207.222.0/24 maxlen: 24
                          154.207.223.0/24 maxlen: 24
                          154.207.224.0/24 maxlen: 24
                          154.207.225.0/24 maxlen: 24
                          154.207.226.0/24 maxlen: 24
                          154.207.227.0/24 maxlen: 24
                          154.207.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122467 (0x1de63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 12 10:12:55 2026 GMT
            Not After : Aug 12 10:12:55 2029 GMT
        Subject: CN=6a7c472b-b6ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:99:f6:bd:fd:33:d0:c8:1e:e7:74:ab:c7:55:
                    4a:83:ea:24:9c:c7:e5:6b:c0:95:f8:61:a9:6a:68:
                    ca:2c:2c:95:fa:8c:71:b4:69:8f:e0:67:ad:ff:67:
                    a8:a8:be:20:63:7e:4a:01:88:4c:4f:3a:55:27:ad:
                    fb:e6:5a:1d:49:15:c5:34:dc:d4:e6:38:0d:32:69:
                    1c:62:e9:7a:a5:00:d4:3c:cb:7f:94:f2:cf:8b:c8:
                    32:d4:04:5a:99:15:15:89:98:b8:f9:72:e6:29:cb:
                    00:3e:ad:ca:81:02:9e:8f:3d:df:2f:61:7c:e1:35:
                    7e:73:54:ce:4d:de:7a:61:c4:a5:2d:2b:30:7a:ed:
                    e1:83:ff:1b:24:0c:a1:e4:ae:a8:f0:e9:0a:d4:58:
                    90:92:a2:55:0c:40:31:6b:b6:58:30:80:07:0c:60:
                    09:1c:48:05:26:9f:04:1d:38:0e:90:11:a7:b1:93:
                    35:6b:d3:fe:ae:b6:38:d8:c6:94:49:5f:5d:e0:06:
                    77:6f:8c:6f:80:f6:2e:a6:3e:d3:ac:c0:27:51:98:
                    fe:c8:b8:03:f5:09:48:52:24:57:ae:47:16:5e:9e:
                    88:70:8f:94:00:84:fd:d9:f1:18:66:ff:43:ef:f1:
                    81:d6:a5:4d:b1:db:09:24:71:8f:1a:3a:6b:17:66:
                    81:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:38:79:6C:16:99:BC:67:82:33:C1:5B:B7:49:AD:6D:1A:5C:48:0D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6482582E963611F1985E2CA9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.207.209.0-154.207.228.255

    Signature Algorithm: sha256WithRSAEncryption
         d6:de:c9:41:bf:fb:59:89:32:76:e5:14:cb:4b:0c:25:4c:c9:
         a9:30:65:85:0a:34:be:0e:ec:69:ef:ef:15:e5:9d:a5:44:6e:
         2c:d2:95:8f:de:6f:0f:b5:ac:d8:cc:31:01:3e:7c:04:14:b4:
         aa:15:ea:5d:84:62:6c:47:11:42:77:92:dd:30:11:05:d2:f2:
         dc:c2:02:60:b0:ca:e3:68:3f:e5:b6:31:f1:fd:74:f9:20:c4:
         9b:de:a6:31:20:0e:19:bb:a0:87:99:f0:7a:7f:f8:93:7b:5f:
         f4:2c:4c:db:ae:fb:ad:22:14:f9:e5:7a:ba:c7:ee:48:8f:86:
         ad:36:ec:44:2e:97:be:30:b9:5c:dc:0f:d3:e6:b8:b7:22:1a:
         06:ab:09:9f:cd:4b:89:df:63:cd:44:1b:5e:ce:20:3b:a7:12:
         dc:2f:26:87:c4:3b:a0:4d:03:65:90:55:38:1b:58:e6:90:1b:
         17:36:e9:93:10:14:b8:5c:ac:ab:0b:16:fa:15:d4:c7:e5:0b:
         f8:67:d2:dc:88:1e:4c:00:58:da:eb:81:24:6b:e8:9c:90:23:
         56:8e:c7:0f:a3:8b:9a:e7:3c:1e:55:14:04:fb:18:8a:aa:5c:
         18:6e:d8:9b:ab:60:4b:25:57:18:a0:54:30:93:2d:94:03:28:
         37:29:ba:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----