Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65A59714965611F1BC9573EACE1D38B0.roa
File:                     65A59714965611F1BC9573EACE1D38B0.roa (raw, json)
Hash identifier:          rr7u14gWm9E6Mg7Epe5GqTo72M+ESjuXIB1xu6/SVHo=
Subject key identifier:   8F:92:69:76:22:D3:02:40:77:31:0E:92:E6:46:20:A3:11:D1:79:A8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DEBA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65A59714965611F1BC9573EACE1D38B0.roa
Signing time:             Wed 12 Aug 2026 14:02:05 +0000
ROA not before:           Wed 12 Aug 2026 14:01:51 +0000
ROA not after:            Sun 12 Aug 2029 14:01:51 +0000
asID:                     17561
IP address blocks:        154.199.23.0/24 maxlen: 24
                          154.199.24.0/24 maxlen: 24
                          154.199.25.0/24 maxlen: 24
                          154.199.28.0/24 maxlen: 24
                          154.199.29.0/24 maxlen: 24
                          154.199.30.0/24 maxlen: 24
                          154.199.31.0/24 maxlen: 24
                          154.199.48.0/24 maxlen: 24
                          154.199.49.0/24 maxlen: 24
                          154.199.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122554 (0x1deba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 12 14:01:51 2026 GMT
            Not After : Aug 12 14:01:51 2029 GMT
        Subject: CN=6a7c7cdd-814e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:af:0d:c4:b6:f3:81:74:bf:be:e5:d4:c2:0d:
                    f6:d1:e3:98:15:a6:1a:28:24:24:3d:87:fa:68:24:
                    48:67:21:be:cf:5c:fe:65:0b:52:6b:82:d1:d2:c0:
                    3c:99:c2:22:f0:cf:45:d0:62:e9:a3:3a:41:69:70:
                    59:20:58:f7:cd:94:ba:15:97:a0:29:9d:ef:d7:0f:
                    ff:e2:72:8f:c2:64:80:2b:70:04:7a:d6:bf:d3:ef:
                    ce:06:fe:c4:b8:88:ca:b3:6d:fd:64:36:f0:f9:c5:
                    25:81:a1:4a:01:ca:5b:ea:06:f8:77:60:da:c3:cd:
                    a5:c8:31:6d:38:fc:b1:a4:7b:29:fc:65:04:8a:20:
                    a9:7f:88:e1:42:f6:7f:c4:c4:c3:31:d9:95:b7:07:
                    b9:97:81:88:95:b1:f5:8c:cb:42:fd:7e:66:af:ce:
                    83:b1:25:5a:c4:8d:70:12:e6:26:09:b4:fa:01:7d:
                    d7:8c:7e:a0:b8:12:62:1f:93:50:c9:69:ba:9b:69:
                    fd:5b:2a:b5:0c:68:09:eb:e5:90:59:61:10:d9:f6:
                    4b:7b:d8:60:3d:37:c7:b0:32:19:14:5b:cf:f5:ff:
                    77:61:30:8f:e8:a3:39:21:be:51:55:e1:d5:d8:33:
                    1d:71:00:63:d4:04:fa:fd:26:f9:5c:d4:48:57:95:
                    d0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:92:69:76:22:D3:02:40:77:31:0E:92:E6:46:20:A3:11:D1:79:A8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65A59714965611F1BC9573EACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.199.23.0-154.199.25.255
                  154.199.28.0/22
                  154.199.48.0-154.199.50.255

    Signature Algorithm: sha256WithRSAEncryption
         be:9e:e3:23:db:88:47:68:48:fa:ad:0d:7c:a7:08:05:fb:98:
         f1:d1:fb:8b:20:bb:0f:8b:fd:3d:79:f6:d8:cd:0e:2b:ee:8b:
         29:79:95:2e:5b:9b:26:04:29:bc:21:b6:7b:03:03:3a:ee:50:
         b5:bd:6a:fb:18:83:99:60:f4:25:ef:44:46:12:c7:30:3e:c1:
         d2:2a:ca:19:4f:ff:fb:ab:0e:de:a3:ab:b2:18:b3:f5:42:c5:
         15:41:a7:31:04:c4:48:c2:8e:ba:17:34:c9:49:cf:ea:ac:9e:
         62:d7:45:3f:b8:96:ae:fc:0d:b1:c9:de:b4:0e:9f:f3:dd:3c:
         f8:a5:d4:4c:47:8d:fe:2b:d6:d0:55:f3:3f:73:1e:f4:d3:00:
         b8:79:5b:f9:fa:d8:c9:8d:e3:73:02:a1:8e:31:a1:ba:f3:3f:
         e0:1e:b1:bf:bb:5a:3e:51:36:38:ea:db:e7:92:1e:cf:50:45:
         b3:e0:0c:b8:38:3a:e1:71:74:48:93:6b:a5:b2:06:d4:97:92:
         1c:88:dc:79:a5:95:4c:e1:80:40:23:c6:03:00:4d:1a:07:0a:
         c9:09:a9:31:b1:43:60:32:9c:46:4c:4b:3e:ae:93:92:48:b3:
         a5:04:2a:96:4b:9e:37:e7:c1:24:1c:75:c9:42:70:a6:4a:fa:
         de:b7:cb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----