Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/692927D6AE9B11F1833C94B7CE1D38B0.roa
File:                     692927D6AE9B11F1833C94B7CE1D38B0.roa (raw, json)
Hash identifier:          A9BNgs6QCu08m+r5Csb9DXdudZb4EY9P8od1QdYpscE=
Subject key identifier:   8E:58:E7:A6:44:B6:11:9A:82:E6:29:EE:C8:8B:CD:A4:0A:4C:24:76
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E7CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/692927D6AE9B11F1833C94B7CE1D38B0.roa
Signing time:             Sat 12 Sep 2026 11:16:33 +0000
ROA not before:           Sat 12 Sep 2026 11:16:29 +0000
ROA not after:            Tue 22 Sep 2026 11:16:29 +0000
asID:                     11404
IP address blocks:        154.193.112.0/20 maxlen: 24
                          154.196.192.0/20 maxlen: 24
                          154.199.80.0/20 maxlen: 24
                          154.199.96.0/19 maxlen: 24
                          154.199.128.0/19 maxlen: 24
                          154.200.112.0/20 maxlen: 24
                          154.211.224.0/19 maxlen: 24
                          154.215.32.0/19 maxlen: 24
                          154.222.160.0/19 maxlen: 24
                          154.223.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 15 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124878 (0x1e7ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 12 11:16:29 2026 GMT
            Not After : Sep 22 11:16:29 2026 GMT
        Subject: CN=6aa53491-df5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:11:bf:98:3f:07:1b:8e:50:e2:63:55:4f:31:
                    e4:41:ee:cd:de:52:6f:ff:39:27:dc:eb:bc:7c:5b:
                    98:9f:fa:9d:9b:7a:34:e8:63:fb:9a:c6:35:3e:a9:
                    1e:a2:d5:3c:1c:20:b7:78:26:59:b4:90:9c:32:2c:
                    34:97:30:9a:a3:24:d2:57:69:1e:a3:4e:55:57:80:
                    60:27:ca:9b:dc:16:cc:9a:b3:93:c6:a5:d8:7e:03:
                    ed:55:f9:08:7d:1a:87:eb:db:ca:3f:ee:d7:b5:31:
                    29:94:cd:52:dc:32:84:6f:90:f0:5c:e8:16:b7:30:
                    2e:82:67:44:68:68:29:2c:57:56:1f:68:bd:99:96:
                    ec:b6:fc:7e:b3:8c:a8:67:52:f5:b9:42:3b:4e:a9:
                    e8:b6:89:43:06:a9:0a:27:37:98:1d:9c:f4:15:aa:
                    f3:d3:f2:71:e2:b4:7b:01:55:20:7f:a6:8a:d4:3a:
                    ea:d5:5e:bd:60:2a:dc:e8:77:fb:1c:43:71:5b:87:
                    ab:99:50:72:4a:23:72:d4:43:eb:ce:1a:5f:d6:2f:
                    03:53:27:e2:14:30:65:c5:70:8d:8d:b7:2f:8c:df:
                    40:ac:90:ca:1a:f2:16:52:80:6e:16:f3:2c:77:d8:
                    16:bd:fe:d9:fd:1f:19:bb:f8:18:9e:b0:c6:54:27:
                    ac:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:58:E7:A6:44:B6:11:9A:82:E6:29:EE:C8:8B:CD:A4:0A:4C:24:76
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/692927D6AE9B11F1833C94B7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.112.0/20
                  154.196.192.0/20
                  154.199.80.0-154.199.159.255
                  154.200.112.0/20
                  154.211.224.0/19
                  154.215.32.0/19
                  154.222.160.0/19
                  154.223.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         05:eb:71:31:a3:96:bb:dd:07:34:c4:14:4a:af:6a:b5:c1:79:
         65:e5:d1:3d:e3:76:e2:a6:96:ac:0d:f6:cc:4e:75:95:61:76:
         e3:34:9d:4f:2b:7f:98:8b:0d:18:7d:93:7a:f5:b8:0f:69:84:
         c9:10:99:b1:25:75:fb:3d:0a:7e:97:3e:e2:65:64:a3:b3:89:
         33:41:27:09:20:13:9a:26:43:24:c9:35:e2:a4:0c:f8:06:7a:
         5b:bd:d7:e6:93:76:aa:cd:a8:ba:9a:fb:d0:46:09:89:06:03:
         8b:8b:f0:85:15:49:a5:23:ff:d6:3e:12:c0:28:77:d2:5d:29:
         e4:72:89:fd:cf:13:d8:7e:32:cb:2f:a6:e4:21:f7:c8:c7:53:
         a3:25:9f:41:26:fe:e0:29:cd:e0:ed:94:f0:77:d3:11:cd:3e:
         9e:83:12:36:73:02:85:de:bb:62:c3:03:9e:ed:b9:03:51:8d:
         4a:ab:27:61:80:b3:8f:b9:2b:10:ea:90:f3:e2:2c:4e:bd:7a:
         c1:c2:6e:57:4e:6f:5f:0b:5c:1c:a3:98:b5:ea:41:03:a2:33:
         61:e1:74:dc:92:43:ea:ed:a7:29:aa:b0:05:0b:c4:30:95:64:
         5b:58:a6:3e:d5:5b:bd:88:36:53:ed:6d:ec:0f:1f:6c:5a:00:
         f5:80:66:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----