Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E80F23E9C7811F1BAEC191ECF1D38B0.roa
File:                     6E80F23E9C7811F1BAEC191ECF1D38B0.roa (raw, json)
Hash identifier:          kxDzlYLxI1ffOp0ZZoKtpUqv/GbchoDcl5B2LhRXHCc=
Subject key identifier:   DC:67:65:5B:F8:72:D7:92:0E:C7:21:B4:D9:65:9A:4D:BE:39:DC:28
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E05D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E80F23E9C7811F1BAEC191ECF1D38B0.roa
Signing time:             Thu 20 Aug 2026 09:20:49 +0000
ROA not before:           Thu 20 Aug 2026 09:20:45 +0000
ROA not after:            Sat 10 Oct 2026 09:20:45 +0000
asID:                     395793
IP address blocks:        154.194.208.0/22 maxlen: 24
                          154.194.212.0/23 maxlen: 24
                          154.196.208.0/24 maxlen: 24
                          154.196.209.0/24 maxlen: 24
                          154.196.210.0/24 maxlen: 24
                          154.196.211.0/24 maxlen: 24
                          154.196.212.0/24 maxlen: 24
                          154.200.55.0/24 maxlen: 24
                          154.200.56.0/22 maxlen: 24
                          154.200.56.0/24 maxlen: 24
                          154.200.57.0/24 maxlen: 24
                          154.200.58.0/24 maxlen: 24
                          154.200.59.0/24 maxlen: 24
                          154.200.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122973 (0x1e05d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 09:20:45 2026 GMT
            Not After : Oct 10 09:20:45 2026 GMT
        Subject: CN=6a86c6f1-3245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:91:5f:fd:e6:f7:fe:18:cf:fd:89:39:d6:2b:
                    3d:8a:94:88:36:31:5c:3f:93:44:84:93:59:fb:98:
                    f6:9e:f9:38:62:37:7a:da:8c:5c:af:e3:d9:fb:87:
                    8f:a6:f6:75:af:1b:0b:6c:15:8c:0b:0c:04:33:22:
                    51:e6:2b:d9:18:31:54:00:e1:4b:86:e2:57:54:3f:
                    77:51:7d:7b:24:fc:dc:4e:c3:c0:0d:77:16:6b:6c:
                    8c:6c:76:75:d6:cf:0d:75:eb:4e:42:1d:0e:01:47:
                    18:cf:b0:2e:fa:71:6e:54:19:a1:04:a9:af:5e:31:
                    b5:dc:e0:c5:c5:d4:42:88:6c:ff:d6:fe:ec:79:8c:
                    e7:0f:90:96:b3:8b:95:67:9c:3e:66:c7:be:ab:f2:
                    0d:73:1c:ef:af:00:7c:0c:af:68:e1:64:3b:06:f1:
                    a3:89:d7:c7:bc:47:89:a5:42:12:3e:51:68:52:f4:
                    e0:9c:2a:31:54:4d:1e:f9:82:32:c8:c9:80:ff:9a:
                    2e:ae:b0:d9:48:d7:e8:1f:49:46:20:05:cc:ef:f6:
                    c5:14:da:4e:7f:2e:f7:1c:98:98:35:c8:dc:47:1b:
                    70:22:62:c1:4d:cc:a9:4b:5b:09:75:db:d1:75:92:
                    6b:60:0f:91:9b:9a:af:b6:d5:58:8a:f3:d7:5b:31:
                    1f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:67:65:5B:F8:72:D7:92:0E:C7:21:B4:D9:65:9A:4D:BE:39:DC:28
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E80F23E9C7811F1BAEC191ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.208.0-154.194.213.255
                  154.196.208.0-154.196.212.255
                  154.200.55.0-154.200.59.255
                  154.200.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:ad:4f:6a:1f:dc:e5:f9:b2:81:b0:b0:72:8a:86:c5:c6:80:
         8e:82:0a:be:22:09:cb:2e:19:36:6b:e8:b0:48:eb:ee:96:bf:
         dc:16:39:fc:59:bd:48:5e:a7:f3:9d:94:1c:a0:47:b3:73:4a:
         6b:be:17:6d:04:bf:d7:0e:1e:b1:be:e7:ec:65:ad:ad:ca:3d:
         ba:d8:58:8e:fe:13:ef:e9:43:3c:d8:9b:3d:48:6e:39:a8:b4:
         6d:ec:4d:dd:5f:5d:27:33:e2:e5:f8:a3:0e:ac:71:45:75:01:
         9c:47:8c:c1:17:52:31:36:4f:65:99:4d:62:55:88:d0:e5:40:
         3c:75:37:55:ae:3e:7a:16:eb:15:0a:03:d0:83:66:a5:5b:a4:
         fc:a6:4b:04:e8:95:b9:2c:ce:7d:c7:cf:40:42:38:c3:07:da:
         e4:99:25:e3:78:52:14:2e:81:86:a6:f1:ee:b2:b5:85:a4:2f:
         16:01:60:30:a2:d5:b5:79:a8:32:8b:9a:59:cc:ee:60:74:54:
         e0:ea:4f:32:6e:2b:2d:56:ba:8d:72:81:57:b3:27:aa:c2:ec:
         2a:27:23:13:97:28:2f:82:6e:bd:a6:0d:62:c5:2b:1d:fd:ea:
         7e:2a:c4:9d:37:9e:31:0e:f1:d3:17:f4:93:af:75:3b:54:54:
         3b:9c:60:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----