Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72966490963711F1914A4FB1CE1D38B0.roa
File:                     72966490963711F1914A4FB1CE1D38B0.roa (raw, json)
Hash identifier:          An5anygB753ixwsfC7UQVMBJNWl+Ylzh8TBdL5EUwNs=
Subject key identifier:   C7:7F:F7:06:C5:ED:10:4D:3E:78:BB:29:35:75:11:CE:B3:11:0F:DC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DE69
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72966490963711F1914A4FB1CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 10:20:32 +0000
ROA not before:           Wed 12 Aug 2026 10:20:27 +0000
ROA not after:            Sun 12 Aug 2029 10:20:27 +0000
asID:                     17561
IP address blocks:        154.207.229.0/24 maxlen: 24
                          154.207.230.0/24 maxlen: 24
                          154.207.231.0/24 maxlen: 24
                          154.207.232.0/24 maxlen: 24
                          154.207.233.0/24 maxlen: 24
                          154.207.234.0/24 maxlen: 24
                          154.207.235.0/24 maxlen: 24
                          154.207.236.0/24 maxlen: 24
                          154.207.237.0/24 maxlen: 24
                          154.207.238.0/24 maxlen: 24
                          154.207.239.0/24 maxlen: 24
                          154.207.240.0/24 maxlen: 24
                          154.207.241.0/24 maxlen: 24
                          154.207.242.0/24 maxlen: 24
                          154.207.243.0/24 maxlen: 24
                          154.207.244.0/24 maxlen: 24
                          154.207.245.0/24 maxlen: 24
                          154.207.246.0/24 maxlen: 24
                          154.207.247.0/24 maxlen: 24
                          154.207.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122473 (0x1de69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 12 10:20:27 2026 GMT
            Not After : Aug 12 10:20:27 2029 GMT
        Subject: CN=6a7c48f0-aefe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7a:88:3c:a7:d7:9a:c5:4e:8a:07:45:b3:fe:
                    3b:86:16:cb:62:f7:61:ef:16:5a:4f:b4:2e:9e:dd:
                    c4:22:f1:97:69:3a:d2:00:7d:89:b9:cb:47:80:3a:
                    bd:60:2c:f3:68:ad:e2:59:6f:2c:b1:35:1b:45:04:
                    11:c6:47:59:fd:c0:4f:2b:02:a2:7b:92:d2:39:70:
                    62:0b:68:3c:f0:86:18:55:78:fc:c9:08:74:e7:4b:
                    48:8c:90:23:82:56:3e:f4:94:7d:84:fc:d5:ec:e2:
                    fa:61:cc:7a:50:f4:aa:f8:f2:ae:5a:62:62:45:0d:
                    59:c4:aa:0d:b0:68:a2:ba:30:55:12:d9:95:35:0c:
                    59:41:78:2b:ab:c3:46:94:e7:21:1a:c7:ad:60:54:
                    c6:39:fe:e3:5a:35:23:7e:1a:a0:e2:3a:84:5d:e4:
                    18:54:18:ed:e1:64:b9:6c:1b:1c:6c:ec:32:60:12:
                    4c:26:6b:b4:b7:ef:00:ab:09:14:cc:6e:f1:b1:03:
                    93:71:2b:66:fe:61:34:a7:35:2b:a9:91:1e:d5:2c:
                    91:f9:8c:17:0f:2e:5e:5d:e8:83:73:f3:ba:eb:2c:
                    24:e4:74:6d:fd:7b:23:4f:2b:54:eb:1d:c7:5b:e9:
                    f5:92:4c:8a:53:34:0b:3a:6a:ca:35:de:ce:ee:45:
                    ef:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7F:F7:06:C5:ED:10:4D:3E:78:BB:29:35:75:11:CE:B3:11:0F:DC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72966490963711F1914A4FB1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.207.229.0-154.207.248.255

    Signature Algorithm: sha256WithRSAEncryption
         2d:62:4d:56:f0:0a:70:bb:ee:90:a9:71:45:22:7b:33:37:4a:
         2a:ef:c0:d4:10:99:e7:4a:ca:a4:9e:cd:07:f2:17:2e:d3:13:
         3c:05:bb:b1:9d:f8:41:30:a1:1d:19:3f:08:eb:b9:87:0a:6a:
         f6:2c:93:a1:b8:b7:bd:87:7b:98:22:4b:fe:53:f5:f3:ab:fe:
         b6:58:33:ba:70:10:6f:e1:37:45:2f:f3:83:b3:97:4f:da:74:
         2a:73:5e:9f:96:6b:57:e7:e6:c5:64:42:80:d5:3e:cd:01:c8:
         1c:03:53:2b:3c:b3:cc:75:3d:cd:1a:40:b2:d8:b7:ec:d2:3f:
         80:9c:6f:f5:10:59:63:b0:ec:8b:44:b8:8b:58:46:f3:f0:b8:
         f9:1f:fe:14:25:22:7c:72:20:8b:bc:3f:72:b4:aa:ee:64:af:
         b7:66:16:e3:fa:be:4a:b7:a8:60:91:40:b9:d5:91:7e:c1:4f:
         8c:38:67:8f:d2:3e:a8:18:34:35:74:9e:a9:20:65:d5:74:c9:
         6e:02:2f:02:7d:2f:b4:05:41:65:fa:ba:e0:84:f5:32:58:62:
         0f:f2:9d:cc:49:2d:3f:b6:b5:54:ac:5f:0b:12:cd:a1:f0:e9:
         e8:d2:59:c9:db:79:49:7a:23:06:bd:82:f5:7d:91:11:13:4c:
         2f:1a:7c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----