Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A6822F4952D11F1A18C1BD8CE1D38B0.roa
File:                     7A6822F4952D11F1A18C1BD8CE1D38B0.roa (raw, json)
Hash identifier:          GfO/j48kc1rw7kHfyCdkrbzAgDI4FN9yFBSm6zvTQQ4=
Subject key identifier:   20:FA:60:30:94:D2:DA:4E:5D:4F:EE:27:12:67:66:77:FF:27:F4:28
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DDFC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A6822F4952D11F1A18C1BD8CE1D38B0.roa
Signing time:             Tue 11 Aug 2026 02:36:39 +0000
ROA not before:           Tue 11 Aug 2026 02:36:32 +0000
ROA not after:            Sat 16 Dec 2028 02:36:32 +0000
asID:                     17561
IP address blocks:        154.198.1.0/24 maxlen: 24
                          154.198.2.0/24 maxlen: 24
                          154.198.3.0/24 maxlen: 24
                          154.201.32.0/24 maxlen: 24
                          154.201.35.0/24 maxlen: 24
                          154.201.54.0/24 maxlen: 24
                          154.201.55.0/24 maxlen: 24
                          154.202.64.0/24 maxlen: 24
                          154.202.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122364 (0x1ddfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 11 02:36:32 2026 GMT
            Not After : Dec 16 02:36:32 2028 GMT
        Subject: CN=6a7a8ab7-66b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a7:4f:63:1d:ca:18:9d:ba:5a:4c:4e:d0:6d:
                    47:0c:c7:10:bb:7d:30:f8:80:a7:b7:15:83:8a:c5:
                    20:4e:44:bf:55:ea:e0:16:9e:82:ec:30:fe:59:75:
                    ea:79:15:a4:7c:68:0e:29:8a:59:07:55:a3:70:57:
                    c4:c9:7a:29:c9:a1:2d:66:6a:f1:8f:94:8d:14:27:
                    cd:10:d2:81:68:13:d2:4a:cc:6b:04:9d:e2:9c:a9:
                    0d:73:3d:f2:c7:d2:c8:f5:af:12:d4:cc:0a:3b:88:
                    c2:af:c7:9b:c8:a1:0c:d9:80:38:d5:1d:f6:8a:44:
                    3e:c1:b8:66:0c:e2:40:ab:68:77:8b:cc:a4:8b:15:
                    e3:40:d9:69:bd:9a:a3:7f:5b:55:65:7e:8f:84:6f:
                    0b:ae:49:a6:e8:ac:30:aa:5b:b0:1e:d6:fc:0a:38:
                    3e:ca:e6:71:ce:94:f0:ad:4c:8e:21:6b:23:ca:ec:
                    81:aa:9a:79:14:7a:95:53:95:c8:0a:df:2d:93:44:
                    63:ce:e0:30:e7:46:00:65:05:ec:58:c5:70:5b:19:
                    1d:0e:c0:85:6a:8e:21:01:53:4e:d7:a6:c6:86:57:
                    af:c9:46:70:98:32:10:22:5e:a5:99:df:5f:a0:21:
                    50:5d:f7:f2:57:9a:fa:c7:bd:7e:a6:37:46:09:71:
                    6d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FA:60:30:94:D2:DA:4E:5D:4F:EE:27:12:67:66:77:FF:27:F4:28
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A6822F4952D11F1A18C1BD8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.198.1.0-154.198.3.255
                  154.201.32.0/24
                  154.201.35.0/24
                  154.201.54.0/23
                  154.202.64.0/24
                  154.202.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:2b:30:25:00:b3:e2:82:c2:6b:8b:d7:51:f1:26:98:30:a5:
         e0:8f:e0:5d:6c:de:ae:f0:9c:38:03:ea:91:7c:15:91:b4:dd:
         95:83:1d:a6:06:2f:cc:13:79:07:7a:e6:37:f3:04:1e:47:a1:
         f0:b1:4d:26:f8:33:ba:2f:92:b0:4f:70:06:a9:d0:b0:b7:25:
         21:c0:32:d1:fa:e0:73:cd:13:8f:eb:64:39:c4:4b:8b:71:d7:
         28:dc:3a:d7:f6:a7:3f:33:8c:b0:2d:02:33:ff:e1:79:58:a9:
         e9:fa:8e:2b:18:7a:2d:50:38:bb:59:a9:d8:82:c8:6e:8c:d3:
         e6:07:3c:25:93:98:37:f8:7b:75:22:c9:8e:bb:b4:7b:f1:ed:
         d5:ba:c2:16:66:81:1d:86:62:58:a0:79:47:a9:15:b4:31:68:
         a0:f1:bc:f6:fe:43:5d:cb:b7:e9:47:a3:16:29:37:cd:70:06:
         f2:74:49:d5:da:14:24:b1:f7:38:e1:b1:a6:22:f5:9e:ec:90:
         9d:a0:a1:6b:f2:d9:f3:6c:16:57:5f:9c:e0:8a:44:34:4e:f1:
         79:e8:21:1c:6c:d2:b6:c9:0c:1e:da:4a:50:d7:60:15:ba:f6:
         1f:94:b1:7e:6c:5e:76:65:a7:b9:30:ac:7f:26:9d:48:8a:fe:
         c9:fc:23:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----