Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CF9EC32994611F1A389BDC8CE1D38B0.roa
File:                     8CF9EC32994611F1A389BDC8CE1D38B0.roa (raw, json)
Hash identifier:          6Y5w8vvk1Y+lzwpGfNmQ4NADQdtlLNkMhuSxaTOVI8w=
Subject key identifier:   84:DB:4B:2A:49:66:B3:91:90:39:C3:66:CE:BC:22:C4:EF:F4:F7:5E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DF4E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CF9EC32994611F1A389BDC8CE1D38B0.roa
Signing time:             Sun 16 Aug 2026 07:46:12 +0000
ROA not before:           Sun 16 Aug 2026 07:46:08 +0000
ROA not after:            Tue 22 Sep 2026 07:46:08 +0000
asID:                     11404
IP address blocks:        154.90.28.0/22 maxlen: 24
                          154.91.128.0/21 maxlen: 24
                          154.91.140.0/22 maxlen: 24
                          154.91.148.0/22 maxlen: 24
                          154.91.192.0/21 maxlen: 24
                          154.91.204.0/22 maxlen: 24
                          154.91.208.0/20 maxlen: 24
                          154.93.4.0/22 maxlen: 24
                          154.93.8.0/21 maxlen: 24
                          154.93.16.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 15 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122702 (0x1df4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 16 07:46:08 2026 GMT
            Not After : Sep 22 07:46:08 2026 GMT
        Subject: CN=6a816ac4-ff50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0e:a6:5e:b4:2c:2e:7d:85:5a:ec:74:69:65:
                    64:1e:f3:e1:84:f3:e2:a8:9d:31:2f:41:e6:19:75:
                    39:0b:71:11:64:62:de:1e:a3:ee:0d:ac:8f:b2:62:
                    d5:59:69:51:a2:bd:ca:8f:3f:02:33:75:1a:9b:59:
                    6b:ff:dd:95:c1:a8:d4:f1:f2:73:83:f7:24:70:aa:
                    55:4f:21:9a:d2:5d:e6:c2:d5:72:11:12:a2:4b:ef:
                    01:2e:33:2f:e4:6f:a2:66:75:72:18:0d:bb:cb:de:
                    fd:e6:f3:26:45:c2:1f:8d:7d:18:68:c1:02:ac:44:
                    d1:86:6b:39:a3:e1:05:22:b8:2a:85:94:60:36:f1:
                    5a:e1:0b:71:57:0e:cd:70:1e:8a:dc:f5:e5:1e:61:
                    e2:4b:e3:5d:65:76:96:c8:29:0f:7f:64:78:8c:cf:
                    07:a5:ff:dd:d6:72:ff:8b:8c:dd:5b:3a:20:6e:81:
                    4c:aa:8e:2d:15:ae:9c:c0:41:af:12:0f:f0:0c:24:
                    d4:e7:c7:02:03:32:5f:06:f9:d1:1e:c3:fe:3a:d8:
                    12:48:2b:88:90:ab:d5:de:64:80:d1:0f:71:c2:f5:
                    eb:1d:b0:23:5f:2c:ab:28:49:03:09:6e:56:08:e4:
                    e9:7a:69:d3:93:47:99:1a:15:d8:c9:63:fd:88:7f:
                    43:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:DB:4B:2A:49:66:B3:91:90:39:C3:66:CE:BC:22:C4:EF:F4:F7:5E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CF9EC32994611F1A389BDC8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.90.28.0/22
                  154.91.128.0/21
                  154.91.140.0/22
                  154.91.148.0/22
                  154.91.192.0/21
                  154.91.204.0-154.91.223.255
                  154.93.4.0-154.93.23.255

    Signature Algorithm: sha256WithRSAEncryption
         39:97:f8:ad:6f:4b:6c:b1:52:6d:8c:36:90:6b:8e:25:20:50:
         b5:97:bf:50:a7:1f:10:a8:aa:f1:6a:ee:92:bf:7b:0d:56:c7:
         03:de:fb:14:05:65:49:77:51:bc:77:8c:b4:ba:7b:fd:0e:75:
         49:fd:98:c4:74:ca:39:97:fd:87:0c:90:a6:de:5c:e1:78:33:
         b6:d8:7e:70:d6:71:bd:ba:2c:16:f2:a8:ac:45:ca:1c:29:d1:
         f6:0e:35:b3:49:11:40:a4:7d:24:8a:d8:f8:6a:56:c9:8e:b6:
         05:44:2c:5a:9a:51:b9:7c:5f:63:39:d9:a7:37:bd:2e:9f:fc:
         7b:ca:31:55:25:18:77:d0:f7:6c:a5:e4:51:99:02:62:63:8e:
         ac:83:ea:d6:e9:9b:9c:0e:da:02:64:37:0a:e4:1a:e6:d3:7a:
         25:6e:44:a7:33:c9:12:79:c7:10:41:36:ee:95:96:92:bd:46:
         f6:75:f6:e6:7e:55:c3:3b:e0:3d:71:e1:1a:f6:14:ff:dc:4a:
         08:a5:09:82:4a:2a:ca:13:07:50:0c:90:cf:6e:a3:93:a6:58:
         4d:03:80:9d:7f:7a:02:d4:47:3a:c5:a5:aa:94:b6:52:b0:de:
         a1:5e:0b:a6:4b:68:df:10:09:ea:45:1e:ab:b7:6a:c4:8b:8f:
         e5:60:02:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----