Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D5AEAC2AEAA11F1A154D610CF1D38B0.roa
File:                     8D5AEAC2AEAA11F1A154D610CF1D38B0.roa (raw, json)
Hash identifier:          K6G//pofmR/ZDwqmt8jHT4T4znThadvzbG6X9TSC5n4=
Subject key identifier:   FB:A1:92:E2:5D:F7:F0:3D:1C:DC:61:04:2D:C1:EF:F0:C3:FF:99:15
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E7DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D5AEAC2AEAA11F1A154D610CF1D38B0.roa
Signing time:             Sat 12 Sep 2026 13:04:57 +0000
ROA not before:           Sat 12 Sep 2026 13:04:53 +0000
ROA not after:            Tue 22 Sep 2026 13:04:53 +0000
asID:                     55020
IP address blocks:        154.193.192.0/20 maxlen: 24
                          154.193.208.0/21 maxlen: 24
                          154.193.216.0/21 maxlen: 24
                          154.193.224.0/20 maxlen: 24
                          154.193.240.0/20 maxlen: 24
                          154.204.8.0/21 maxlen: 24
                          154.204.128.0/18 maxlen: 24
                          154.204.183.0/24 maxlen: 24
                          154.210.2.0/24 maxlen: 24
                          154.211.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124890 (0x1e7da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 12 13:04:53 2026 GMT
            Not After : Sep 22 13:04:53 2026 GMT
        Subject: CN=6aa54df9-e8c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:56:5f:b7:bf:13:b7:c5:f2:d7:93:61:ce:45:
                    16:06:ce:b1:0b:ef:fb:e2:87:64:fd:db:df:9f:ea:
                    22:65:73:17:a9:36:09:d3:0c:79:91:9d:49:a1:ba:
                    b1:98:6c:ab:8f:3d:f4:52:f5:d2:dd:1c:68:63:da:
                    3e:56:a1:17:03:33:a7:6a:3c:bc:8d:96:f1:e7:c5:
                    d8:b8:1b:f1:b0:d2:e2:71:0a:fc:f7:d9:96:3e:5a:
                    88:18:65:28:fd:ad:ae:6b:d1:bc:a4:de:60:70:82:
                    6f:74:36:50:c5:89:f1:76:ab:14:a9:91:27:be:a6:
                    71:45:34:9d:f4:2b:55:01:71:58:5e:07:b7:e4:e7:
                    5a:3e:8a:0d:86:66:2d:c4:9f:ca:43:a6:19:e3:48:
                    38:b8:fc:72:8a:81:63:f0:6d:a3:2a:8b:3d:75:f6:
                    ae:f9:91:66:2e:8b:63:01:5b:6e:cd:5d:e6:e5:5d:
                    e0:18:bf:68:81:c8:5c:22:45:be:15:a7:d4:cb:0f:
                    8d:e7:7e:7a:8b:bf:2d:98:2a:2d:e7:c6:f9:cc:c8:
                    a0:5e:9f:62:2c:d4:40:56:dd:cf:b1:fb:19:bb:48:
                    fd:d2:22:2d:ea:ab:62:76:a3:c5:bf:97:16:80:df:
                    ec:26:cc:77:1b:86:1d:c5:5e:23:e9:60:e7:af:d8:
                    f9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A1:92:E2:5D:F7:F0:3D:1C:DC:61:04:2D:C1:EF:F0:C3:FF:99:15
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D5AEAC2AEAA11F1A154D610CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.192.0/18
                  154.204.8.0/21
                  154.204.128.0/18
                  154.210.2.0/24
                  154.211.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:83:0b:6f:90:59:34:9f:58:5e:15:0d:68:93:09:33:67:2d:
         a2:97:1a:84:d5:f3:b8:a6:d0:be:67:99:57:e1:d6:00:b0:e7:
         38:8f:a0:d9:e5:3e:43:cd:56:1a:4f:16:c1:fd:ec:f5:c5:d2:
         04:c2:e2:9c:a3:84:6e:52:16:9d:92:7d:97:02:5f:a2:f5:8e:
         8f:54:2c:7d:b6:b8:98:6d:7b:b8:e5:1c:1f:8a:1b:74:61:8a:
         26:df:da:69:27:b2:3a:25:df:20:c5:d0:3a:46:4b:3b:4e:f9:
         72:90:db:15:b1:cb:21:27:4c:7b:21:6b:09:54:99:ce:d9:5d:
         0f:46:15:67:a4:51:fc:4d:22:3c:b1:c8:13:01:30:46:8c:6f:
         fc:d8:48:69:e6:e6:15:35:a9:fa:2e:13:1c:e4:3b:02:9f:87:
         0c:88:46:e8:95:d5:1b:fa:e6:65:15:b5:f4:05:30:97:10:14:
         a3:e9:98:d3:71:d9:5c:45:27:4c:c1:4a:32:f3:a7:4e:84:77:
         2c:66:16:c3:f4:c5:b4:e2:31:34:e9:ea:b4:2e:08:99:26:e4:
         c7:47:cd:99:00:af:76:1f:9a:67:01:3a:f8:41:28:01:7f:ad:
         9f:e3:4a:ba:b6:83:3a:83:1c:0b:49:89:09:6e:73:4b:24:87:
         dc:61:8a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----