Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D90654A964E11F1991E76BCCE1D38B0.roa
File:                     8D90654A964E11F1991E76BCCE1D38B0.roa (raw, json)
Hash identifier:          XOkpr1m1bnHAE3YLI+Jw+LYzc2bSw0l7MdLlgmhPSHI=
Subject key identifier:   6F:59:CF:D9:51:44:63:BC:8B:E8:B7:EF:F8:36:64:31:AC:3A:06:E8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DEA8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D90654A964E11F1991E76BCCE1D38B0.roa
Signing time:             Wed 12 Aug 2026 13:05:55 +0000
ROA not before:           Wed 12 Aug 2026 13:05:51 +0000
ROA not after:            Sun 12 Aug 2029 13:05:51 +0000
asID:                     17561
IP address blocks:        154.209.226.0/24 maxlen: 24
                          154.209.227.0/24 maxlen: 24
                          154.209.228.0/24 maxlen: 24
                          154.209.229.0/24 maxlen: 24
                          154.209.230.0/24 maxlen: 24
                          154.209.231.0/24 maxlen: 24
                          154.209.232.0/24 maxlen: 24
                          154.209.233.0/24 maxlen: 24
                          154.209.234.0/24 maxlen: 24
                          154.209.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122536 (0x1dea8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 12 13:05:51 2026 GMT
            Not After : Aug 12 13:05:51 2029 GMT
        Subject: CN=6a7c6fb3-3ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8b:86:94:d0:1d:58:7d:25:65:83:55:9d:49:
                    67:df:a9:ee:05:b7:47:66:5f:c4:46:25:52:55:2d:
                    29:3b:af:9f:b4:19:c4:1d:27:2c:19:0a:50:e4:ee:
                    11:b9:d0:cb:46:28:dc:e4:4f:e9:7d:a7:ea:f9:a2:
                    13:c9:6b:71:ab:35:8d:49:26:12:3a:1d:50:d8:f6:
                    f3:01:92:ff:84:af:d7:45:b1:15:74:9c:43:c2:5c:
                    54:6e:49:cf:1a:cc:0c:5e:69:32:0c:bc:f7:bc:dd:
                    40:25:c2:8e:1b:a3:99:e0:ce:fc:1c:a9:b2:3b:11:
                    84:11:82:1f:7a:b6:24:b4:fc:37:ea:ce:4e:dc:90:
                    c8:99:14:4f:96:db:c5:e9:1c:74:b9:7f:c4:89:e5:
                    31:da:31:f5:19:7e:53:1b:b3:dc:ef:16:40:e9:32:
                    d1:82:5a:5d:ae:7d:52:fc:d0:89:7d:0c:e4:22:bd:
                    5c:40:23:d5:06:56:4e:dd:ab:28:77:a3:b0:75:f3:
                    82:bc:f0:28:0a:ef:4a:26:30:69:11:05:19:49:cd:
                    6a:4f:78:eb:f4:80:a9:cf:d3:a7:80:9f:de:9e:53:
                    bb:99:07:c3:62:08:5d:1f:fc:00:7e:14:37:7b:4d:
                    07:d1:c6:9f:2c:d5:85:a5:d3:b8:35:01:3d:3e:2b:
                    e8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:59:CF:D9:51:44:63:BC:8B:E8:B7:EF:F8:36:64:31:AC:3A:06:E8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D90654A964E11F1991E76BCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.209.226.0-154.209.235.255

    Signature Algorithm: sha256WithRSAEncryption
         85:96:93:4a:bb:46:96:97:72:e4:f4:75:64:ef:ce:22:8d:1b:
         d0:fb:c0:79:7f:80:9b:a7:78:0e:30:8a:e3:84:95:16:2c:ee:
         6f:aa:09:b6:98:42:d3:32:e6:48:c5:32:bd:45:2f:ad:02:72:
         27:57:34:2e:6e:80:c8:ab:9d:0a:ed:6f:56:3f:0c:ae:18:f0:
         cd:a9:56:6e:1f:e8:d8:bd:13:98:5e:52:a8:a8:31:83:4a:79:
         d1:e5:76:cd:c2:18:f9:e4:f2:b1:4a:a2:40:1f:9f:c3:dc:2f:
         33:1f:3b:64:56:44:6f:57:74:53:b6:54:88:01:01:3a:81:da:
         c4:ab:f6:48:7a:14:2b:24:cb:e5:8f:ec:a9:a0:53:5c:f7:a6:
         7b:90:ca:7d:3a:7e:a5:cf:f0:78:c9:e8:15:90:6d:aa:e1:8b:
         11:71:ee:b4:8f:5e:77:7e:94:6f:4c:e0:ed:54:cb:f2:96:ba:
         3d:2d:0e:e8:61:ed:74:be:57:aa:ad:52:a3:59:4b:bf:71:af:
         eb:d5:80:97:d9:8c:31:a5:66:db:40:93:f8:fc:ec:15:3f:64:
         e8:6e:4f:7c:2f:d0:89:da:7d:70:cc:62:a5:51:29:b4:e1:db:
         72:f4:54:a7:18:f8:15:d9:f7:e0:e3:90:e3:3b:1e:19:d4:75:
         71:92:4b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----