Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92086C42A14511F1AB2670F8CE1D38B0.roa
File:                     92086C42A14511F1AB2670F8CE1D38B0.roa (raw, json)
Hash identifier:          U/f0IHCSSdkP/I6RaFPQpIjMfIDey5LJ/dIhnSJ/MWo=
Subject key identifier:   80:CB:B1:B3:A2:29:BA:86:AE:EE:0C:19:C9:FD:6E:20:E5:37:6F:CA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E37A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92086C42A14511F1AB2670F8CE1D38B0.roa
Signing time:             Wed 26 Aug 2026 11:59:20 +0000
ROA not before:           Wed 26 Aug 2026 11:59:16 +0000
ROA not after:            Sat 25 Aug 2029 11:59:16 +0000
asID:                     17561
IP address blocks:        154.215.188.0/24 maxlen: 24
                          154.215.189.0/24 maxlen: 24
                          154.215.190.0/24 maxlen: 24
                          154.215.191.0/24 maxlen: 24
                          154.221.128.0/24 maxlen: 24
                          154.221.129.0/24 maxlen: 24
                          154.221.130.0/24 maxlen: 24
                          154.221.131.0/24 maxlen: 24
                          154.221.132.0/24 maxlen: 24
                          154.221.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123770 (0x1e37a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 26 11:59:16 2026 GMT
            Not After : Aug 25 11:59:16 2029 GMT
        Subject: CN=6a8ed518-eb90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ab:22:cc:35:8f:af:f7:8c:5b:bc:54:11:57:
                    63:c6:c3:66:16:8e:cb:a8:63:ba:16:1d:b7:29:38:
                    54:f8:07:a7:a9:92:e7:76:98:4c:ea:04:55:b1:44:
                    b2:a3:24:99:4f:b4:d7:e7:32:8f:6f:16:bf:f3:ad:
                    0c:b3:1b:0f:59:a5:2f:3d:aa:0b:68:59:ac:61:bf:
                    8a:bc:9a:96:40:e5:23:0a:67:f4:82:53:0c:ee:73:
                    4e:e0:1f:c7:3a:1e:d3:4f:8a:61:8c:27:15:53:93:
                    7d:90:00:f3:e1:81:f8:78:0b:b3:37:25:4d:bd:37:
                    8c:1b:f3:6e:36:8a:fe:1b:3e:38:00:86:cf:01:a0:
                    8f:d6:2d:81:f7:44:78:4c:5e:06:9d:93:bd:16:df:
                    ec:07:e0:31:b8:ec:56:d9:bd:bc:f6:e2:28:be:d5:
                    fc:92:29:b7:90:45:14:e4:52:3d:1c:34:3a:e3:17:
                    34:71:d0:81:a6:1a:72:31:67:29:a4:ed:8a:25:b0:
                    31:1a:22:7d:19:d4:72:c3:03:89:68:f1:fe:06:5f:
                    04:95:a1:f5:5f:b8:f3:5d:28:e3:3d:f0:23:33:0f:
                    13:aa:dc:03:ba:b4:f3:49:7f:ed:e3:50:05:95:be:
                    d1:3d:56:4d:7f:8f:47:5c:fe:3f:0f:ad:68:bf:04:
                    a8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CB:B1:B3:A2:29:BA:86:AE:EE:0C:19:C9:FD:6E:20:E5:37:6F:CA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92086C42A14511F1AB2670F8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.215.188.0/22
                  154.221.128.0-154.221.133.255

    Signature Algorithm: sha256WithRSAEncryption
         86:e1:a5:95:c8:82:bd:fe:e9:bd:08:eb:27:59:cb:70:aa:0e:
         7c:cb:fd:4c:70:64:a8:9f:09:6c:75:e9:f3:13:34:de:1d:a9:
         2f:37:08:cd:98:dd:ef:c9:5f:c8:32:b0:66:f3:39:79:66:a5:
         0d:20:28:8b:21:6f:49:79:6f:c6:b1:24:af:ff:0a:1f:61:8a:
         43:4c:55:b1:2f:cb:6c:d0:80:44:c4:cb:0e:36:78:aa:ba:08:
         d5:23:0f:aa:04:ed:52:c6:2c:6b:39:b1:5a:c7:18:36:d5:f9:
         f5:4f:fe:b5:fc:09:25:03:99:e7:ac:24:93:c5:dc:e1:53:59:
         37:22:57:9e:d1:06:de:1d:6b:30:92:89:a8:26:37:0d:b0:b0:
         b3:8d:36:e1:22:b3:98:38:5f:2b:f6:61:ae:7b:82:4a:9d:68:
         99:d8:41:2d:4d:0d:03:a2:cb:25:99:05:80:34:2d:f6:0f:20:
         8b:ac:9b:cc:6f:83:56:e4:13:c6:72:9c:06:85:98:42:1a:dc:
         e5:65:d8:02:af:83:8d:af:4c:2f:5b:45:a7:86:67:f9:2f:f5:
         9d:a9:22:77:e9:61:85:17:4a:42:03:f3:1c:25:a2:2c:66:f5:
         48:c0:ca:19:e4:3d:16:aa:fc:58:94:82:1b:eb:ec:3b:f1:4d:
         0a:e2:29:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----