Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94C0408E963911F1B83FAFBDCE1D38B0.roa
File:                     94C0408E963911F1B83FAFBDCE1D38B0.roa (raw, json)
Hash identifier:          YHRuNlGKoWHR4iXeQldELFehi4HSC3pVRjsVrYfVi68=
Subject key identifier:   83:10:1A:E8:DF:10:A3:9A:A3:FE:B2:32:61:9A:68:7E:18:35:FA:84
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DE71
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94C0408E963911F1B83FAFBDCE1D38B0.roa
Signing time:             Wed 12 Aug 2026 10:35:48 +0000
ROA not before:           Wed 12 Aug 2026 10:35:44 +0000
ROA not after:            Sun 12 Aug 2029 10:35:44 +0000
asID:                     17561
IP address blocks:        154.212.16.0/24 maxlen: 24
                          154.212.17.0/24 maxlen: 24
                          154.212.18.0/24 maxlen: 24
                          154.212.19.0/24 maxlen: 24
                          154.212.20.0/24 maxlen: 24
                          154.212.21.0/24 maxlen: 24
                          154.212.22.0/24 maxlen: 24
                          154.212.23.0/24 maxlen: 24
                          154.212.24.0/24 maxlen: 24
                          154.212.25.0/24 maxlen: 24
                          154.212.26.0/24 maxlen: 24
                          154.212.27.0/24 maxlen: 24
                          154.212.32.0/24 maxlen: 24
                          154.212.33.0/24 maxlen: 24
                          154.212.34.0/24 maxlen: 24
                          154.212.35.0/24 maxlen: 24
                          154.212.36.0/24 maxlen: 24
                          154.212.37.0/24 maxlen: 24
                          154.212.38.0/24 maxlen: 24
                          154.212.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122481 (0x1de71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 12 10:35:44 2026 GMT
            Not After : Aug 12 10:35:44 2029 GMT
        Subject: CN=6a7c4c84-8050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:68:f6:15:9f:da:14:59:56:7c:cd:45:71:cd:
                    3c:91:c0:13:77:5c:7b:39:2f:d0:0d:45:f8:eb:2e:
                    68:26:28:7d:5c:12:6c:0a:7c:02:5f:41:d0:61:a8:
                    88:6c:3e:9c:71:62:e8:6c:c5:c5:4a:7d:52:3c:60:
                    e9:56:18:a8:10:d8:84:bc:55:11:7e:60:e0:d8:78:
                    75:a3:9d:07:94:ca:f7:e9:34:f1:1d:1e:c6:f1:89:
                    37:92:81:81:c3:d9:1e:ac:a7:c0:35:37:0b:77:77:
                    37:2c:79:23:9a:43:db:29:d2:f6:70:4a:6c:ae:88:
                    be:bb:44:51:ee:bf:aa:8d:5f:a4:2d:67:18:33:e9:
                    48:35:8b:e6:8f:d8:65:6b:8d:32:7f:6c:81:07:fc:
                    ec:e1:54:66:a0:83:66:6e:d0:65:a0:88:4b:41:e9:
                    66:e1:bf:c4:96:74:a9:18:51:40:37:3b:b8:6e:e5:
                    83:8b:03:92:f3:02:a1:db:e1:b8:1c:c4:46:cb:47:
                    17:17:b2:84:01:41:d8:ff:85:7b:0d:fd:cc:d9:14:
                    d3:48:c0:ec:54:39:d2:af:52:9f:67:bc:cc:d7:8f:
                    33:19:90:25:85:cf:51:0a:f2:78:99:74:fe:f7:9a:
                    8a:89:be:2d:22:8e:f2:fb:a1:f4:4b:9b:01:03:02:
                    b8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:10:1A:E8:DF:10:A3:9A:A3:FE:B2:32:61:9A:68:7E:18:35:FA:84
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94C0408E963911F1B83FAFBDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.212.16.0-154.212.27.255
                  154.212.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c4:cf:62:fb:fd:45:4d:2a:bd:c9:61:10:00:52:d7:c2:30:00:
         7b:70:9f:93:4e:54:c9:55:58:1c:f1:66:10:6e:76:bd:0c:16:
         e8:78:88:06:71:bb:ec:a4:9c:94:22:94:d9:ba:bd:a1:b9:5d:
         83:73:d9:12:2d:54:10:ac:7f:89:f9:c5:59:8c:d8:32:31:b3:
         6d:3b:ee:8e:2f:fd:97:9e:aa:b5:e8:ba:a9:12:10:f7:ad:1c:
         e2:26:e4:99:7d:86:d4:f2:42:80:01:47:8b:ad:d9:ed:b2:26:
         ac:cd:9c:35:ac:40:66:f2:be:25:54:5f:32:a4:97:11:a9:33:
         e4:a3:6a:29:81:36:b3:54:9e:ed:a6:15:ae:7d:e8:9f:8c:de:
         94:90:58:70:7a:d6:e6:ea:2a:f1:57:07:ec:bc:e0:f8:22:02:
         81:4d:a9:0d:06:81:63:bc:c0:3c:30:38:30:7d:2f:f2:b2:65:
         56:ff:c5:7a:c4:f6:3e:63:ee:c6:ae:39:58:88:4c:65:60:f0:
         72:13:5a:bb:bb:ce:e0:de:0d:e3:4e:8c:6e:45:c0:f7:f0:ae:
         40:d1:5f:74:5a:d3:7d:66:58:3f:7e:70:7e:eb:dd:cf:44:7a:
         3a:9d:27:76:ff:de:e1:28:32:e7:eb:fa:1e:c6:5e:78:62:43:
         f9:76:7c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----