Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A306F7E49CD511F19018C7C7CE1D38B0.roa
File:                     A306F7E49CD511F19018C7C7CE1D38B0.roa (raw, json)
Hash identifier:          6vYnGlFiGOE8eux1v53oCaK1SeqKpEr78ds0qZ8m9eU=
Subject key identifier:   92:01:0D:A0:41:FD:6E:71:5B:91:52:BD:28:04:68:D4:C0:25:45:D3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E0F6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A306F7E49CD511F19018C7C7CE1D38B0.roa
Signing time:             Thu 20 Aug 2026 20:28:00 +0000
ROA not before:           Thu 20 Aug 2026 20:27:56 +0000
ROA not after:            Sat 10 Oct 2026 20:27:56 +0000
asID:                     395793
IP address blocks:        154.194.208.0/22 maxlen: 24
                          154.194.212.0/23 maxlen: 24
                          154.196.208.0/24 maxlen: 24
                          154.196.209.0/24 maxlen: 24
                          154.196.210.0/24 maxlen: 24
                          154.196.211.0/24 maxlen: 24
                          154.196.212.0/24 maxlen: 24
                          154.200.55.0/24 maxlen: 24
                          154.200.56.0/22 maxlen: 24
                          154.200.56.0/24 maxlen: 24
                          154.200.57.0/24 maxlen: 24
                          154.200.58.0/24 maxlen: 24
                          154.200.59.0/24 maxlen: 24
                          154.200.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 00:07:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123126 (0x1e0f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 20:27:56 2026 GMT
            Not After : Oct 10 20:27:56 2026 GMT
        Subject: CN=6a876350-48f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ee:cf:7c:a5:eb:e0:84:8f:f5:7e:0c:04:ba:
                    68:ff:19:48:e5:7c:3b:78:04:35:f6:25:ca:d8:17:
                    9f:44:34:b9:63:af:85:4d:15:7f:28:f9:a2:e3:ff:
                    dc:67:34:9c:fb:bd:3e:e2:e8:1a:f9:40:8b:88:28:
                    67:5d:16:8b:0d:ec:09:67:6a:39:aa:02:50:11:05:
                    f8:e4:c9:a7:09:18:64:43:bb:17:f7:c3:96:b5:17:
                    3b:a8:d6:7f:b8:bd:d7:46:52:a0:1a:9b:83:2b:a2:
                    16:1c:52:29:4d:7e:f0:3b:b7:e8:fd:4a:ad:63:f6:
                    15:a8:a3:21:b4:a9:5a:6e:77:cd:33:37:9c:55:26:
                    57:cd:15:73:8d:30:8d:9b:a5:d5:e1:9e:eb:55:ff:
                    d1:b5:ae:eb:c9:be:6f:40:70:2d:b7:a0:63:55:a0:
                    48:cd:63:22:32:b6:38:99:48:28:f1:b0:4c:b6:02:
                    51:93:77:85:c1:dd:ad:86:cb:71:e4:70:c4:39:3e:
                    3d:1d:52:dd:d0:bb:e9:e6:8f:97:ee:23:9e:b0:8f:
                    79:53:98:7c:21:01:2e:91:bd:04:45:3b:e3:c6:89:
                    dd:8d:1e:0c:6b:c7:60:9c:59:41:73:98:6a:58:af:
                    62:1a:36:b1:93:31:e3:78:fb:f2:a1:f9:f5:8b:ad:
                    9b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:01:0D:A0:41:FD:6E:71:5B:91:52:BD:28:04:68:D4:C0:25:45:D3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A306F7E49CD511F19018C7C7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.208.0-154.194.213.255
                  154.196.208.0-154.196.212.255
                  154.200.55.0-154.200.59.255
                  154.200.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:1f:04:4d:81:a9:6e:a1:e7:41:5b:04:0e:e8:03:e8:60:10:
         3a:c8:c8:f9:45:8f:d3:a4:24:0f:1e:c4:bb:f2:5e:26:55:68:
         24:f3:e9:25:eb:e0:fb:32:3b:b4:f1:a5:1e:0a:e8:8d:87:f1:
         d5:38:b5:a3:5f:ee:a3:38:87:21:4c:15:ed:6a:df:a8:48:82:
         01:20:a5:42:3d:a6:0f:91:6f:9e:61:ac:4c:b5:d9:41:60:5d:
         ec:59:7d:86:73:c0:82:8b:13:6e:14:7a:4e:2d:ee:db:71:8f:
         ec:b9:da:22:f4:a2:6e:a7:c9:b0:a7:d3:13:b5:50:61:fa:93:
         cc:6b:70:80:bd:72:87:48:41:38:a8:67:84:28:e3:ec:f9:35:
         93:52:3d:25:7f:38:92:da:23:cf:98:47:5b:17:13:82:14:3b:
         e7:18:cc:59:1c:7e:07:8e:5b:6f:d9:18:70:82:79:2a:84:75:
         9a:61:9a:64:18:59:7f:2b:95:62:0c:80:84:1d:41:0f:9a:93:
         45:b1:df:72:4d:73:22:dd:72:3b:7f:da:3d:4f:d2:8b:7c:45:
         8d:94:18:ac:95:5e:25:9c:08:af:10:9b:5e:90:1f:74:ae:3f:
         42:f5:a4:34:35:1e:f4:18:e7:54:98:a8:43:9f:d5:db:35:7d:
         db:77:53:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----