Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3541BA6963A11F18A66D7C1CE1D38B0.roa
File:                     A3541BA6963A11F18A66D7C1CE1D38B0.roa (raw, json)
Hash identifier:          sJ/3uz28ZtcJAGT6t/jgp9qQ9Caj/WlYy7vBq55jnlk=
Subject key identifier:   70:6C:8B:48:76:73:0E:DA:BF:50:1B:11:F1:F6:80:2C:93:AC:D9:69
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DE75
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3541BA6963A11F18A66D7C1CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 10:43:22 +0000
ROA not before:           Wed 12 Aug 2026 10:43:18 +0000
ROA not after:            Sun 12 Aug 2029 10:43:18 +0000
asID:                     17561
IP address blocks:        154.212.40.0/24 maxlen: 24
                          154.212.41.0/24 maxlen: 24
                          154.212.42.0/24 maxlen: 24
                          154.212.43.0/24 maxlen: 24
                          154.212.44.0/24 maxlen: 24
                          154.212.45.0/24 maxlen: 24
                          154.212.46.0/24 maxlen: 24
                          154.212.47.0/24 maxlen: 24
                          154.212.48.0/24 maxlen: 24
                          154.212.49.0/24 maxlen: 24
                          154.212.50.0/24 maxlen: 24
                          154.212.51.0/24 maxlen: 24
                          154.212.52.0/24 maxlen: 24
                          154.212.53.0/24 maxlen: 24
                          154.212.54.0/24 maxlen: 24
                          154.212.55.0/24 maxlen: 24
                          154.212.56.0/24 maxlen: 24
                          154.212.57.0/24 maxlen: 24
                          154.212.58.0/24 maxlen: 24
                          154.212.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122485 (0x1de75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 12 10:43:18 2026 GMT
            Not After : Aug 12 10:43:18 2029 GMT
        Subject: CN=6a7c4e4a-a3fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:20:f1:ff:2f:65:9b:c8:35:45:a7:d5:e2:80:
                    ed:77:70:80:c3:4b:14:0c:10:30:b9:58:04:28:b9:
                    66:3a:b9:7f:c1:cd:7f:e9:89:7e:e5:27:0c:68:0a:
                    8c:45:60:04:3a:92:92:a3:68:f0:1b:eb:3f:d5:61:
                    02:d7:9f:dc:27:08:9b:a3:40:bf:51:a8:77:f0:c9:
                    ce:4c:7c:8f:2d:83:49:6e:7d:6d:fc:24:74:d5:d2:
                    94:85:7b:ac:1b:8b:06:52:84:76:f3:fd:40:55:37:
                    bb:e7:69:08:a0:c9:7f:36:9f:02:c1:1d:58:ef:53:
                    a6:8a:81:8d:df:66:73:b5:39:73:da:db:82:38:cc:
                    e1:81:7a:87:08:c8:42:3c:54:74:fb:62:bd:93:54:
                    c9:38:72:47:b5:40:17:11:44:4e:4b:93:b3:9b:50:
                    20:b2:95:fc:70:73:dc:5d:9b:0b:4e:ca:24:77:db:
                    47:22:b6:b2:5d:8f:0a:3e:3a:fb:fe:26:47:e4:0e:
                    7c:d2:bb:2f:56:45:95:15:65:cf:db:d6:3a:01:ec:
                    78:f6:99:f4:61:38:c9:35:4b:38:ca:bf:27:a2:21:
                    6e:07:2f:ba:66:1b:61:1a:37:e6:5c:8c:44:60:93:
                    da:c7:15:72:9c:fe:df:6e:0d:91:d8:b4:d7:7c:6c:
                    05:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6C:8B:48:76:73:0E:DA:BF:50:1B:11:F1:F6:80:2C:93:AC:D9:69
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3541BA6963A11F18A66D7C1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.212.40.0-154.212.59.255

    Signature Algorithm: sha256WithRSAEncryption
         5b:87:c0:ed:b7:81:b6:ed:0e:18:bb:43:0b:59:45:73:1d:eb:
         0b:74:74:6f:23:c6:62:bc:0e:7c:7f:57:ae:2f:e8:73:0a:4b:
         ff:a1:d9:af:33:73:0f:07:58:21:0f:4d:f0:6e:38:09:39:a3:
         56:f9:8e:a0:e6:3c:60:a3:fa:00:ce:f0:b3:64:50:66:09:cc:
         ca:5b:88:57:be:75:71:b6:a7:10:7c:be:88:49:76:e9:2a:f4:
         32:8f:0b:66:73:12:c6:0d:97:cd:8d:45:46:63:d6:7a:98:59:
         e2:95:8d:d3:c0:01:79:73:d0:88:37:5a:b1:d9:31:68:15:dc:
         98:a1:89:94:e8:6d:ae:3b:76:e6:fe:a1:31:0e:c8:d3:38:71:
         9c:dd:c1:63:38:91:9b:71:f6:9a:81:3e:b7:f4:cc:be:7b:fd:
         8b:91:90:2d:32:d9:bb:3b:ea:3e:79:85:89:26:4e:76:9c:8a:
         bb:93:0f:73:1c:4f:89:18:cc:5e:9a:4a:21:cb:80:bb:0c:25:
         05:08:a8:87:39:40:21:ea:0e:aa:46:2e:7f:5d:49:40:8c:82:
         c6:00:f6:85:aa:78:93:5f:90:41:1d:97:81:c2:cd:c2:af:7d:
         c3:9b:82:26:89:51:7a:2c:11:a2:f8:71:99:1f:d7:1a:8a:f8:
         ac:75:7d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----