Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAD8D072AB8611F193DC3C08CF1D38B0.roa
File:                     AAD8D072AB8611F193DC3C08CF1D38B0.roa (raw, json)
Hash identifier:          vRhefirdf80n/JWD2IT2bH1pbZLzygVigMGPHELT04M=
Subject key identifier:   BD:D8:EE:2E:3C:68:22:AB:50:F2:0D:FA:CC:E4:86:CD:6A:4D:5B:F8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E674
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAD8D072AB8611F193DC3C08CF1D38B0.roa
Signing time:             Tue 08 Sep 2026 13:10:31 +0000
ROA not before:           Tue 08 Sep 2026 13:10:27 +0000
ROA not after:            Wed 04 Nov 2026 13:10:27 +0000
asID:                     32043
IP address blocks:        154.193.99.0/24 maxlen: 24
                          154.193.100.0/22 maxlen: 24
                          154.193.104.0/22 maxlen: 24
                          154.193.108.0/23 maxlen: 24
                          154.193.110.0/24 maxlen: 24
                          154.200.55.0/24 maxlen: 24
                          154.200.56.0/24 maxlen: 24
                          154.200.57.0/24 maxlen: 24
                          154.200.58.0/24 maxlen: 24
                          154.200.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 10 Sep 2026 13:25:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124532 (0x1e674)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  8 13:10:27 2026 GMT
            Not After : Nov  4 13:10:27 2026 GMT
        Subject: CN=6aa00947-1d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e6:59:10:a4:46:70:d3:9a:18:18:5a:de:e1:
                    39:10:c4:0e:ab:51:43:4e:a5:38:84:9a:d0:9d:f5:
                    56:0d:6c:92:8d:08:a4:b7:fd:6d:c0:5b:c7:0e:27:
                    f0:43:03:20:33:1e:01:d4:5d:00:bd:09:d1:a9:96:
                    3d:ae:1f:94:3b:cd:65:e5:04:65:0c:b9:22:6c:40:
                    15:ad:3d:b7:a5:ae:7b:d4:97:2c:ef:aa:9e:ee:39:
                    b5:c2:00:4c:d7:7a:21:d1:f0:36:d9:17:b7:ea:a0:
                    4e:35:96:09:37:7f:0e:18:ef:67:a1:f3:33:59:96:
                    d6:c9:33:df:2f:7f:70:f2:56:52:54:c0:8d:1a:7f:
                    e7:10:46:9e:12:5a:d4:5a:e3:93:29:4f:e5:b6:21:
                    a7:20:89:d2:3b:29:75:a6:84:02:18:33:80:9b:30:
                    be:26:f9:1e:fa:12:85:33:b7:5a:ae:d9:fd:91:24:
                    7c:de:c5:b2:da:2b:c3:f9:49:35:35:2c:43:7b:f6:
                    23:77:7f:fc:7a:9b:a6:c0:d8:f8:90:66:4b:97:8f:
                    01:5a:23:10:17:88:53:75:11:63:98:d2:0f:ff:f2:
                    71:a0:cb:81:43:8f:ab:b2:c4:b3:32:34:cd:a2:27:
                    79:7b:a1:9e:a5:5c:cf:af:15:5f:24:06:7b:70:ba:
                    f4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D8:EE:2E:3C:68:22:AB:50:F2:0D:FA:CC:E4:86:CD:6A:4D:5B:F8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAD8D072AB8611F193DC3C08CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.99.0-154.193.110.255
                  154.200.55.0-154.200.59.255

    Signature Algorithm: sha256WithRSAEncryption
         b0:62:ff:d3:0c:f2:a8:59:9e:c9:68:78:ce:fe:1e:98:f5:15:
         13:87:c9:05:28:87:b3:e6:eb:33:e6:8c:38:b4:33:44:d8:f5:
         0f:d9:74:e4:55:29:df:e1:22:25:22:f8:c6:61:3c:1b:fe:6c:
         a3:3d:a5:7c:9b:b0:da:b5:09:c9:03:91:e7:ab:f2:b5:33:ad:
         8c:8d:07:7f:05:99:a9:f4:0b:b3:86:73:5b:95:2b:d9:ae:6a:
         a2:bd:07:de:d1:62:7f:cf:5f:84:17:61:93:48:4d:e8:f7:74:
         52:68:98:11:cf:ba:99:62:29:c1:18:96:49:ec:77:1a:1d:0e:
         41:63:08:98:ac:4d:65:50:5a:62:b7:e6:9a:41:ca:79:bd:f3:
         83:fb:24:3f:8e:14:27:01:2d:9a:06:f0:89:5a:6d:de:b3:3d:
         ba:7d:6b:a9:c1:a9:de:38:45:c2:76:1f:5e:c2:af:9e:ff:ed:
         30:48:78:58:89:ab:50:54:30:23:26:0e:5e:cd:3f:ae:06:d5:
         ee:1e:ec:2e:42:65:03:37:48:a7:fc:42:89:2e:74:1d:fa:5b:
         65:90:9d:54:fe:f5:7d:5f:eb:d2:5e:1b:f4:d6:1f:d3:5b:51:
         8d:ea:a2:e1:31:15:9b:b7:22:eb:57:78:87:8b:35:15:78:6b:
         3d:54:97:2a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----