Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B94077C2970F11F1BD635DD4CE1D38B0.roa
File:                     B94077C2970F11F1BD635DD4CE1D38B0.roa (raw, json)
Hash identifier:          FBaPoOk2I9LVQAb8pWw5bUsUXfv7bIvcjGikunanoCs=
Subject key identifier:   D9:E8:75:DB:72:C1:BE:21:6A:99:DF:ED:80:43:19:BF:47:C8:7A:21
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DF03
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B94077C2970F11F1BD635DD4CE1D38B0.roa
Signing time:             Thu 13 Aug 2026 12:08:42 +0000
ROA not before:           Thu 13 Aug 2026 12:08:38 +0000
ROA not after:            Sun 13 Sep 2026 12:08:38 +0000
asID:                     17497
IP address blocks:        154.196.184.0/21 maxlen: 24
                          154.211.128.0/19 maxlen: 24
                          154.222.128.0/22 maxlen: 24
                          154.222.128.0/24 maxlen: 24
                          154.222.129.0/24 maxlen: 24
                          154.222.140.0/22 maxlen: 24
                          154.222.140.0/24 maxlen: 24
                          154.222.141.0/24 maxlen: 24
                          154.222.142.0/24 maxlen: 24
                          154.222.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 11 Sep 2026 10:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122627 (0x1df03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 13 12:08:38 2026 GMT
            Not After : Sep 13 12:08:38 2026 GMT
        Subject: CN=6a7db3ca-2720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ab:21:13:49:60:f2:21:72:3b:d3:a2:dc:87:
                    38:b5:54:82:58:07:70:e5:d5:ca:7c:b3:a3:c8:af:
                    86:b7:5c:aa:9a:bb:31:b0:95:cb:23:8e:9f:cd:6f:
                    ce:d2:59:61:b8:63:60:ff:77:cb:ec:99:04:b2:e4:
                    f1:61:15:e9:d3:9e:b3:3b:0e:38:1e:da:df:8f:ab:
                    73:eb:72:e3:a1:80:8f:9f:e3:46:2b:e0:55:6e:6e:
                    06:18:c4:70:b1:54:ee:71:c1:52:5f:2e:0d:dd:eb:
                    8e:12:c0:7f:4e:ea:d8:f5:c4:d1:39:e7:45:d0:b5:
                    47:db:bb:a5:8a:54:f0:95:1c:5b:31:f6:ad:4f:81:
                    b8:95:32:ed:e0:27:39:a9:7f:a1:c2:cd:bf:b6:e0:
                    73:c5:36:c2:ed:08:fd:33:3d:9c:fd:e5:bd:bd:31:
                    fe:a7:7a:e9:b6:e2:f8:07:77:fb:a1:2b:7f:80:bf:
                    d0:66:01:1a:0d:3b:36:3e:ec:57:80:18:f1:a2:c5:
                    25:6e:5b:f6:ff:57:0a:25:73:73:d1:1d:b8:71:d9:
                    52:4b:6b:4b:1d:17:08:da:44:d7:f4:8d:31:c2:aa:
                    f1:c3:6c:f9:99:c5:8e:52:f8:0e:84:ac:de:14:d2:
                    a3:72:d7:e9:0e:79:12:70:b0:6f:91:0a:1a:30:c2:
                    dd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E8:75:DB:72:C1:BE:21:6A:99:DF:ED:80:43:19:BF:47:C8:7A:21
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B94077C2970F11F1BD635DD4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.184.0/21
                  154.211.128.0/19
                  154.222.128.0/22
                  154.222.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:56:9a:7b:df:1a:0b:b7:c3:fa:51:83:72:8e:f8:97:cc:de:
         f2:1e:cc:ce:ea:08:e7:89:17:68:2b:2f:90:3c:62:2e:93:bb:
         73:c0:e4:e4:ce:f8:37:6e:c4:f0:31:46:76:e7:78:f0:72:7e:
         53:ef:6b:47:03:f8:bc:b6:3b:4a:48:d6:a5:92:b1:b2:67:03:
         39:4c:d3:eb:63:44:8d:fc:d1:82:55:97:f8:94:e5:17:91:7f:
         56:70:50:9b:e0:25:af:a0:9b:43:dd:02:b6:2a:23:0a:ad:ef:
         5f:52:2c:15:7f:db:de:66:ec:ca:59:68:1e:cc:82:92:25:22:
         79:9f:48:9d:e4:ec:61:ea:42:45:15:1b:20:03:2c:69:ab:9a:
         ae:57:18:11:94:7b:1a:89:7b:c0:0c:f4:c6:5c:85:d2:af:e3:
         fb:14:d9:02:5c:05:48:7e:3d:b0:5a:33:fb:a3:eb:51:9a:62:
         7d:79:2f:1f:7d:81:1b:1d:0b:d8:0a:a0:5d:3d:3d:2f:92:0f:
         eb:d1:86:f6:7f:cb:b3:4b:90:c6:38:cc:44:ed:34:41:03:35:
         9c:c1:2d:79:0d:0e:e2:ef:8b:81:de:08:8e:4e:97:c9:b3:ed:
         61:e9:90:55:2b:6b:6e:a8:6d:7a:43:a0:3c:26:46:4b:f9:2b:
         e8:a2:41:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----