Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C037759A988F11F186B14AEFCE1D38B0.roa
File:                     C037759A988F11F186B14AEFCE1D38B0.roa (raw, json)
Hash identifier:          Q51P4vJChjJmNcb+mYp5E5c2+sDTXf+56/D5DwbTW/I=
Subject key identifier:   6C:37:E4:30:39:56:50:4B:B0:6B:E3:CC:ED:5F:F7:38:2F:22:8A:2C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DF2F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C037759A988F11F186B14AEFCE1D38B0.roa
Signing time:             Sat 15 Aug 2026 09:57:40 +0000
ROA not before:           Sat 15 Aug 2026 09:57:35 +0000
ROA not after:            Tue 22 Sep 2026 09:57:35 +0000
asID:                     17561
IP address blocks:        154.209.248.0/22 maxlen: 24
                          154.212.8.0/21 maxlen: 24
                          154.212.16.0/21 maxlen: 24
                          154.212.24.0/22 maxlen: 24
                          154.212.140.0/22 maxlen: 24
                          154.212.148.0/22 maxlen: 24
                          154.212.152.0/21 maxlen: 24
                          154.213.160.0/21 maxlen: 24
                          154.213.196.0/22 maxlen: 24
                          154.219.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122671 (0x1df2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 15 09:57:35 2026 GMT
            Not After : Sep 22 09:57:35 2026 GMT
        Subject: CN=6a803814-3818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ac:f8:a5:ce:6c:3e:a1:09:79:cd:34:7c:43:
                    48:5c:6e:ca:95:4c:4b:a0:c2:9d:4c:e7:f8:ad:c8:
                    ec:da:69:d8:a9:56:f7:6a:9c:13:6f:3a:26:be:fb:
                    ff:3a:e4:9b:2f:d6:a1:2a:75:71:52:df:65:0a:8f:
                    ff:4a:87:ef:4e:06:9a:f4:b5:5b:d5:9b:d0:20:5f:
                    6a:2a:c5:76:33:3e:2c:50:eb:96:31:8d:98:db:8a:
                    53:c3:2a:e2:bc:b6:c2:b3:9d:6d:1e:24:ff:f9:05:
                    03:7a:a8:07:04:a1:c2:08:fb:fe:30:0d:17:b1:70:
                    9f:db:4e:5d:9c:6a:6a:98:01:4b:ff:7e:41:ff:ed:
                    90:67:e6:f7:b7:95:29:6a:0f:a1:0b:ce:75:f1:87:
                    80:80:0a:84:ed:2d:7a:ec:eb:76:dc:82:13:57:0d:
                    17:3f:d2:ed:7e:ca:8a:62:d9:bb:c6:94:c4:b0:77:
                    d6:f4:e9:2e:1e:a3:3f:18:65:85:66:ca:b1:08:1b:
                    9d:44:a4:b4:84:63:a6:06:fa:32:cf:58:58:af:97:
                    94:f2:98:4e:fc:4d:78:2c:34:99:cb:74:db:3f:9e:
                    fe:43:8d:3b:73:1d:1b:8d:3e:62:65:c7:cb:2a:0c:
                    29:a6:d3:39:ee:77:73:f2:1f:c3:23:2a:56:e9:a0:
                    b8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:37:E4:30:39:56:50:4B:B0:6B:E3:CC:ED:5F:F7:38:2F:22:8A:2C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C037759A988F11F186B14AEFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.209.248.0/22
                  154.212.8.0-154.212.27.255
                  154.212.140.0/22
                  154.212.148.0-154.212.159.255
                  154.213.160.0/21
                  154.213.196.0/22
                  154.219.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b0:f0:f8:7f:35:e8:85:46:1a:be:a0:ba:19:f8:08:d0:bd:9c:
         f5:1f:81:bd:35:e5:01:85:af:51:04:26:63:91:ac:14:b0:c2:
         9c:04:b7:2f:cb:9b:e1:23:c5:92:45:4b:1e:8a:4a:a6:52:48:
         99:31:65:5f:a2:7a:b9:52:38:15:8c:da:93:f7:26:18:08:37:
         94:f7:8d:b1:44:ed:f6:59:d5:30:2b:d3:92:2e:ac:de:9a:6e:
         93:8a:f1:1d:c0:db:29:6a:2a:ae:7f:fb:64:7d:70:23:09:a9:
         96:da:52:80:78:fc:40:56:fd:7a:05:34:48:5d:13:b5:af:c2:
         b7:19:20:49:e4:79:4f:9a:9f:3b:03:6d:2b:56:85:4b:f1:b8:
         d9:aa:64:40:db:cb:15:35:5d:c6:5a:8c:9b:23:14:80:22:f6:
         56:34:ea:33:01:c8:04:e4:1d:a4:83:10:0b:06:63:c0:00:e5:
         f9:53:37:77:21:e5:38:fe:38:45:17:2e:57:a9:56:6a:a1:3e:
         81:07:c0:fd:72:b7:f3:c5:de:74:f6:8d:1e:fb:96:56:ed:44:
         4a:b7:92:78:0e:e7:7b:94:42:89:1e:c0:21:e9:e3:51:07:cd:
         bc:7c:c7:62:00:d2:f1:37:f1:4b:b0:40:e1:d9:ca:7b:3d:55:
         c6:ae:27:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----