Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3151132AD2011F1BF9733BFCE1D38B0.roa
File:                     C3151132AD2011F1BF9733BFCE1D38B0.roa (raw, json)
Hash identifier:          lAV4DUsA9KLTo6IeGhRrcxEUzOtnPyj7KrElH/KCHU4=
Subject key identifier:   9D:1B:EE:9D:C9:3B:E3:16:D7:A2:2B:E9:62:28:30:5A:1D:ED:51:5C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E745
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3151132AD2011F1BF9733BFCE1D38B0.roa
Signing time:             Thu 10 Sep 2026 14:06:05 +0000
ROA not before:           Thu 10 Sep 2026 14:06:01 +0000
ROA not after:            Mon 21 Sep 2026 14:06:01 +0000
asID:                     18229
IP address blocks:        154.210.163.0/24 maxlen: 24
                          154.210.164.0/24 maxlen: 24
                          154.210.165.0/24 maxlen: 24
                          154.210.166.0/24 maxlen: 24
                          154.210.167.0/24 maxlen: 24
                          154.210.168.0/24 maxlen: 24
                          154.210.169.0/24 maxlen: 24
                          154.210.170.0/24 maxlen: 24
                          154.210.171.0/24 maxlen: 24
                          154.210.172.0/24 maxlen: 24
                          154.210.173.0/24 maxlen: 24
                          154.210.174.0/24 maxlen: 24
                          154.210.175.0/24 maxlen: 24
                          154.210.176.0/24 maxlen: 24
                          154.210.178.0/24 maxlen: 24
                          154.210.179.0/24 maxlen: 24
                          154.210.180.0/24 maxlen: 24
                          154.210.181.0/24 maxlen: 24
                          154.210.182.0/24 maxlen: 24
                          154.210.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 11:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124741 (0x1e745)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 10 14:06:01 2026 GMT
            Not After : Sep 21 14:06:01 2026 GMT
        Subject: CN=6aa2b94d-b0d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e0:eb:b8:16:9b:12:01:f2:4d:22:03:09:26:
                    f4:c4:5f:49:ef:b1:a4:29:d7:f5:3b:5d:28:c0:9b:
                    99:79:4c:b4:c2:dc:69:d0:04:73:99:b1:e7:80:eb:
                    be:51:c0:3e:9c:a6:06:ea:18:97:83:16:4f:24:3b:
                    cc:ca:3f:f3:d0:42:4b:fb:0d:37:ba:5d:5f:56:b5:
                    90:1a:d7:3e:7e:77:4a:11:12:d9:93:c7:6e:49:08:
                    95:ea:a2:4a:1d:04:6e:31:0f:4c:4b:72:40:45:b6:
                    c8:b0:03:6f:94:a6:96:70:2e:a4:f8:96:c0:5f:5b:
                    74:9a:a6:97:68:0a:5d:cf:2e:69:4f:9b:3f:e7:42:
                    2c:09:14:2b:4e:f5:8b:5e:01:f8:8e:59:f6:be:16:
                    b7:ce:c5:19:df:e0:a6:4d:6f:49:de:f7:c4:a0:25:
                    13:37:74:5f:22:d1:c5:6d:c6:ec:5e:39:15:ed:4d:
                    40:fc:51:63:9a:75:ab:3b:58:2d:05:17:db:9e:95:
                    d1:4f:40:3f:1b:e3:a9:1a:b4:47:7a:e2:3a:98:fe:
                    a5:7b:1f:c9:74:48:37:22:ae:eb:c3:22:ab:f8:e6:
                    48:36:ce:23:06:50:10:b0:1d:04:c5:9c:40:d3:8e:
                    63:3e:56:a0:9e:35:0b:91:58:86:7e:8d:7e:e5:74:
                    ab:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1B:EE:9D:C9:3B:E3:16:D7:A2:2B:E9:62:28:30:5A:1D:ED:51:5C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3151132AD2011F1BF9733BFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.163.0-154.210.176.255
                  154.210.178.0-154.210.183.255

    Signature Algorithm: sha256WithRSAEncryption
         a4:40:54:c6:ba:de:cb:6c:b9:02:81:01:52:c1:f7:c5:e3:31:
         3c:34:34:34:c2:59:cf:68:f2:29:57:7b:83:36:f7:ac:80:26:
         d4:93:da:9f:50:42:c0:b7:01:82:51:c4:06:8a:36:42:e0:41:
         f8:9b:d9:1b:33:8b:0e:da:06:b2:dc:56:41:7d:9a:fc:51:9d:
         b3:4e:48:4b:12:be:fe:fc:8f:0d:3f:bb:63:2f:02:21:36:f3:
         fb:d7:ba:53:5e:0e:0a:45:4c:a1:aa:8d:9c:1e:a0:f5:b6:2a:
         75:26:1d:81:7e:11:c8:2c:03:d2:a1:a5:95:62:b1:2b:72:6d:
         2c:31:3d:fe:ba:a5:a2:17:f5:1d:6e:b1:44:19:00:ef:0e:6c:
         21:ee:66:67:41:7d:23:f5:c3:86:25:31:1c:b8:cc:8d:81:d4:
         d9:62:3a:2a:32:8e:e9:63:ed:c2:07:b5:57:74:76:bf:36:d6:
         32:8c:7b:be:c7:40:13:22:92:5c:7d:5d:04:54:ea:0e:ad:b1:
         d4:eb:df:dd:00:26:0e:3d:6b:36:f7:75:c0:da:32:2a:eb:b8:
         d4:e9:5c:e7:db:df:22:67:b9:af:07:f3:23:e5:d5:50:16:7c:
         3c:be:69:d5:eb:c8:99:f8:de:c0:2e:59:34:0f:ae:2f:35:93:
         71:8d:0e:14
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----