Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C62DEE24933B11F18A7FD81ACF1D38B0.roa
File:                     C62DEE24933B11F18A7FD81ACF1D38B0.roa (raw, json)
Hash identifier:          3T8LxYYm84jXe7RXUZZZwh0OPG+9orc/Oo7IKEHPE+4=
Subject key identifier:   A6:F5:A5:55:E4:3D:8B:EC:AA:38:68:3B:72:43:3A:35:3F:55:E1:25
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DD94
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C62DEE24933B11F18A7FD81ACF1D38B0.roa
Signing time:             Sat 08 Aug 2026 15:13:57 +0000
ROA not before:           Sat 08 Aug 2026 15:13:52 +0000
ROA not after:            Mon 14 Sep 2026 15:13:52 +0000
asID:                     135377
IP address blocks:        154.81.12.0/24 maxlen: 24
                          154.81.13.0/24 maxlen: 24
                          154.81.14.0/24 maxlen: 24
                          154.81.15.0/24 maxlen: 24
                          154.82.21.0/24 maxlen: 24
                          154.83.196.0/24 maxlen: 24
                          154.83.197.0/24 maxlen: 24
                          154.83.198.0/24 maxlen: 24
                          154.83.199.0/24 maxlen: 24
                          154.85.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 12:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122260 (0x1dd94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug  8 15:13:52 2026 GMT
            Not After : Sep 14 15:13:52 2026 GMT
        Subject: CN=6a7747b4-3081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1c:e5:70:c5:1d:37:44:b8:3d:d0:9e:af:3b:
                    f9:0f:48:8d:51:01:20:55:bb:e1:4a:5c:96:d2:67:
                    ab:3a:20:f6:37:28:cd:79:c9:1d:95:c0:e4:d2:52:
                    03:58:92:8a:eb:3d:39:30:3f:28:81:af:a1:fd:58:
                    40:39:23:20:c5:de:e8:c1:d6:54:57:58:91:45:6f:
                    3e:d3:95:24:f8:42:43:da:3b:44:ef:ce:a1:5e:b0:
                    48:81:85:f0:0c:09:4d:04:c9:1d:83:f5:84:1a:40:
                    99:6c:d6:d2:cf:65:14:a6:08:09:b9:80:a7:8b:17:
                    28:31:ba:f1:44:10:12:16:49:cf:bf:2d:e0:9c:82:
                    93:3f:5f:b0:9c:1d:eb:37:6c:52:1e:36:a5:55:27:
                    60:10:09:e1:0f:e1:e2:c1:52:26:a1:7e:89:dc:30:
                    55:40:2b:c0:6d:8e:2d:3c:16:de:59:af:dd:ee:c6:
                    92:53:8c:74:12:b2:96:06:95:e6:c6:04:97:0c:41:
                    43:c3:26:e0:5d:aa:05:5a:a2:43:7e:d9:81:e3:c2:
                    f5:2b:d8:23:14:f5:9b:14:ba:dc:78:67:20:63:c0:
                    ac:35:86:ca:83:35:f9:3a:81:0e:d5:43:73:53:13:
                    76:39:93:69:55:9b:a5:6d:84:30:16:bc:c0:fd:63:
                    00:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F5:A5:55:E4:3D:8B:EC:AA:38:68:3B:72:43:3A:35:3F:55:E1:25
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C62DEE24933B11F18A7FD81ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.12.0/22
                  154.82.21.0/24
                  154.83.196.0/22
                  154.85.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:04:56:b0:00:26:08:a7:42:59:1b:31:25:ed:d3:46:b2:d2:
         cd:81:81:17:18:ed:00:e8:b9:49:fb:5a:3f:52:ff:06:19:b9:
         4c:29:51:f3:a6:dd:14:23:e2:d5:fd:fe:b8:79:fb:83:3d:15:
         55:40:2f:29:b1:10:04:35:50:6a:d9:8c:2f:4c:b4:a2:ae:fb:
         71:ee:8c:2d:6e:ba:5e:2d:46:0d:21:13:63:42:7d:0a:5c:cb:
         47:d0:ec:62:a7:05:ca:7d:06:8a:e8:37:6d:52:f1:0b:72:90:
         1f:5e:42:7f:a6:42:85:d2:d9:01:80:2a:81:b7:d6:c0:57:8a:
         0d:03:df:fd:9c:e5:5a:85:76:13:b4:b5:4e:49:59:ea:69:21:
         11:58:9a:56:23:0f:df:37:5a:54:77:75:d5:42:35:3f:c1:59:
         26:01:83:df:6f:19:88:dc:35:f3:11:2e:f3:f7:2a:0a:2d:0e:
         7f:db:34:1e:dd:dd:e8:f4:e8:11:02:6b:f7:a0:f5:e0:75:bb:
         2d:b3:d5:a0:20:b5:4e:d4:e3:c3:08:16:29:38:03:37:ab:59:
         7d:99:56:bc:29:ee:bd:03:d7:da:e6:cc:44:f4:70:8f:7e:bc:
         18:3f:08:d6:80:a9:56:2a:c6:11:45:5d:7f:1e:c0:4e:cf:4e:
         6d:29:47:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----