Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C65F8A40965311F19295AFD9CE1D38B0.roa
File:                     C65F8A40965311F19295AFD9CE1D38B0.roa (raw, json)
Hash identifier:          K1Lub+pn8zF7KvauxZAw/RaaiDXh4heJUalMQ13WIKo=
Subject key identifier:   5B:84:04:0F:BB:00:4D:35:A7:6C:58:2B:E9:D6:3E:84:5F:B0:8D:3B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DEB4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C65F8A40965311F19295AFD9CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 13:43:18 +0000
ROA not before:           Wed 12 Aug 2026 13:43:14 +0000
ROA not after:            Sun 12 Aug 2029 13:43:14 +0000
asID:                     17561
IP address blocks:        154.219.52.0/24 maxlen: 24
                          154.219.53.0/24 maxlen: 24
                          154.219.54.0/24 maxlen: 24
                          154.219.55.0/24 maxlen: 24
                          154.219.56.0/24 maxlen: 24
                          154.219.57.0/24 maxlen: 24
                          154.219.58.0/24 maxlen: 24
                          154.219.59.0/24 maxlen: 24
                          154.219.60.0/24 maxlen: 24
                          154.219.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122548 (0x1deb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 12 13:43:14 2026 GMT
            Not After : Aug 12 13:43:14 2029 GMT
        Subject: CN=6a7c7876-0f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7c:85:7a:86:1a:ce:85:f9:e6:97:48:eb:59:
                    5d:0b:ab:d0:00:32:b9:1f:98:d8:be:df:e5:d0:fc:
                    d0:81:1b:78:4d:0a:1a:f9:fe:de:e6:a8:53:a1:92:
                    69:13:1f:86:e0:3f:59:69:4e:c4:5f:27:20:16:53:
                    8f:a8:be:d2:f1:9d:cb:a6:f2:bc:80:d6:53:4d:c4:
                    d0:a3:8c:d6:ae:14:43:54:9b:ed:19:8c:56:38:8d:
                    39:ce:2b:84:e7:c0:1c:0e:ed:e7:f0:dc:a6:e6:73:
                    ee:a0:6e:eb:a3:2d:a9:a2:5b:96:e1:b5:d1:76:99:
                    27:1b:fe:93:ad:47:7b:50:ce:bf:74:d8:53:5d:8f:
                    11:2e:1e:09:54:47:5c:8f:2c:90:30:c7:a1:88:ea:
                    80:ea:f6:5d:25:b0:d7:d7:04:e8:d3:c7:dd:96:ae:
                    37:fe:e1:c9:bc:ab:f8:27:c1:aa:3b:25:dd:a2:82:
                    c6:81:ab:a6:13:64:70:dc:9a:8a:5b:dc:78:ce:1a:
                    ce:1c:7f:46:84:9b:c8:cb:f0:53:94:ac:bc:9e:c7:
                    bd:b2:de:15:f8:73:78:f9:5e:38:e9:eb:68:e7:0c:
                    2a:3e:ab:9c:92:52:eb:b8:0e:2a:8a:f2:eb:f8:d1:
                    cf:70:60:ce:9b:7c:4d:2b:db:41:aa:5e:ee:ad:ac:
                    00:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:84:04:0F:BB:00:4D:35:A7:6C:58:2B:E9:D6:3E:84:5F:B0:8D:3B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C65F8A40965311F19295AFD9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.219.52.0-154.219.61.255

    Signature Algorithm: sha256WithRSAEncryption
         8f:35:3a:87:29:dd:34:de:80:6a:ff:dd:a1:e8:5c:21:46:cd:
         8d:d3:6b:b4:2e:b2:66:80:56:e8:56:e3:70:90:3d:a8:4f:72:
         34:80:0a:0c:65:5a:08:45:05:23:df:dd:97:25:00:c4:39:a5:
         6e:44:a7:df:0b:8c:68:49:45:d3:c4:8c:a9:bd:ce:b0:a3:36:
         11:e5:ce:25:1f:57:ad:6c:40:46:89:29:39:37:ec:1a:f8:79:
         e7:12:f9:82:3b:7d:ed:6e:d7:d0:bb:03:f9:af:6c:8c:fd:72:
         05:6a:a2:1d:1c:91:cc:e9:1b:13:5b:7a:ef:f3:c1:a9:aa:ed:
         7a:92:26:c0:57:ae:41:08:b1:ad:a8:96:a0:09:e2:89:1b:e6:
         0a:d7:a2:f3:3d:f7:80:74:55:b0:70:e4:8b:7b:69:32:d2:d0:
         a9:ef:d0:2b:f2:a9:57:69:5c:01:5c:84:3e:d3:38:ca:ac:e6:
         66:22:55:29:f7:03:dc:01:cc:0f:42:57:45:37:a9:1a:74:f1:
         d7:0e:ce:63:dc:c2:4b:f7:1a:1b:93:4b:98:0b:82:05:b0:68:
         e3:90:64:bf:0c:87:6e:f0:b1:9d:b0:d2:93:12:cf:f1:43:4f:
         48:70:a9:eb:09:76:fa:5f:2e:54:c2:30:74:4b:93:00:d6:12:
         dc:ec:e0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----