Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC6C8DE09C9B11F1A33E69F2CE1D38B0.roa
File:                     CC6C8DE09C9B11F1A33E69F2CE1D38B0.roa (raw, json)
Hash identifier:          AMLbKojfoJJv5ZWtO5Tttrn96TCYwH1oi3Z2Gr8cGu8=
Subject key identifier:   57:35:15:74:58:40:34:B8:45:98:81:33:69:A9:2F:52:55:E8:73:BE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E0BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC6C8DE09C9B11F1A33E69F2CE1D38B0.roa
Signing time:             Thu 20 Aug 2026 13:33:59 +0000
ROA not before:           Thu 20 Aug 2026 13:33:55 +0000
ROA not after:            Sat 26 Sep 2026 13:33:55 +0000
asID:                     63139
IP address blocks:        154.93.64.0/24 maxlen: 24
                          154.93.65.0/24 maxlen: 24
                          154.93.66.0/24 maxlen: 24
                          154.94.91.0/24 maxlen: 24
                          154.94.122.0/24 maxlen: 24
                          154.94.123.0/24 maxlen: 24
                          154.94.124.0/24 maxlen: 24
                          154.94.125.0/24 maxlen: 24
                          154.94.126.0/24 maxlen: 24
                          154.94.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123068 (0x1e0bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 13:33:55 2026 GMT
            Not After : Sep 26 13:33:55 2026 GMT
        Subject: CN=6a870247-4724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1d:56:55:34:84:1e:c9:34:b5:78:05:04:11:
                    e1:3a:82:dc:c5:aa:17:8f:ee:52:6e:19:16:d1:eb:
                    5c:46:8c:ae:8e:36:30:7b:a0:28:19:23:11:fc:20:
                    fb:db:8b:5c:d7:89:12:dd:d5:be:69:a3:60:30:5b:
                    b1:37:a6:a5:53:3f:15:53:2e:87:2f:68:af:42:58:
                    25:bd:58:68:94:d7:ae:aa:81:46:03:dc:cf:fe:04:
                    09:83:09:9f:15:9d:c3:a8:22:ea:7d:bd:e9:0e:c8:
                    e6:af:ee:68:dd:6f:d5:08:50:a5:68:2b:b2:1f:a2:
                    96:97:05:97:24:e4:b7:d5:30:b0:ec:58:2d:15:ce:
                    d1:77:d2:60:d3:60:e1:7a:28:f3:c9:b7:ec:f3:0d:
                    62:68:b4:7c:88:f8:43:c0:43:b3:b7:98:dd:8a:ab:
                    bc:2e:6a:5e:ec:a8:59:d7:9b:f2:ec:22:89:d4:20:
                    28:2b:57:82:b6:8f:52:32:6c:37:13:e9:6e:2a:7a:
                    26:3c:4b:6f:c1:4d:ba:4c:04:33:ca:ec:81:ad:e6:
                    7b:02:d1:df:28:ec:a3:6b:cb:76:af:fe:45:01:2f:
                    c8:eb:b1:22:dc:6d:28:b1:c0:01:7d:82:c2:20:e9:
                    fe:8e:f3:74:ab:b9:f3:fe:96:b1:32:0f:64:35:bc:
                    a2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:35:15:74:58:40:34:B8:45:98:81:33:69:A9:2F:52:55:E8:73:BE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC6C8DE09C9B11F1A33E69F2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.93.64.0-154.93.66.255
                  154.94.91.0/24
                  154.94.122.0-154.94.127.255

    Signature Algorithm: sha256WithRSAEncryption
         52:4a:bd:be:ae:a9:61:ea:b5:ce:78:56:92:26:90:1b:63:67:
         60:f1:f0:f1:d2:d9:90:1f:1b:ab:8e:ae:ab:35:aa:8a:7a:ca:
         a8:59:e6:95:c0:9a:c0:73:38:08:8a:8b:0b:b9:5b:8f:ca:12:
         30:92:45:37:1c:5f:e6:52:6c:9b:52:05:20:80:2e:fd:50:e4:
         8c:91:a9:f8:a8:65:cc:96:39:27:10:84:69:db:1e:26:d1:08:
         0a:0d:51:f0:91:7e:dc:15:51:10:74:57:84:b0:66:50:99:1f:
         ad:b9:b8:4d:ec:65:72:2f:c7:fb:25:dd:9b:99:b8:07:04:98:
         6e:fd:d9:74:e7:38:82:45:34:77:af:16:b0:7f:5f:48:d9:27:
         af:30:30:f7:54:65:00:34:06:6f:b3:9b:2c:f4:9c:e4:03:7a:
         0c:e1:f7:0a:a7:a3:9f:ae:ea:b7:dc:fe:2f:28:b0:a0:a6:89:
         d2:0c:0d:4d:a4:f2:0b:8e:29:d2:8c:f3:1f:f9:9c:bb:1a:03:
         4c:2c:56:c7:21:d1:5b:dd:e0:ab:f8:71:8b:63:d4:93:23:62:
         2a:26:e7:f6:f0:23:da:5c:d5:d2:66:b2:62:97:0d:7b:80:5c:
         fc:ed:e8:9f:18:29:c3:55:2f:e7:23:87:b0:81:13:be:77:d4:
         29:40:2f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----