Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF05330EA50611F1AE7F54BBCE1D38B0.roa
File:                     CF05330EA50611F1AE7F54BBCE1D38B0.roa (raw, json)
Hash identifier:          N2574PMVA+A8rG0gN/C05YdejP5JgbsawesS7UxcdYI=
Subject key identifier:   1E:B3:99:4A:BD:AF:02:88:A5:5F:A3:B6:3B:E0:9C:1A:9B:4B:D8:47
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E441
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF05330EA50611F1AE7F54BBCE1D38B0.roa
Signing time:             Mon 31 Aug 2026 06:40:09 +0000
ROA not before:           Mon 31 Aug 2026 06:40:05 +0000
ROA not after:            Fri 11 Sep 2026 06:40:05 +0000
asID:                     11427
IP address blocks:        154.82.28.0/22 maxlen: 24
                          154.85.100.0/22 maxlen: 24
                          154.85.124.0/22 maxlen: 24
                          154.88.32.0/22 maxlen: 24
                          154.90.160.0/21 maxlen: 24
                          154.90.176.0/21 maxlen: 24
                          154.90.192.0/19 maxlen: 24
                          154.94.16.0/20 maxlen: 24
                          154.94.128.0/18 maxlen: 24
                          154.94.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 12:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123969 (0x1e441)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 31 06:40:05 2026 GMT
            Not After : Sep 11 06:40:05 2026 GMT
        Subject: CN=6a9521c9-0963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:dd:5d:38:d0:c3:71:f0:25:07:9a:0f:59:02:
                    6b:7f:30:82:60:99:32:81:ab:36:67:b5:01:84:ce:
                    15:0b:ea:70:5a:74:46:4c:95:64:35:1d:47:6b:d4:
                    41:14:bb:8d:58:dc:a0:7c:54:86:93:22:5f:7e:4e:
                    ce:7b:7c:4a:51:b4:6c:d1:23:f9:96:31:60:9a:db:
                    d5:bd:e0:6c:09:26:b9:88:92:95:0a:6e:00:cb:6f:
                    65:7b:b9:9d:b9:a1:6c:ba:a9:62:4a:f7:b5:73:50:
                    f2:82:ff:ea:60:13:f2:1b:dc:bc:10:aa:f8:11:61:
                    f0:b7:d2:37:6a:44:18:85:11:a1:c5:15:6e:8a:7d:
                    26:44:0e:22:1b:24:e5:d3:95:d4:06:75:4c:ab:bc:
                    2e:27:00:cb:5f:50:f8:ce:3d:3b:af:b7:d5:90:0c:
                    5d:cb:09:07:a5:73:fb:0b:88:f4:7f:57:f9:d9:93:
                    bd:89:90:f1:02:fb:f2:4e:89:31:7d:e8:14:f7:ae:
                    23:d1:62:de:ca:f7:f7:2f:0b:95:95:80:d5:bc:4f:
                    f4:0e:d5:1f:0a:a6:60:d2:07:a7:b6:3c:e1:ca:ff:
                    0a:e7:57:b0:df:00:cc:b1:66:50:c1:5a:2d:44:5a:
                    42:f9:fe:12:15:03:ab:af:b2:f8:dd:67:83:3d:6c:
                    fe:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B3:99:4A:BD:AF:02:88:A5:5F:A3:B6:3B:E0:9C:1A:9B:4B:D8:47
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF05330EA50611F1AE7F54BBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.28.0/22
                  154.85.100.0/22
                  154.85.124.0/22
                  154.88.32.0/22
                  154.90.160.0/21
                  154.90.176.0/21
                  154.90.192.0/19
                  154.94.16.0/20
                  154.94.128.0/18
                  154.94.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         11:0e:47:2a:c4:8b:4b:7b:f1:56:f0:cb:42:b6:9d:a9:9d:f8:
         2a:47:eb:91:9d:25:22:7c:50:bd:dd:e1:51:5d:7d:09:cb:03:
         2c:f0:6d:be:b8:14:f3:70:e8:bd:b6:d9:5e:18:e4:b1:4d:61:
         b1:bc:df:13:48:66:16:8e:5a:87:92:8c:a5:e7:80:11:ab:05:
         da:3d:14:a9:92:c7:1c:99:63:2f:03:b8:11:da:45:19:5d:f5:
         3d:ff:99:80:a9:75:4e:86:4e:e2:ea:6c:12:5d:8b:b9:13:01:
         0d:c5:54:b4:a2:22:cc:69:35:93:e2:48:b8:75:e4:1f:48:98:
         85:12:2f:8c:24:00:7e:1e:07:6e:ed:c9:34:7f:96:62:b8:74:
         31:d1:e4:1e:81:87:84:9f:f1:35:e5:fa:67:8b:c1:75:8c:75:
         51:e1:41:14:8b:5a:7f:e0:57:da:7f:36:71:63:0b:52:da:c1:
         8e:86:e8:7f:ca:7b:5b:d7:21:98:90:c7:fa:8d:9a:81:ec:a8:
         ac:3c:3b:8c:1b:3c:a2:f2:31:ac:fc:13:0e:bc:5f:c5:99:74:
         bd:25:b4:b7:7a:d8:51:ab:5b:90:90:70:56:15:e0:08:f2:42:
         7c:e9:59:28:19:fe:bf:46:7f:c0:6e:c9:58:2c:db:48:92:1b:
         ee:9f:ed:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----