Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3A8E3B0964C11F184E00EB0CE1D38B0.roa
File:                     D3A8E3B0964C11F184E00EB0CE1D38B0.roa (raw, json)
Hash identifier:          g49VPLheuqerA7JhXFCgfm3rC8gVRmGZzZb30GSiIjA=
Subject key identifier:   12:B3:FF:3E:25:1D:33:0A:23:85:5C:9E:A2:36:03:41:36:44:36:76
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DEA4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3A8E3B0964C11F184E00EB0CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 12:53:34 +0000
ROA not before:           Wed 12 Aug 2026 12:53:30 +0000
ROA not after:            Sun 12 Aug 2029 12:53:30 +0000
asID:                     17561
IP address blocks:        154.209.65.0/24 maxlen: 24
                          154.209.66.0/24 maxlen: 24
                          154.209.67.0/24 maxlen: 24
                          154.209.68.0/24 maxlen: 24
                          154.209.69.0/24 maxlen: 24
                          154.209.70.0/24 maxlen: 24
                          154.209.71.0/24 maxlen: 24
                          154.209.80.0/24 maxlen: 24
                          154.209.81.0/24 maxlen: 24
                          154.209.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122532 (0x1dea4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 12 12:53:30 2026 GMT
            Not After : Aug 12 12:53:30 2029 GMT
        Subject: CN=6a7c6cce-442a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0f:6e:17:84:69:48:53:60:51:a1:35:5d:10:
                    44:ce:32:6b:e3:b8:52:dc:de:cc:14:f4:e4:88:7e:
                    ad:60:ab:89:69:7d:41:a2:bf:90:6a:9b:db:f2:b7:
                    85:d4:b8:b5:99:6b:6f:16:c0:3a:2e:82:96:35:2b:
                    9f:7f:3f:41:02:f6:89:a0:48:d8:68:5a:87:be:fe:
                    7c:e0:fd:3e:d4:f2:14:f3:27:8e:3e:ee:4f:47:49:
                    b5:a1:c3:dd:c7:1a:89:f8:d9:b0:f7:0f:a4:dc:69:
                    96:3e:fc:e5:bd:7b:d8:21:ab:d7:24:43:72:a9:87:
                    27:e1:e2:ce:f6:db:e4:63:16:a6:43:b4:4d:2b:d9:
                    6b:43:6d:e0:c7:71:4e:42:23:b4:2a:c0:97:30:96:
                    d5:a6:63:fc:a9:45:f7:c9:f9:26:a3:38:86:13:10:
                    c3:7d:18:48:26:bd:db:37:f5:91:f8:d2:80:8c:bc:
                    38:69:19:bb:57:c7:88:92:ec:40:a7:f3:7d:2a:e2:
                    87:94:d9:c6:0d:6e:ea:21:36:11:02:90:82:59:de:
                    df:31:f3:bb:18:ce:2f:8d:b9:36:e6:a9:87:5f:69:
                    ff:15:69:b7:f7:42:ae:fc:46:29:d1:6d:d8:a9:01:
                    8b:8b:2c:9b:98:75:11:55:34:19:97:5a:f4:6d:bc:
                    5d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B3:FF:3E:25:1D:33:0A:23:85:5C:9E:A2:36:03:41:36:44:36:76
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3A8E3B0964C11F184E00EB0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.209.65.0-154.209.71.255
                  154.209.80.0-154.209.82.255

    Signature Algorithm: sha256WithRSAEncryption
         81:a0:4c:e4:8b:15:97:c7:e7:1c:c9:c8:3b:ac:08:22:2d:f6:
         be:f2:30:d3:96:53:ca:fe:bd:ad:ee:69:cc:12:8e:b7:44:d4:
         d6:ed:b5:c2:8f:0c:24:22:64:7f:f4:6e:45:14:61:a5:ff:7d:
         2a:22:b1:81:4d:53:90:05:e8:88:eb:a2:5d:aa:e5:31:fc:17:
         bd:44:cd:51:0b:57:a7:04:de:77:84:4a:65:c7:54:20:86:ee:
         56:82:de:a5:fa:32:8f:fd:ec:cd:ac:df:84:a3:88:13:c1:0c:
         3e:b2:1a:29:a9:ff:0e:49:20:ff:44:c8:fe:59:a1:2d:41:5f:
         80:a0:39:89:7f:2c:04:54:6b:28:73:d9:07:c3:ac:ec:7c:01:
         bc:af:1d:28:78:15:74:21:40:9e:03:b8:6e:d5:86:be:38:47:
         45:00:78:c0:cb:09:39:17:cc:c5:7b:a4:53:7f:e9:87:13:88:
         b8:56:6a:d5:8a:b0:4f:70:72:7e:02:ce:07:77:7f:3c:a7:f0:
         8c:0d:1f:e8:c2:6d:82:e0:e8:76:8a:77:42:a3:8e:6d:aa:f3:
         2b:4c:4d:9d:39:82:c4:ac:da:07:26:29:48:4a:ac:1f:42:3a:
         b6:30:97:8f:9b:f2:81:44:a3:a9:0d:7c:3e:43:f4:04:6f:d5:
         26:10:36:f9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----