Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8470DFAA77911F19CE1F509CF1D38B0.roa
File:                     D8470DFAA77911F19CE1F509CF1D38B0.roa (raw, json)
Hash identifier:          NzRWc0aO+laDvClxgwNLn3C9c6ZzoYH4aYmZDmB14Dk=
Subject key identifier:   02:0D:45:B8:4E:7E:C8:E9:9E:C4:87:C9:FF:2B:07:C1:8C:34:32:B5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E51D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8470DFAA77911F19CE1F509CF1D38B0.roa
Signing time:             Thu 03 Sep 2026 09:28:39 +0000
ROA not before:           Thu 03 Sep 2026 09:28:35 +0000
ROA not after:            Sun 13 Sep 2026 09:28:35 +0000
asID:                     40115
IP address blocks:        154.86.16.0/20 maxlen: 24
                          154.86.16.0/24 maxlen: 24
                          154.86.17.0/24 maxlen: 24
                          154.86.18.0/24 maxlen: 24
                          154.86.19.0/24 maxlen: 24
                          154.86.20.0/24 maxlen: 24
                          154.86.21.0/24 maxlen: 24
                          154.86.22.0/24 maxlen: 24
                          154.86.23.0/24 maxlen: 24
                          154.86.24.0/24 maxlen: 24
                          154.86.25.0/24 maxlen: 24
                          154.86.26.0/24 maxlen: 24
                          154.86.27.0/24 maxlen: 24
                          154.86.28.0/24 maxlen: 24
                          154.86.29.0/24 maxlen: 24
                          154.86.30.0/24 maxlen: 24
                          154.86.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 09:28:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124189 (0x1e51d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  3 09:28:35 2026 GMT
            Not After : Sep 13 09:28:35 2026 GMT
        Subject: CN=6a993dc7-8696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c4:71:e2:6b:64:f1:40:d7:51:2e:59:f7:a2:
                    36:34:5a:03:9b:0d:ee:9e:c1:3b:fa:05:e1:a0:10:
                    6e:56:b1:59:b3:5d:7c:2b:03:be:ff:e3:65:43:69:
                    a3:a7:4d:2d:63:ed:29:09:bc:7b:f8:a6:67:ab:c4:
                    40:72:39:65:7e:39:04:32:2f:e0:af:32:6a:7d:b7:
                    3e:9b:df:18:b5:4a:00:30:71:d6:2e:55:c3:63:3f:
                    38:ab:62:a1:e8:99:9d:b9:18:be:43:c0:70:14:60:
                    e7:c0:8c:4b:1c:af:40:33:5a:09:e2:5e:f6:b0:72:
                    9b:9b:69:e1:a0:a2:b8:97:f6:78:a1:35:6c:9a:a3:
                    0e:ee:22:90:23:6e:6b:bb:07:fd:c8:55:99:8c:9a:
                    dd:38:89:2f:11:f3:6a:7e:e3:e7:e2:a0:f4:a3:0c:
                    5c:97:a4:20:af:99:dd:98:0c:8a:e1:57:98:18:f4:
                    51:22:6b:b0:62:93:05:20:53:06:f4:0d:29:05:ec:
                    06:34:25:a9:bc:a0:cc:7d:36:4a:da:cf:bb:84:07:
                    32:af:d2:5d:fc:5d:ed:6c:f6:52:a3:53:8f:b7:0d:
                    a0:fc:b4:40:03:ef:b2:44:cd:6f:ff:ab:65:8d:07:
                    fa:36:cb:ca:6a:37:0b:49:88:83:9e:25:41:5e:67:
                    ea:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0D:45:B8:4E:7E:C8:E9:9E:C4:87:C9:FF:2B:07:C1:8C:34:32:B5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8470DFAA77911F19CE1F509CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d2:35:b8:37:68:d6:36:46:09:72:75:0c:29:dc:f9:16:96:d3:
         83:ee:68:a4:b3:6d:4a:23:6f:2f:c7:8c:87:7a:eb:46:92:fb:
         07:7b:df:d9:5b:5c:46:ae:4d:66:18:d8:6d:57:6b:1f:11:b2:
         30:ad:10:bc:c7:8a:15:a8:f1:a3:8d:c1:0d:b3:64:7c:51:4b:
         42:21:2d:90:32:16:d8:d4:c7:c4:74:e0:4e:59:4c:25:cb:f3:
         32:6d:23:28:48:03:b8:ba:30:59:d6:1a:5a:e9:4f:30:64:b6:
         cf:db:de:a1:d8:95:23:80:4f:be:03:16:ce:59:70:41:b2:72:
         1b:04:7c:75:6d:0b:9b:b0:25:12:1e:93:28:59:e4:e0:31:1b:
         5d:93:d2:cf:16:da:32:f5:8a:12:7a:1e:2d:e8:55:16:d7:51:
         e6:af:43:cc:db:73:54:3d:f8:b9:16:75:95:d3:8f:c4:99:6a:
         97:4f:12:1d:cf:1c:3e:6a:c1:e8:b3:d5:3e:cc:a1:46:25:ff:
         8b:84:c3:4c:61:5c:b3:38:56:9b:2d:65:8c:7e:8d:6e:33:92:
         ec:56:ca:2d:a8:f9:5e:a7:6e:6e:b9:32:e2:b3:fd:7a:77:ab:
         3b:87:f9:9e:7a:f3:8b:c5:f2:da:af:c7:ed:be:22:83:13:bd:
         a7:e9:b5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----