Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB4A92A2A05211F1BC08FABDCE1D38B0.roa
File:                     DB4A92A2A05211F1BC08FABDCE1D38B0.roa (raw, json)
Hash identifier:          esoiY3PS0IGpnTdyqmuZeeCGied/L8EONEvYDIgsRSg=
Subject key identifier:   5F:AE:69:D2:A5:76:4F:7A:61:86:D0:83:B5:C3:BA:09:4E:63:FB:93
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E279
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB4A92A2A05211F1BC08FABDCE1D38B0.roa
Signing time:             Tue 25 Aug 2026 07:01:55 +0000
ROA not before:           Tue 25 Aug 2026 07:01:51 +0000
ROA not after:            Wed 16 Sep 2026 07:01:51 +0000
asID:                     17497
IP address blocks:        154.193.8.0/21 maxlen: 24
                          154.193.8.0/24 maxlen: 24
                          154.193.9.0/24 maxlen: 24
                          154.193.10.0/24 maxlen: 24
                          154.193.11.0/24 maxlen: 24
                          154.193.12.0/24 maxlen: 24
                          154.197.23.0/24 maxlen: 24
                          154.197.26.0/23 maxlen: 24
                          154.197.26.0/24 maxlen: 24
                          154.197.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 11 Sep 2026 10:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123513 (0x1e279)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 25 07:01:51 2026 GMT
            Not After : Sep 16 07:01:51 2026 GMT
        Subject: CN=6a8d3de3-feea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:48:a7:fd:23:52:ab:7c:ce:c6:9b:02:1a:34:
                    99:0f:07:b7:37:0c:fa:0e:58:81:92:2e:41:18:66:
                    1d:f7:12:9a:d8:8d:a0:05:f8:1e:00:3e:4b:b2:aa:
                    40:4d:56:f0:12:d8:5b:85:03:86:53:2f:5d:01:02:
                    ba:ad:15:32:ac:93:d4:f6:12:c4:b9:77:00:fd:a5:
                    60:5b:21:7b:1e:3b:b1:a7:c2:8b:09:5f:f3:ea:9e:
                    c9:47:1d:00:2f:1b:c0:29:b9:f4:ec:12:8a:d8:06:
                    8a:ad:2a:33:9e:14:27:e0:93:cd:21:81:b1:f3:18:
                    27:43:92:c9:39:b3:d9:5a:69:a5:99:d6:6b:a9:60:
                    d8:2e:55:c8:d0:bc:84:64:36:e4:55:63:10:58:7f:
                    0e:c9:38:3b:df:c9:38:5a:43:b0:53:3b:f9:1e:cc:
                    40:c3:fd:ab:6b:2a:6c:4c:27:8b:9a:a8:4b:68:2c:
                    ae:f9:34:25:a2:9a:aa:7d:d9:47:07:59:27:63:57:
                    ef:13:92:c3:5d:e1:93:1e:a5:36:d1:ab:01:2c:42:
                    b8:b9:d6:03:f9:ff:ca:ed:66:a0:2b:45:f6:61:a9:
                    a1:87:be:53:f6:1f:72:ed:f0:64:53:2e:18:dd:7b:
                    a4:52:c8:ff:d0:d0:71:30:32:56:90:78:54:53:ba:
                    cc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:AE:69:D2:A5:76:4F:7A:61:86:D0:83:B5:C3:BA:09:4E:63:FB:93
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB4A92A2A05211F1BC08FABDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.8.0/21
                  154.197.23.0/24
                  154.197.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:54:39:70:7f:1d:ae:5b:2e:e4:3e:df:cf:31:6d:fb:5e:f8:
         96:5a:36:60:c9:50:8a:45:3e:b7:1a:74:95:1e:c1:10:32:1a:
         fe:81:c4:5d:ec:7d:a3:f7:62:65:39:5d:57:5b:cd:7c:b1:d5:
         6a:34:1e:e9:77:b5:fd:c9:e2:07:5e:06:91:75:ef:53:d3:5e:
         d8:b2:48:dc:81:29:a6:dc:df:e4:e3:f5:9e:d6:b3:55:c9:ae:
         6d:f2:9c:ee:87:fe:67:36:5c:76:d0:6b:e1:bd:b9:de:15:e7:
         16:70:77:f4:5b:3d:9b:a2:bc:35:e4:2e:05:31:de:c8:2e:af:
         c0:5b:5c:20:6c:56:07:ae:dc:aa:ce:80:24:5d:fa:24:d5:3c:
         5e:92:4a:e1:df:fb:8f:d6:ed:91:b2:8c:69:4a:e4:b6:04:2e:
         c9:06:a7:07:ec:ee:e3:2d:48:5c:ea:d9:52:9a:2d:3d:56:27:
         eb:04:c0:ea:10:ff:d6:11:a5:44:e0:b9:d0:a0:5b:10:f3:f6:
         17:7f:ff:a3:f5:e6:8c:04:78:80:f2:69:aa:84:d6:f2:bc:bc:
         3f:f3:75:a2:7e:17:60:4a:0f:99:36:37:51:84:73:7e:9a:a2:
         1f:95:a5:ac:81:9a:03:87:99:55:81:2d:4b:64:cd:0b:70:7e:
         98:28:e0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----