Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC0164C4994411F19EDB79BECE1D38B0.roa
File:                     DC0164C4994411F19EDB79BECE1D38B0.roa (raw, json)
Hash identifier:          BFbUQCCqt4y509XYNRNnq9LvJpVgzQFg7EqKVNspS0o=
Subject key identifier:   31:07:FB:F1:00:25:BE:B6:BB:81:FB:8D:9A:EF:62:9B:D5:C2:99:B8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DF4A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC0164C4994411F19EDB79BECE1D38B0.roa
Signing time:             Sun 16 Aug 2026 07:34:06 +0000
ROA not before:           Sun 16 Aug 2026 07:34:01 +0000
ROA not after:            Tue 22 Sep 2026 07:34:01 +0000
asID:                     11404
IP address blocks:        154.194.44.0/22 maxlen: 24
                          154.198.176.0/21 maxlen: 24
                          154.199.8.0/21 maxlen: 24
                          154.199.16.0/21 maxlen: 24
                          154.199.28.0/22 maxlen: 24
                          154.199.48.0/21 maxlen: 24
                          154.199.56.0/22 maxlen: 24
                          154.199.64.0/20 maxlen: 24
                          154.199.208.0/20 maxlen: 24
                          154.202.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 15 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122698 (0x1df4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 16 07:34:01 2026 GMT
            Not After : Sep 22 07:34:01 2026 GMT
        Subject: CN=6a8167ed-9d18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:61:14:07:11:24:8a:8b:cb:6a:28:cc:92:8a:
                    a4:6c:79:87:c3:fb:b2:99:aa:ac:be:40:2d:99:a0:
                    b8:ac:4b:35:35:5e:aa:73:7e:fb:19:66:fd:0b:b8:
                    60:37:d5:ff:5c:9f:75:cd:0d:55:cb:0b:a2:73:f1:
                    20:4a:15:cb:e2:ec:11:c8:ff:9a:ec:ee:50:77:18:
                    04:8c:76:0d:02:70:23:43:5d:40:92:1b:5b:14:f8:
                    ff:5a:ce:4f:08:a0:57:3f:2e:59:89:22:95:6a:6b:
                    1b:70:cf:7c:65:d4:40:5b:f6:68:26:11:44:9f:16:
                    6d:08:26:22:40:f8:27:d8:4b:3f:f8:10:23:11:14:
                    10:a4:52:ae:14:68:80:df:88:c1:fc:4c:6d:17:35:
                    f3:67:42:a4:dc:2c:ab:6c:37:9f:8a:8a:44:46:03:
                    6b:5a:b1:d6:f6:38:65:11:fe:22:09:9a:75:2f:57:
                    62:39:8f:7e:c6:11:b3:1d:13:9a:6a:4c:64:4a:ca:
                    98:7c:cd:90:83:8c:ab:07:7b:5f:4f:b2:d2:c2:c1:
                    24:fe:9c:fe:77:9c:08:03:b4:47:a0:f2:57:bd:bd:
                    fb:14:0c:8b:01:26:a0:af:64:63:a1:b7:64:34:d3:
                    dc:bc:03:91:f6:25:c8:df:e7:8a:31:d7:11:01:57:
                    eb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:07:FB:F1:00:25:BE:B6:BB:81:FB:8D:9A:EF:62:9B:D5:C2:99:B8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC0164C4994411F19EDB79BECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.44.0/22
                  154.198.176.0/21
                  154.199.8.0-154.199.23.255
                  154.199.28.0/22
                  154.199.48.0-154.199.59.255
                  154.199.64.0/20
                  154.199.208.0/20
                  154.202.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2b:79:1b:95:52:d6:df:1b:b4:0c:cf:a8:50:a5:c7:af:9a:01:
         a4:b8:7c:6f:a2:d0:96:06:2d:36:46:71:e4:9b:3a:73:3b:de:
         06:bc:f7:7a:a9:5f:b3:d5:7e:37:e6:58:b7:78:61:ea:8a:18:
         ec:0a:a1:a0:38:a7:f1:60:36:0f:8e:c8:ce:74:4d:5b:cd:49:
         4e:38:e7:74:07:1a:8b:4b:06:92:eb:57:c0:fe:c9:31:e0:5b:
         22:ba:7d:4a:b5:c1:aa:2f:8b:d9:db:c4:49:97:dd:86:b1:69:
         b6:51:f5:05:9e:13:a2:16:ca:9d:f2:8a:a0:cd:20:21:31:b9:
         50:e9:d5:05:d9:d0:eb:58:96:4a:93:44:2e:97:78:1e:2b:26:
         f8:14:07:4c:42:86:1f:c2:a7:6b:b6:36:8d:73:96:de:7d:df:
         4b:6c:76:38:a6:9e:15:69:ff:cc:a2:1f:9e:00:33:a3:d1:7b:
         02:d4:1e:0e:74:22:75:9d:07:9a:54:90:0b:fb:c1:ff:e2:f5:
         57:74:74:71:04:1c:78:bb:7a:a1:04:cf:db:03:d8:3b:ef:3e:
         be:20:20:74:e6:62:b9:cd:dd:c6:2e:57:2b:74:5c:6e:b5:9b:
         6b:53:b7:9b:7f:4a:88:21:75:cd:f2:0e:17:82:65:f3:a1:b3:
         12:c1:f3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----