Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E274D35C963A11F181FDC1C5CE1D38B0.roa
File:                     E274D35C963A11F181FDC1C5CE1D38B0.roa (raw, json)
Hash identifier:          IZBPPMX1Urq4Ntjhxx8OV2M4f+UtgWIX0pHJKrx6efo=
Subject key identifier:   68:55:45:3E:BA:CF:C5:45:21:85:9D:49:8C:40:1A:32:4E:1B:5E:AE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DE77
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E274D35C963A11F181FDC1C5CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 10:45:08 +0000
ROA not before:           Wed 12 Aug 2026 10:45:04 +0000
ROA not after:            Sun 12 Aug 2029 10:45:04 +0000
asID:                     17561
IP address blocks:        154.86.243.0/24 maxlen: 24
                          154.86.244.0/24 maxlen: 24
                          154.86.245.0/24 maxlen: 24
                          154.86.246.0/24 maxlen: 24
                          154.86.247.0/24 maxlen: 24
                          154.86.248.0/24 maxlen: 24
                          154.86.249.0/24 maxlen: 24
                          154.86.250.0/24 maxlen: 24
                          154.86.251.0/24 maxlen: 24
                          154.86.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122487 (0x1de77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 12 10:45:04 2026 GMT
            Not After : Aug 12 10:45:04 2029 GMT
        Subject: CN=6a7c4eb4-c567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2c:bd:22:0a:74:24:84:f3:f6:a3:f7:b4:53:
                    c4:c6:03:4f:7a:ce:ef:93:82:c5:a4:1d:6e:a3:43:
                    32:2f:5e:0f:b1:22:3a:37:cd:3a:13:c4:ca:aa:48:
                    0b:22:ed:ad:cc:c7:17:3f:c6:96:a7:3c:9c:ac:55:
                    d8:cd:75:fc:17:97:8e:51:55:f5:0b:0c:7f:85:d7:
                    1b:d9:f5:1a:14:ee:b1:8b:42:8a:f4:df:4c:a1:18:
                    01:48:e5:f0:64:67:b9:07:bf:86:67:5b:cd:55:4e:
                    15:d2:b7:7b:94:44:a6:41:09:97:ff:8b:83:c4:7a:
                    a7:46:80:f2:07:1e:f1:39:4c:d5:1c:bb:90:e6:6e:
                    15:74:b5:d9:18:d3:4f:1d:6e:72:6b:35:88:de:2c:
                    70:8b:f8:f4:08:e6:ed:23:18:74:a6:21:c6:b3:7b:
                    d8:6d:04:d3:95:5b:62:9a:da:f4:fa:7c:cd:a8:22:
                    0a:5e:ff:52:21:e5:79:c3:81:11:9f:c1:71:5b:25:
                    c2:86:e7:78:12:56:2d:f4:d5:5c:9c:99:50:db:e6:
                    39:f2:b7:8e:15:d0:cb:17:9e:59:64:3f:85:ee:4a:
                    76:cd:ed:d2:64:94:3a:db:04:fd:c1:a1:de:db:8f:
                    6b:7c:f7:95:b5:15:38:03:15:f9:a8:aa:f9:f1:4f:
                    75:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:55:45:3E:BA:CF:C5:45:21:85:9D:49:8C:40:1A:32:4E:1B:5E:AE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E274D35C963A11F181FDC1C5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.243.0-154.86.252.255

    Signature Algorithm: sha256WithRSAEncryption
         31:83:17:e4:9b:3a:b1:69:84:fa:75:de:a7:d0:17:8b:68:8e:
         ce:32:4a:9c:ca:36:44:17:b9:e8:d8:ad:41:43:99:d1:78:db:
         2e:86:dc:74:08:92:75:ad:4f:3f:c1:f3:ce:64:c6:06:21:0b:
         f7:c8:c3:bb:d1:6f:13:0b:39:7d:42:ed:38:1e:a2:7b:5f:7d:
         f9:1e:39:2d:a7:a5:fa:3d:05:7d:fc:44:e2:7b:0b:48:0e:74:
         dc:ab:74:f0:6b:32:1f:02:aa:66:b7:b2:2e:ff:71:49:36:f5:
         df:8f:e7:cf:fc:69:38:9c:35:3a:d9:61:eb:f9:fe:1b:ac:c4:
         8f:be:85:1a:e8:82:da:95:94:e7:c2:f3:9b:42:92:9b:1d:df:
         cc:90:2f:b4:84:89:49:e3:a0:71:cb:61:2b:4d:f5:e2:09:0e:
         bd:3a:e4:3e:b1:7d:e0:70:0a:6d:a1:99:70:4c:ec:be:e0:49:
         65:10:ca:c4:73:e0:b2:b3:22:f4:d2:f2:0e:7e:e4:bb:53:2a:
         96:4f:c3:8e:9c:f1:d9:2d:33:1e:f4:57:a5:f9:cd:f7:3a:93:
         c9:39:57:57:d9:0e:79:87:c0:92:4c:03:6b:6e:76:1d:04:1c:
         2a:49:a7:fe:47:bd:55:2d:28:ac:54:d2:d4:0a:d7:a9:3b:3b:
         47:86:f3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----