Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E69DF918963F11F19C95C5E2CE1D38B0.roa
File:                     E69DF918963F11F19C95C5E2CE1D38B0.roa (raw, json)
Hash identifier:          AoZBIsZzhQ6FiHAaw/pCUrGJp2jRB4az7h/b+mkabB8=
Subject key identifier:   E6:7A:CB:48:23:E9:5F:BB:2F:8D:48:7E:B3:B2:25:92:CA:5B:FC:4F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DE86
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E69DF918963F11F19C95C5E2CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 11:21:02 +0000
ROA not before:           Wed 12 Aug 2026 11:20:58 +0000
ROA not after:            Sun 12 Aug 2029 11:20:58 +0000
asID:                     17561
IP address blocks:        154.93.218.0/24 maxlen: 24
                          154.93.219.0/24 maxlen: 24
                          154.93.220.0/24 maxlen: 24
                          154.93.221.0/24 maxlen: 24
                          154.93.222.0/24 maxlen: 24
                          154.93.223.0/24 maxlen: 24
                          154.93.224.0/24 maxlen: 24
                          154.93.225.0/24 maxlen: 24
                          154.93.226.0/24 maxlen: 24
                          154.93.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122502 (0x1de86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 12 11:20:58 2026 GMT
            Not After : Aug 12 11:20:58 2029 GMT
        Subject: CN=6a7c571e-905d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cd:67:40:1a:9e:ab:d7:16:98:88:9d:85:18:
                    e4:7a:59:62:d0:26:9a:d3:92:c1:30:d1:d3:ed:af:
                    e5:c1:9e:21:33:b3:c5:f3:f5:ce:30:7d:b9:d7:7f:
                    37:58:10:a5:bc:c1:27:15:44:3b:7e:5f:56:37:7a:
                    2e:9e:04:bb:27:20:a5:3c:30:8b:45:c7:ab:d8:f4:
                    16:6f:df:d2:28:f5:a9:aa:c6:76:1c:4d:37:84:0b:
                    69:7a:3d:ba:71:a1:4e:8f:5c:b2:86:3f:67:41:45:
                    d8:60:f2:2a:bc:2d:9e:16:11:46:cd:14:9b:05:fa:
                    42:38:f8:54:5e:d8:e0:dc:75:eb:c1:4b:0a:a6:49:
                    bc:75:17:86:8e:1a:8f:30:29:f9:14:82:77:10:33:
                    af:02:c1:ef:0c:31:c9:25:a0:53:7b:73:77:85:e3:
                    f5:8a:9a:a3:d7:b8:e9:b9:43:6b:6b:0c:53:6c:a3:
                    12:2c:17:70:be:7a:f6:17:13:85:50:e6:cd:bc:02:
                    2d:2a:14:61:07:de:6a:8b:fe:0e:2c:7e:2a:8a:d1:
                    22:90:b8:20:2d:31:8b:20:79:ed:dc:9a:60:eb:5e:
                    b8:eb:51:02:38:4a:9d:a4:47:25:a6:ab:92:24:b2:
                    ff:33:67:b9:18:09:4a:5e:f7:b2:3f:f4:26:a5:a0:
                    a4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7A:CB:48:23:E9:5F:BB:2F:8D:48:7E:B3:B2:25:92:CA:5B:FC:4F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E69DF918963F11F19C95C5E2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.93.218.0-154.93.227.255

    Signature Algorithm: sha256WithRSAEncryption
         a6:7e:52:65:be:69:98:b5:b5:ce:e9:75:ee:93:59:f3:ad:55:
         a8:44:6f:3a:7d:c8:c5:2a:b6:db:e4:e9:94:61:1d:b6:92:42:
         fe:21:f9:20:11:c7:5a:3c:62:b4:dc:7c:5f:8c:46:a0:a2:f0:
         59:5f:38:c4:e4:dd:3e:5f:1e:61:20:10:08:e0:4f:9f:7a:ee:
         bc:2b:f8:b7:b3:ab:d4:af:2c:42:f8:2c:dd:10:dc:50:25:16:
         a7:76:ef:cf:f8:e5:72:3c:0a:2e:cb:24:67:29:32:ff:f2:81:
         1f:eb:ed:0d:ed:4e:f5:25:d6:e7:a4:cf:ee:c8:5f:d3:bc:f4:
         1f:a0:81:5d:99:94:f9:e5:a7:e4:21:6a:6a:8e:11:4a:51:06:
         57:46:7b:0f:2f:66:ba:f1:b5:59:97:0a:43:c5:57:be:36:bb:
         19:a0:cb:fe:eb:88:c6:85:eb:10:4c:18:6b:d5:b1:18:ce:0d:
         2b:dc:c8:d0:35:1e:cb:c4:4e:f9:93:d9:2a:3e:c9:72:11:77:
         08:e2:9b:e5:c2:c9:fb:5a:b8:a5:92:1f:5f:ec:1c:25:dc:04:
         47:02:d3:d2:1a:27:4f:10:dc:9c:16:e1:5d:2b:ae:d1:99:98:
         3e:e3:e1:1f:cc:40:70:56:45:81:b7:d1:b1:3b:ed:f6:d9:3a:
         35:de:3c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----