Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBD23030A0F711F19E291F17CF1D38B0.roa
File:                     EBD23030A0F711F19E291F17CF1D38B0.roa (raw, json)
Hash identifier:          OuP2BdD02WoMtQCbRzibiuHPmzZqEgGkcuZ/WxWXass=
Subject key identifier:   82:EF:91:D3:28:81:B6:03:59:13:6C:E7:D1:5A:FA:34:17:34:8A:18
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E30C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBD23030A0F711F19E291F17CF1D38B0.roa
Signing time:             Wed 26 Aug 2026 02:43:30 +0000
ROA not before:           Wed 26 Aug 2026 02:43:25 +0000
ROA not after:            Wed 19 May 2027 02:43:25 +0000
asID:                     328608
IP address blocks:        154.200.208.0/24 maxlen: 24
                          154.200.209.0/24 maxlen: 24
                          154.200.210.0/24 maxlen: 24
                          154.200.211.0/24 maxlen: 24
                          154.200.212.0/24 maxlen: 24
                          154.200.213.0/24 maxlen: 24
                          154.200.214.0/24 maxlen: 24
                          154.200.215.0/24 maxlen: 24
                          154.200.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123660 (0x1e30c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 26 02:43:25 2026 GMT
            Not After : May 19 02:43:25 2027 GMT
        Subject: CN=6a8e52d2-0c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:41:0c:bb:b2:aa:00:7e:83:32:d0:07:ae:2f:
                    22:cc:b3:63:75:14:a3:4a:de:82:c3:c6:bb:4e:af:
                    31:f9:fc:d8:80:4d:52:df:fe:b7:27:b1:89:41:75:
                    28:24:82:ef:3f:86:0c:90:54:e3:c2:7f:0f:5b:ae:
                    8b:84:19:28:40:69:04:a5:f5:57:5e:93:d6:7d:9c:
                    e4:4f:45:12:3e:fd:8a:68:67:6b:98:39:6a:de:77:
                    ce:e9:72:77:bc:74:2e:42:69:3e:24:da:fc:78:fd:
                    7d:3f:2f:0c:11:b4:b2:b0:0e:aa:d6:6b:25:1b:d0:
                    19:f4:96:65:71:96:69:d9:35:ee:73:7d:5c:95:dc:
                    b5:ec:27:8a:cc:59:5b:21:97:60:53:b2:45:d9:fa:
                    b4:db:2a:9c:1f:6f:4f:3e:d0:7c:67:cd:ee:7d:16:
                    46:15:6c:6e:1c:7e:4a:36:42:15:d3:ca:1d:c3:c2:
                    40:8d:36:2e:31:de:fc:73:22:10:b7:8b:35:be:c1:
                    69:bb:0a:9e:be:59:16:70:f6:17:c0:cf:3e:31:10:
                    c6:70:7e:f4:2a:3d:53:80:6d:7d:58:c7:79:b2:2a:
                    d0:5e:99:bc:eb:6f:20:21:c5:3c:8a:15:f2:00:ec:
                    89:50:35:18:02:ff:d7:a6:37:7a:d9:f3:74:fa:99:
                    12:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:EF:91:D3:28:81:B6:03:59:13:6C:E7:D1:5A:FA:34:17:34:8A:18
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBD23030A0F711F19E291F17CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.208.0-154.200.216.255

    Signature Algorithm: sha256WithRSAEncryption
         94:be:44:00:e9:7c:2e:e9:27:a3:74:11:22:f3:97:53:aa:0e:
         54:f6:17:52:8e:23:9f:e9:13:31:ec:a7:ef:9a:42:26:db:23:
         20:a1:19:3c:05:38:dc:46:64:cc:46:33:b7:75:1e:75:3d:68:
         48:78:7d:08:b9:b0:0b:7c:3c:9c:0b:ce:a7:5f:57:fa:57:f8:
         83:02:dd:9e:19:0e:dd:7e:46:04:41:0e:47:b4:09:75:e7:fa:
         6f:e3:36:9e:f2:74:36:e6:6d:4c:f7:f1:0b:b8:a6:93:95:4e:
         4a:4d:6e:cf:35:90:e2:7a:6c:73:fa:49:6e:2c:0a:1e:94:ef:
         ae:20:cd:d2:03:8f:b5:e9:94:37:c4:4e:7f:87:c8:9b:05:0f:
         d8:fc:d2:20:49:67:d4:8e:18:58:ff:d7:34:75:6d:2a:35:db:
         88:95:87:c9:f2:f0:a0:cb:69:cc:23:cb:6b:47:0d:83:33:2e:
         e4:9a:61:65:46:b2:3e:a4:36:db:e6:7f:97:9b:c2:16:dc:7f:
         56:5e:e5:f3:17:f6:d3:61:72:c5:d0:c3:57:39:fa:ae:87:07:
         85:b9:70:91:59:fd:8f:7b:16:b6:a1:f6:d5:a2:b5:60:26:e1:
         b7:7d:5f:a7:d0:17:3d:57:cf:87:b8:42:97:79:22:5a:ea:a0:
         35:88:23:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----