Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF4625189F8B11F1BA842904CF1D38B0.roa
File:                     EF4625189F8B11F1BA842904CF1D38B0.roa (raw, json)
Hash identifier:          pj1DLmjEtfM24QjmpR3XTsvirXrbwIwRQStiNoYENKg=
Subject key identifier:   EF:A1:3B:D2:32:F9:B8:11:CD:3A:95:12:31:FC:1A:43:A1:A4:26:A2
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E1FC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF4625189F8B11F1BA842904CF1D38B0.roa
Signing time:             Mon 24 Aug 2026 07:17:59 +0000
ROA not before:           Mon 24 Aug 2026 07:17:55 +0000
ROA not after:            Thu 01 Oct 2026 07:17:55 +0000
asID:                     62240
IP address blocks:        154.194.33.0/24 maxlen: 24
                          154.195.6.0/24 maxlen: 24
                          154.195.7.0/24 maxlen: 24
                          154.195.139.0/24 maxlen: 24
                          154.195.145.0/24 maxlen: 24
                          154.195.146.0/24 maxlen: 24
                          154.195.147.0/24 maxlen: 24
                          154.195.158.0/24 maxlen: 24
                          154.196.83.0/24 maxlen: 24
                          154.196.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 11:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123388 (0x1e1fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 24 07:17:55 2026 GMT
            Not After : Oct  1 07:17:55 2026 GMT
        Subject: CN=6a8bf027-1e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c8:bf:ae:e3:0f:ed:3b:b5:44:35:b3:49:31:
                    1c:3a:6c:16:05:6b:9a:fe:de:12:41:4b:27:e2:fb:
                    f4:c3:3a:d6:27:ce:18:56:4b:4d:51:03:a3:ea:d7:
                    a2:04:50:e0:2b:be:31:67:b3:0c:de:a0:7c:fe:91:
                    88:10:c9:e7:35:b9:7f:13:7e:c2:46:c2:4b:00:16:
                    0b:b4:cb:19:80:d5:ef:2b:90:2c:1e:3a:64:9c:1f:
                    ef:c0:60:82:ad:e9:ac:32:3e:7a:1d:16:e6:b1:ac:
                    54:7d:8d:1f:21:34:3a:66:15:c0:0d:aa:58:40:1f:
                    38:2a:2c:60:2d:ca:7e:0d:c0:76:5d:7c:db:16:95:
                    5d:3a:f2:80:36:54:3d:6f:4b:3c:a5:15:87:76:7c:
                    6c:3b:f6:42:86:a8:23:ea:c8:e1:3d:18:16:02:5e:
                    6a:45:53:c3:04:c1:8f:2f:26:17:b5:30:66:3c:9c:
                    63:8c:d7:96:5a:3d:2b:5e:3b:e6:2d:39:d8:2e:e5:
                    c8:7d:3b:20:b1:52:c5:ec:1f:36:28:68:65:be:67:
                    95:47:ba:9b:cc:86:be:17:13:2d:f7:63:25:98:52:
                    14:c6:c3:6c:09:1f:a3:34:63:87:03:69:e4:87:f9:
                    1b:c8:88:bc:de:92:50:c5:e0:78:9b:da:73:a2:18:
                    13:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A1:3B:D2:32:F9:B8:11:CD:3A:95:12:31:FC:1A:43:A1:A4:26:A2
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF4625189F8B11F1BA842904CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.33.0/24
                  154.195.6.0/23
                  154.195.139.0/24
                  154.195.145.0-154.195.147.255
                  154.195.158.0/24
                  154.196.83.0/24
                  154.196.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:52:e5:2c:02:db:f4:a9:cb:d3:49:ce:d0:bc:ff:97:01:b3:
         71:7e:a2:38:54:ac:2b:45:8e:2e:f3:c6:e6:4c:7e:68:31:bb:
         37:2a:b5:e2:ba:95:72:08:f1:09:a1:db:20:ab:02:9d:95:9c:
         71:32:ae:c3:25:bf:69:9c:5f:8f:4f:cd:d5:2b:6f:2c:88:8f:
         94:f4:e5:12:08:59:b6:7a:7d:cf:dc:af:87:a1:13:6d:5c:f7:
         04:7e:d7:b5:ed:a4:f8:f3:c6:50:91:51:cb:8c:fd:e2:0d:0d:
         d8:38:26:80:37:98:ed:6e:62:4a:35:f4:d6:6c:2d:d8:a1:7b:
         95:aa:85:25:f0:67:a9:59:4d:d5:c3:15:a2:29:30:fc:bd:b5:
         45:75:d8:af:65:79:c0:a4:d3:5a:1b:21:53:6a:50:76:d0:c2:
         06:f3:85:2b:b8:fc:8c:d1:36:1d:b2:fa:c6:f4:4c:85:8d:4c:
         6d:53:1b:68:72:4b:49:78:6c:59:89:6c:0e:66:b2:7e:ed:1c:
         64:36:b2:96:f2:de:a7:06:4f:0a:08:d7:aa:55:fb:e6:81:76:
         f8:2c:04:93:5d:b8:03:9d:9b:1d:09:16:a6:7c:87:2c:aa:54:
         ba:ab:c5:94:cb:48:34:ca:17:71:ed:1e:93:37:4e:47:66:41:
         85:91:10:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----