Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2A5B238A06611F18CB41CB3CE1D38B0.roa
File:                     F2A5B238A06611F18CB41CB3CE1D38B0.roa (raw, json)
Hash identifier:          V12i5OBrdURAz3NTg8waXTBiCtNWBkwxv6/ML1NWSqU=
Subject key identifier:   4A:1C:AB:8C:E3:68:6C:79:12:33:FD:EE:02:17:81:12:F8:EA:58:D3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E2CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2A5B238A06611F18CB41CB3CE1D38B0.roa
Signing time:             Tue 25 Aug 2026 09:25:45 +0000
ROA not before:           Tue 25 Aug 2026 09:25:41 +0000
ROA not after:            Fri 02 Oct 2026 09:25:41 +0000
asID:                     49505
IP address blocks:        154.205.244.0/24 maxlen: 24
                          154.205.245.0/24 maxlen: 24
                          154.205.246.0/24 maxlen: 24
                          154.205.247.0/24 maxlen: 24
                          154.223.198.0/24 maxlen: 24
                          154.223.199.0/24 maxlen: 24
                          154.223.200.0/24 maxlen: 24
                          154.223.201.0/24 maxlen: 24
                          154.223.202.0/24 maxlen: 24
                          154.223.203.0/24 maxlen: 24
                          154.223.204.0/24 maxlen: 24
                          154.223.205.0/24 maxlen: 24
                          154.223.206.0/24 maxlen: 24
                          154.223.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 10:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123598 (0x1e2ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 25 09:25:41 2026 GMT
            Not After : Oct  2 09:25:41 2026 GMT
        Subject: CN=6a8d5f98-ea90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2a:e1:57:6a:89:07:7b:19:b0:94:22:20:0d:
                    6a:c4:90:21:e5:db:08:9b:c9:6a:d1:5f:81:4e:b3:
                    8b:88:31:03:21:9d:3a:e7:ab:5a:30:c2:8f:66:71:
                    00:47:71:79:13:03:7c:93:c3:d8:dd:3e:3f:9a:ba:
                    e6:27:43:04:de:c1:c9:cd:76:e5:65:ca:86:2e:86:
                    6f:f0:0a:07:3e:c1:fb:7e:92:3a:fa:fe:d1:72:6f:
                    68:cf:dc:d5:4f:2e:4c:f9:57:aa:be:02:cf:05:3d:
                    8a:4d:6c:66:5c:45:02:06:b2:e5:b1:37:fa:ce:03:
                    40:57:34:99:83:79:1d:74:34:3e:e8:45:e5:dc:f6:
                    0c:35:7c:87:3d:9a:43:49:f3:fd:0f:6c:c6:02:0d:
                    4c:f3:6c:b5:57:d8:ee:dd:18:f2:61:25:04:42:80:
                    5c:d9:96:eb:6c:c1:65:aa:48:4b:36:69:03:63:b8:
                    8f:60:87:60:3b:55:cb:80:d7:2b:42:23:a4:f5:8c:
                    fa:e7:75:40:e9:8e:ca:35:9b:dd:7e:76:2f:78:67:
                    eb:91:f6:7e:92:3e:35:64:a5:e8:a3:cf:5f:a0:5f:
                    71:fe:1d:af:fe:ea:b1:73:60:63:63:1b:75:b1:0a:
                    af:e0:7d:11:06:d8:37:da:68:47:31:95:2e:8f:02:
                    44:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1C:AB:8C:E3:68:6C:79:12:33:FD:EE:02:17:81:12:F8:EA:58:D3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2A5B238A06611F18CB41CB3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.244.0/22
                  154.223.198.0-154.223.207.255

    Signature Algorithm: sha256WithRSAEncryption
         3f:f7:58:45:9f:b0:1d:4a:ac:cd:45:d8:14:ee:b9:22:2a:90:
         0d:09:aa:24:39:1e:05:89:76:75:33:66:18:68:84:9b:00:7f:
         01:d1:38:fc:74:43:65:6c:ad:de:63:4d:a9:c5:ee:d1:23:7c:
         6d:98:c5:d6:a2:6a:4a:9d:34:57:bd:70:dd:0c:54:41:e8:67:
         44:5e:ff:85:72:8c:91:c2:97:2e:80:df:2f:4d:c2:17:74:e3:
         2d:6d:94:b3:48:26:41:7a:3e:fd:73:9b:6d:bb:13:a5:e8:cd:
         cc:0f:8d:e8:61:02:4f:c0:cd:2e:7b:d8:a5:f1:60:fe:13:72:
         c0:30:dd:3f:f4:e4:87:46:cd:47:d9:c9:39:c6:cb:6a:af:a0:
         1e:03:12:2e:ac:ad:f6:cf:f2:6c:33:f8:e7:b5:04:cd:01:26:
         7d:d0:0b:73:00:b1:5c:58:12:a1:ba:8c:8f:97:d0:4f:4b:19:
         6d:47:80:76:f8:51:cd:7a:b8:c7:0b:18:b3:74:4d:17:00:63:
         30:45:00:be:8f:de:b4:b6:c0:a6:63:01:06:f2:95:64:20:8e:
         e9:d6:52:8b:d5:a2:e4:5b:46:60:37:1a:fa:15:31:27:2b:d3:
         fe:e3:59:b0:8d:94:00:e3:42:e9:74:f3:46:10:d7:2b:dc:84:
         bd:51:2a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----