Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6EB45CA9F8411F1B51B80DBCE1D38B0.roa
File:                     F6EB45CA9F8411F1B51B80DBCE1D38B0.roa (raw, json)
Hash identifier:          +DTrved2miQ4XUXq6aTjGluHM2fpCZwch5XQXZrIWro=
Subject key identifier:   24:A8:97:8B:D1:5E:45:1B:D1:25:F3:6E:72:B2:66:3F:2D:01:DE:AA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E1E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6EB45CA9F8411F1B51B80DBCE1D38B0.roa
Signing time:             Mon 24 Aug 2026 06:28:06 +0000
ROA not before:           Mon 24 Aug 2026 06:28:01 +0000
ROA not after:            Thu 01 Oct 2026 06:28:01 +0000
asID:                     62240
IP address blocks:        154.194.117.0/24 maxlen: 24
                          154.195.113.0/24 maxlen: 24
                          154.195.141.0/24 maxlen: 24
                          154.195.142.0/24 maxlen: 24
                          154.196.63.0/24 maxlen: 24
                          154.196.65.0/24 maxlen: 24
                          154.196.66.0/24 maxlen: 24
                          154.196.67.0/24 maxlen: 24
                          154.196.69.0/24 maxlen: 24
                          154.196.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 11:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123364 (0x1e1e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 24 06:28:01 2026 GMT
            Not After : Oct  1 06:28:01 2026 GMT
        Subject: CN=6a8be475-0463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:92:2c:e9:f7:c8:cf:dc:51:b8:18:81:12:d1:
                    6b:ae:80:49:5b:df:4a:b0:be:97:a7:ef:f5:58:6c:
                    ff:35:35:5c:44:a1:bd:72:d5:2b:fc:04:a2:b8:99:
                    32:cf:53:a8:e6:d7:80:26:d0:d5:b7:f2:55:92:cd:
                    ba:6e:b1:8f:52:77:99:f8:b0:7d:fd:5d:f8:8c:85:
                    61:85:87:be:5a:89:c2:4c:2c:eb:fc:2d:a3:6d:05:
                    79:14:31:9a:6a:a2:1c:f2:f0:a3:5b:db:ef:3d:79:
                    bc:d0:26:5a:fc:ae:2e:0f:4f:82:e4:77:42:5e:ff:
                    ba:47:db:dd:c7:af:3b:66:30:48:8d:2d:a9:68:7e:
                    27:e0:40:1f:34:c2:bc:bc:ac:ba:b2:29:92:fd:31:
                    34:87:72:b4:27:4c:12:92:44:82:06:a0:7a:b8:df:
                    f5:51:cb:70:b8:92:7b:f9:2e:b4:1c:d4:2a:45:1e:
                    7a:29:95:c3:c4:e9:52:80:4a:83:5a:4a:2e:ba:cf:
                    09:f5:c8:b1:f2:56:80:06:81:dc:31:6c:da:86:3c:
                    54:21:6b:bf:cc:12:00:3e:1e:63:c1:d4:d7:2c:68:
                    fa:31:aa:01:6d:3b:10:53:8f:ef:f6:fe:6c:17:e1:
                    b0:d4:3a:96:45:9c:cd:12:b5:df:79:4f:3b:63:95:
                    d6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A8:97:8B:D1:5E:45:1B:D1:25:F3:6E:72:B2:66:3F:2D:01:DE:AA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6EB45CA9F8411F1B51B80DBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.117.0/24
                  154.195.113.0/24
                  154.195.141.0-154.195.142.255
                  154.196.63.0/24
                  154.196.65.0-154.196.67.255
                  154.196.69.0/24
                  154.196.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:02:03:2e:dd:db:5c:74:2c:48:b3:59:9b:cc:68:17:e0:32:
         ea:b5:74:e4:ff:fd:f1:1b:3b:2e:67:b4:70:42:a7:ea:13:8d:
         fb:5d:b1:bb:d8:f4:84:ee:67:be:5e:24:b7:6b:83:89:f2:bf:
         ed:32:d9:cc:5f:f2:f4:06:ef:00:34:2d:61:f9:10:73:fb:23:
         f2:14:cd:30:9c:70:17:9a:2e:07:76:f3:67:bf:ee:93:68:94:
         39:68:e9:1e:b5:f7:3e:b5:92:89:39:d1:a9:49:c5:60:f4:88:
         64:cc:61:00:b2:71:27:92:8d:87:f9:9f:e3:e5:55:64:14:22:
         5d:13:9b:e7:8c:f5:12:c8:df:b3:28:d0:ef:b8:fb:71:5e:cb:
         90:b5:ce:45:e6:7b:21:6d:b2:86:ce:ed:3e:0d:74:eb:8f:2d:
         0b:82:8a:27:fc:1a:ef:c0:65:53:68:d6:e4:c9:36:3a:f8:aa:
         59:a1:b0:83:14:9f:97:c2:c6:91:04:c9:6a:4e:02:d3:6b:9d:
         d9:40:90:4d:c2:2b:3a:64:e4:41:30:37:4f:77:a1:68:db:2b:
         7b:33:12:25:12:66:6d:37:f9:67:e3:7e:69:31:aa:af:e6:1f:
         a8:87:dd:30:4c:11:18:70:04:0f:19:bc:14:27:f3:37:82:4b:
         34:8a:59:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----