Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD568A8CA05111F196F35AB6CE1D38B0.roa
File:                     FD568A8CA05111F196F35AB6CE1D38B0.roa (raw, json)
Hash identifier:          ZtX2WV0jYfTrZWwyl33FH704IMof5NOxGDLwMZPTb1c=
Subject key identifier:   EC:D2:50:33:E6:AA:9A:3E:51:4A:73:EA:F0:44:E2:A9:18:42:4B:D0
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E275
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD568A8CA05111F196F35AB6CE1D38B0.roa
Signing time:             Tue 25 Aug 2026 06:55:43 +0000
ROA not before:           Tue 25 Aug 2026 06:55:39 +0000
ROA not after:            Wed 16 Sep 2026 06:55:39 +0000
asID:                     17497
IP address blocks:        154.196.156.0/22 maxlen: 24
                          154.196.172.0/22 maxlen: 24
                          154.197.16.0/21 maxlen: 24
                          154.197.16.0/24 maxlen: 24
                          154.197.17.0/24 maxlen: 24
                          154.197.18.0/24 maxlen: 24
                          154.197.19.0/24 maxlen: 24
                          154.197.20.0/24 maxlen: 24
                          154.197.21.0/24 maxlen: 24
                          154.197.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 11 Sep 2026 10:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123509 (0x1e275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 25 06:55:39 2026 GMT
            Not After : Sep 16 06:55:39 2026 GMT
        Subject: CN=6a8d3c6f-08e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:69:dc:c5:4c:45:13:21:e5:b4:cc:e4:c6:e4:
                    04:2f:a7:02:da:9d:69:b1:ec:c1:cd:51:f2:a7:f8:
                    ad:1d:c5:8e:34:04:bb:3c:63:34:0d:d2:5c:c9:7e:
                    9c:9b:90:b0:39:f1:90:cb:8b:af:b1:54:19:fe:bd:
                    68:18:89:8d:68:5c:b6:4b:90:1d:c0:5f:b4:11:f4:
                    9f:c2:85:d7:12:d6:b9:b2:99:81:26:f8:88:61:11:
                    90:9e:92:52:8d:6e:90:1a:0d:5d:63:cc:9e:a3:98:
                    16:fb:a9:36:54:9f:56:97:62:87:30:bd:c8:fe:e2:
                    33:22:d1:ad:84:94:2a:d6:ee:43:07:0b:e6:52:1f:
                    55:fc:d8:3a:24:51:e6:94:fe:8e:b9:f5:9b:bf:91:
                    f5:8b:cd:0d:8b:80:6e:0a:3f:72:e0:1a:6a:ff:b6:
                    df:1e:c4:57:07:2e:01:99:41:33:d8:c6:ca:b2:50:
                    d8:51:09:1b:0c:1a:f7:6e:dc:40:52:30:76:6e:c7:
                    d3:2c:da:3c:37:41:59:ef:09:63:05:24:70:9d:23:
                    74:18:5d:f7:6b:7b:a9:06:6d:c8:9e:2b:1f:ce:4f:
                    f8:43:44:22:ba:56:d5:9f:94:11:dd:de:84:34:8d:
                    33:ec:aa:4a:ad:2b:61:f0:e0:63:3b:cc:1a:7c:75:
                    d0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D2:50:33:E6:AA:9A:3E:51:4A:73:EA:F0:44:E2:A9:18:42:4B:D0
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD568A8CA05111F196F35AB6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.156.0/22
                  154.196.172.0/22
                  154.197.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:81:5e:ca:13:ed:a4:b1:83:59:c4:46:47:c9:e3:81:5f:fa:
         e2:ef:5f:ca:9d:b8:16:40:85:5d:42:24:59:3e:36:7e:fa:bb:
         b7:6a:dd:75:30:ea:6e:2c:1c:5f:53:7a:4d:14:0c:d4:ec:03:
         76:c2:89:80:06:18:32:63:b2:89:10:70:db:2b:4e:bf:16:28:
         43:28:16:3c:3b:06:de:f3:35:c7:ee:c2:1a:d3:26:ad:dd:ae:
         33:9a:5d:93:58:c7:5a:5c:46:ea:a1:68:1e:05:78:9f:b0:c1:
         2f:e7:7a:03:b9:59:ff:57:c8:63:fc:5a:28:70:d2:08:70:1a:
         f7:73:da:14:20:85:15:06:3d:b5:f7:69:7d:bc:ff:9b:53:d9:
         18:fd:36:d6:04:7b:70:60:9a:fd:d9:4f:45:57:2e:f0:eb:24:
         67:8e:ce:25:e1:9e:3c:80:cb:87:c0:f6:fc:b1:d3:2d:55:34:
         40:00:03:37:a6:aa:24:77:be:9b:2f:e9:1d:1b:3a:d0:96:4f:
         92:82:73:16:c0:04:a9:ee:04:c4:4b:06:64:c6:f9:ab:4a:e3:
         12:fa:ec:f7:6e:f5:82:df:e2:b3:be:a2:a1:62:6d:4a:a1:7d:
         33:aa:38:e2:8e:f2:be:a4:38:81:03:03:99:1e:f2:5d:b5:e5:
         53:d5:66:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----