Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3239034CA6AB11F1B163B3A6CE1D38B0.roa
File:                     3239034CA6AB11F1B163B3A6CE1D38B0.roa (raw, json)
Hash identifier:          GjBaBSmDwkoF5Ty/ED6S4XJ9pIECIQ7waimUUR0EzZc=
Subject key identifier:   1B:26:D9:D9:99:B1:5C:02:02:B8:D1:A9:15:3A:42:13:FF:9F:CE:3D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E49B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3239034CA6AB11F1B163B3A6CE1D38B0.roa
Signing time:             Wed 02 Sep 2026 08:49:24 +0000
ROA not before:           Wed 02 Sep 2026 08:49:20 +0000
ROA not after:            Sat 01 Sep 2029 08:49:20 +0000
asID:                     17561
IP address blocks:        154.211.84.0/24 maxlen: 24
                          154.211.85.0/24 maxlen: 24
                          154.211.86.0/24 maxlen: 24
                          154.211.87.0/24 maxlen: 24
                          154.211.88.0/24 maxlen: 24
                          154.211.89.0/24 maxlen: 24
                          154.211.90.0/24 maxlen: 24
                          154.211.91.0/24 maxlen: 24
                          154.211.92.0/24 maxlen: 24
                          154.211.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 12:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124059 (0x1e49b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  2 08:49:20 2026 GMT
            Not After : Sep  1 08:49:20 2029 GMT
        Subject: CN=6a97e314-635c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:96:22:3e:bd:7d:71:88:f6:be:d5:8e:18:38:
                    3a:16:d7:0c:25:79:11:38:28:da:d1:cb:d4:02:12:
                    1d:e2:5b:99:e8:f4:5d:04:8e:83:48:1a:ad:64:bf:
                    82:76:4d:60:3b:41:d8:a0:5b:95:96:41:a6:08:8a:
                    2a:20:d1:fe:ee:b7:61:fb:e9:18:59:67:44:ad:c6:
                    33:1c:49:ea:8b:3b:a9:e4:74:9e:c6:1c:74:d7:88:
                    e0:db:09:fa:c6:d3:88:c5:5f:14:c0:f6:99:a8:1a:
                    74:16:ff:d7:06:c8:ba:56:90:7b:76:8f:65:fa:f9:
                    14:4a:c6:55:ad:dc:16:cf:69:e2:e5:c9:c7:e1:29:
                    c9:ad:51:3b:b6:ce:ef:4d:67:60:d0:f4:16:92:78:
                    9a:94:c5:e2:19:af:56:1f:74:b2:b7:b5:aa:f3:c1:
                    31:3c:65:24:af:b6:70:e6:c0:b1:ae:1e:da:7d:b9:
                    57:e1:77:03:0c:0a:12:6a:8c:59:d6:89:35:fd:d3:
                    5d:22:eb:f9:21:07:30:ef:e2:5a:fa:93:7e:16:c6:
                    12:35:d7:24:75:64:69:0d:55:3d:41:12:ee:f2:a9:
                    ee:1f:85:ab:d7:04:87:4c:94:fb:2c:51:3f:33:d3:
                    19:75:c0:d6:43:9f:52:74:98:69:9f:0a:29:71:62:
                    66:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:26:D9:D9:99:B1:5C:02:02:B8:D1:A9:15:3A:42:13:FF:9F:CE:3D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3239034CA6AB11F1B163B3A6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.211.84.0-154.211.93.255

    Signature Algorithm: sha256WithRSAEncryption
         09:dc:41:fb:44:f2:6d:be:30:d8:a1:98:88:eb:ac:14:08:b4:
         f1:7e:de:01:6d:58:2f:bb:5a:f9:cc:ae:9b:71:d3:4d:5e:3b:
         d2:9d:89:88:a9:7e:c9:91:dd:e3:02:be:9a:5b:8c:bc:2b:a2:
         b4:ec:3f:05:52:88:33:6c:0c:b5:1b:37:86:a3:7a:f1:19:cc:
         36:0e:27:08:ca:99:dd:67:33:2a:ef:9c:9c:f5:e8:55:6d:86:
         fa:3b:59:91:c3:5e:3c:37:f5:97:47:dc:ac:47:89:5b:6a:5e:
         b0:c3:84:74:57:5a:e6:55:86:b8:51:df:5e:ff:34:31:c8:1c:
         b7:1a:d6:fb:25:7b:11:22:d4:3e:3d:3d:1e:5e:e9:94:5f:6e:
         1e:75:d3:4c:c9:1c:67:45:1a:17:e7:4e:4d:17:a8:c8:d1:e4:
         b2:fc:dd:0b:56:34:59:22:f7:a5:aa:77:4c:29:fd:66:fc:47:
         41:b3:46:46:8b:b2:bb:e7:af:35:e3:50:6f:93:a1:12:9c:2a:
         57:26:d4:93:dc:08:31:a7:94:52:55:f1:d0:bf:dc:e5:cc:2f:
         b1:ed:98:bb:95:38:98:4d:e9:b5:c1:3d:05:a5:3f:e0:f7:0d:
         cc:ef:21:a9:33:3f:d8:f5:05:f2:97:70:3a:31:4f:4c:00:49:
         41:d3:bb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----