Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81DB3298A6D411F18897DA19CF1D38B0.roa
File:                     81DB3298A6D411F18897DA19CF1D38B0.roa (raw, json)
Hash identifier:          Lysnl8A7Zk437M631b2R5ifMQup9fMcrAIWrFp5ONeY=
Subject key identifier:   9D:A1:B4:67:06:71:26:86:8C:59:37:03:3D:AA:92:16:6F:7A:49:98
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E4D0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81DB3298A6D411F18897DA19CF1D38B0.roa
Signing time:             Wed 02 Sep 2026 13:45:07 +0000
ROA not before:           Wed 02 Sep 2026 13:45:03 +0000
ROA not after:            Fri 09 Oct 2026 13:45:03 +0000
asID:                     152698
IP address blocks:        154.204.55.0/24 maxlen: 24
                          154.204.63.0/24 maxlen: 24
                          154.205.186.0/24 maxlen: 24
                          154.205.252.0/24 maxlen: 24
                          154.205.255.0/24 maxlen: 24
                          154.206.10.0/24 maxlen: 24
                          154.206.13.0/24 maxlen: 24
                          154.206.19.0/24 maxlen: 24
                          154.206.20.0/24 maxlen: 24
                          154.210.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 13:46:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124112 (0x1e4d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  2 13:45:03 2026 GMT
            Not After : Oct  9 13:45:03 2026 GMT
        Subject: CN=6a982863-0c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:65:33:85:e9:af:9d:cb:ac:98:46:ce:2a:7d:
                    e3:fc:07:d9:69:8e:6c:a6:b6:c8:01:31:51:04:9e:
                    c5:0e:50:4f:f0:59:62:c6:13:4e:a8:6d:a4:29:37:
                    c5:20:33:76:b5:43:09:42:06:5e:7d:d5:b9:24:e1:
                    b0:21:71:63:f9:3d:b0:0d:ea:80:f2:1a:da:29:c2:
                    5c:13:4e:2f:ad:d4:3b:77:0c:11:6b:b7:be:2d:63:
                    d4:59:5e:8a:81:d1:fe:c8:80:a0:43:bc:a6:58:9c:
                    e2:8c:a7:fd:fd:13:4a:db:50:22:d8:49:2f:eb:5f:
                    bd:be:f5:6a:a7:15:ab:e3:1f:fe:c2:23:73:7d:a0:
                    cb:0d:23:b8:06:a0:12:a8:02:91:7f:5c:40:4f:14:
                    e4:43:0f:85:9d:67:a7:4c:ab:30:8b:3e:72:d1:42:
                    c6:62:2f:15:2e:e3:00:0a:e3:c2:bf:43:31:3c:d3:
                    e5:39:5b:94:f0:4e:f8:cf:0e:57:ba:e1:53:d9:68:
                    1d:aa:95:d1:c0:bb:3d:03:9b:8f:0a:cc:ba:39:ae:
                    75:80:c3:a9:bd:28:18:63:9a:5d:5a:e7:f4:18:3f:
                    0f:5c:33:b8:96:b1:df:8b:84:18:16:cb:01:23:82:
                    b3:5c:83:de:96:e3:48:5b:e0:c0:ff:24:6e:c8:35:
                    02:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A1:B4:67:06:71:26:86:8C:59:37:03:3D:AA:92:16:6F:7A:49:98
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81DB3298A6D411F18897DA19CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.204.55.0/24
                  154.204.63.0/24
                  154.205.186.0/24
                  154.205.252.0/24
                  154.205.255.0/24
                  154.206.10.0/24
                  154.206.13.0/24
                  154.206.19.0-154.206.20.255
                  154.210.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:9d:fb:37:54:78:6f:5a:44:c4:05:00:6e:27:2b:13:a4:5f:
         60:c9:73:21:c7:05:ef:7c:3a:ea:f8:bb:e6:6d:b5:09:cd:db:
         e4:88:0e:e0:c6:e2:36:61:a3:b4:a4:4b:d9:20:3d:e7:a3:95:
         38:00:b4:ac:35:ba:ac:2e:6b:da:e1:4f:88:ea:40:ba:10:c7:
         0b:8a:1c:1c:6c:22:6e:30:0d:dc:ab:06:50:b2:97:26:bb:56:
         fb:4f:03:1f:10:da:3f:7c:2b:81:f7:4f:5e:73:77:a7:07:4f:
         5d:f3:b6:d3:d6:e3:56:f1:6b:f6:1e:da:52:5f:0c:68:c0:24:
         2d:fe:b4:db:3d:bb:98:fa:6d:c3:8f:e0:ea:7b:fc:90:23:0c:
         ed:9b:a2:6c:0b:2b:78:fa:11:3d:05:a5:4b:4a:10:3f:16:84:
         f7:7c:17:5d:30:70:c1:fb:48:f1:43:3c:9c:c5:fd:51:e0:da:
         58:2c:b1:bb:e0:19:80:81:29:88:60:2e:87:00:5f:ef:20:a9:
         b7:41:69:70:67:65:08:5f:73:e3:b6:b6:72:9e:43:51:43:cb:
         34:93:71:38:58:3c:6b:74:84:4c:35:4d:2e:06:c1:53:e5:e7:
         ce:72:15:2e:32:70:f2:3c:41:3a:e6:1b:be:89:62:6c:23:7b:
         a0:dc:81:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----