Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C17031CAACF011F1B29157A2CE1D38B0.roa
File:                     C17031CAACF011F1B29157A2CE1D38B0.roa (raw, json)
Hash identifier:          RUcMVqpC6iUiOXLiJobtgyTtspmd0G8o439WoYXBHfY=
Subject key identifier:   D6:D5:1D:4A:34:56:1B:C0:25:3C:FF:7E:38:DB:B6:28:4C:0F:DC:78
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E706
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C17031CAACF011F1B29157A2CE1D38B0.roa
Signing time:             Thu 10 Sep 2026 08:22:27 +0000
ROA not before:           Thu 10 Sep 2026 08:22:22 +0000
ROA not after:            Sat 17 Oct 2026 08:22:22 +0000
asID:                     22773
IP address blocks:        154.202.14.0/24 maxlen: 24
                          154.202.92.0/24 maxlen: 24
                          154.202.93.0/24 maxlen: 24
                          154.202.94.0/24 maxlen: 24
                          154.202.95.0/24 maxlen: 24
                          154.202.96.0/24 maxlen: 24
                          154.202.97.0/24 maxlen: 24
                          154.202.98.0/24 maxlen: 24
                          154.202.102.0/24 maxlen: 24
                          154.202.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124678 (0x1e706)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 10 08:22:22 2026 GMT
            Not After : Oct 17 08:22:22 2026 GMT
        Subject: CN=6aa268c2-0552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:56:31:f6:87:fb:5c:c6:18:22:4f:64:bb:97:
                    1e:16:07:5c:fa:79:c8:c5:3e:55:2c:8b:74:59:80:
                    a0:c2:2e:51:5d:93:42:72:5d:81:c0:cc:01:f3:af:
                    06:c1:ba:1b:7a:6e:32:05:8c:bf:8e:59:73:70:da:
                    bf:62:ce:56:4e:c3:9c:61:b0:29:7b:3c:f3:28:6e:
                    5f:a6:d7:49:00:27:22:1d:6f:06:d6:59:6d:f8:5c:
                    45:cc:5c:9d:2b:2c:9c:22:85:fd:dd:77:90:a9:6f:
                    23:79:ce:6e:b2:80:82:53:0a:4d:16:2a:56:7a:e3:
                    de:d2:4c:80:29:07:d4:35:82:3b:10:97:82:e4:7b:
                    39:23:87:98:6c:a9:fe:fc:63:5d:5a:38:56:38:91:
                    97:9e:a5:67:bd:4a:00:a9:7a:97:4e:4d:bb:e8:11:
                    13:c5:2e:d0:83:04:29:9f:41:82:85:90:dd:f5:ba:
                    d7:1e:1c:8a:1a:e0:26:cd:d8:fd:bd:6d:e3:11:81:
                    a3:7e:27:1c:c2:1d:86:d8:a6:d7:e8:a1:4b:45:5f:
                    e1:8b:0d:a6:a8:63:f8:50:b0:74:32:9e:12:af:a1:
                    b8:3d:49:24:70:a1:90:79:8e:26:c2:53:84:9f:c6:
                    57:67:9e:8b:1f:47:15:ad:30:a9:b3:a8:e1:37:9a:
                    76:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D5:1D:4A:34:56:1B:C0:25:3C:FF:7E:38:DB:B6:28:4C:0F:DC:78
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C17031CAACF011F1B29157A2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.14.0/24
                  154.202.92.0-154.202.98.255
                  154.202.102.0/24
                  154.202.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:bd:c1:8d:70:92:62:1e:52:48:e9:8d:a0:c0:25:ff:f8:8f:
         ae:c7:9b:66:58:c2:f4:c7:0a:5e:0e:33:88:56:12:d3:16:17:
         6f:b6:ce:38:5a:7c:e4:92:75:e3:d8:db:06:0e:5c:1f:56:ec:
         f3:26:1d:70:38:db:60:75:8f:51:32:22:0d:5a:92:1a:7a:45:
         44:a7:3a:ac:ec:01:ec:3a:f9:4e:ba:58:8a:b4:c1:c4:f2:a8:
         7f:ff:06:a2:89:bd:71:cf:ed:43:de:cb:41:14:b6:08:6c:07:
         b1:a0:ea:b8:a8:ce:48:81:7f:51:53:4d:c7:dc:8f:35:4f:24:
         90:1a:fd:29:1d:6f:36:13:ce:07:a6:c5:e3:a3:71:08:36:e7:
         14:0f:fa:0a:ec:0f:32:3a:90:98:cd:ab:3b:76:20:a3:cb:09:
         a9:f2:b5:28:30:6a:b8:25:28:79:12:10:1a:2d:31:c0:83:33:
         56:d2:df:6a:17:c7:19:a3:4c:17:b6:ee:61:3b:dd:db:86:4b:
         54:ac:c9:a9:ff:9e:e9:f7:2e:46:e3:10:cd:2f:bd:f2:0c:71:
         5c:69:f1:fc:2a:c4:d9:e0:2d:f1:73:04:31:a5:9a:20:0f:d4:
         65:a8:d0:e0:80:96:a5:1d:ec:58:36:72:74:10:a0:2a:74:9d:
         47:ce:3c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----