Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA7D6538A77511F1AA0E81F1CE1D38B0.roa
File:                     CA7D6538A77511F1AA0E81F1CE1D38B0.roa (raw, json)
Hash identifier:          2vc2x5rjvlTfHy/0mKj0vXDdFRNVdxIaoir7THUjkJk=
Subject key identifier:   75:C2:1E:8D:9F:19:67:94:7C:35:B3:E4:1B:5A:EE:1C:D6:96:58:2A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E50F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA7D6538A77511F1AA0E81F1CE1D38B0.roa
Signing time:             Thu 03 Sep 2026 08:59:38 +0000
ROA not before:           Thu 03 Sep 2026 08:59:34 +0000
ROA not after:            Sat 10 Oct 2026 08:59:34 +0000
asID:                     63139
IP address blocks:        154.223.22.0/24 maxlen: 24
                          154.223.25.0/24 maxlen: 24
                          154.223.27.0/24 maxlen: 24
                          154.223.30.0/24 maxlen: 24
                          154.223.31.0/24 maxlen: 24
                          154.223.36.0/24 maxlen: 24
                          154.223.38.0/24 maxlen: 24
                          154.223.39.0/24 maxlen: 24
                          154.223.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 12:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124175 (0x1e50f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  3 08:59:34 2026 GMT
            Not After : Oct 10 08:59:34 2026 GMT
        Subject: CN=6a9936fa-257f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:79:98:2d:d8:3e:cb:d6:8c:8c:8c:64:26:38:
                    51:ec:2a:2a:1f:e8:fd:d9:88:68:bd:7e:0b:17:55:
                    05:7c:08:5f:10:2d:ff:9a:6e:56:32:b8:82:6c:fe:
                    1a:6f:cd:9f:f5:a5:77:92:bd:e2:29:21:f8:5e:a0:
                    df:a8:b8:f0:19:d9:f5:17:91:82:6b:42:26:32:46:
                    34:ee:88:e6:f5:43:c0:b8:41:64:86:3d:98:be:70:
                    92:a2:fb:ef:cf:c8:49:fa:5d:3f:db:ec:05:de:38:
                    87:34:fc:c6:5e:4c:83:6e:57:01:67:3c:41:1b:6d:
                    29:48:57:52:61:33:2b:8e:38:b3:46:2c:ae:20:4c:
                    27:e4:a6:18:12:b2:ca:f1:59:cc:8e:d0:8f:4e:91:
                    34:8d:a0:08:79:03:25:23:df:bc:25:04:ea:15:6b:
                    db:dd:80:d7:24:da:16:63:5f:c0:16:b6:84:51:3c:
                    c1:e2:d6:2c:31:1d:1c:94:ef:70:4c:fa:5b:fb:c4:
                    8f:10:cc:bc:15:9b:e8:17:a7:97:63:f7:bf:df:8e:
                    1e:73:27:f7:40:15:e0:49:9b:30:27:56:9b:93:b3:
                    b6:3b:f1:36:5c:97:94:d5:6b:6a:12:f3:75:6d:59:
                    07:d0:1f:53:88:d5:4b:8b:5b:0f:a8:d8:36:86:8d:
                    dc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C2:1E:8D:9F:19:67:94:7C:35:B3:E4:1B:5A:EE:1C:D6:96:58:2A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA7D6538A77511F1AA0E81F1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.223.22.0/24
                  154.223.25.0/24
                  154.223.27.0/24
                  154.223.30.0/23
                  154.223.36.0/24
                  154.223.38.0/23
                  154.223.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:45:3e:b5:3a:1f:60:a0:c5:0a:57:59:c0:08:d0:9e:7b:6f:
         4d:6a:76:88:a3:eb:fb:8b:49:49:2e:22:58:fe:65:cd:e1:8b:
         68:23:6a:af:a1:56:5e:7c:91:19:19:13:c7:b2:f1:db:0b:ee:
         59:8b:d0:6e:0f:ea:f8:71:89:ba:c0:94:62:91:ac:68:e3:81:
         e7:65:9b:f9:92:2b:28:40:65:26:13:02:26:cc:2d:6f:fd:ca:
         86:9d:d6:df:74:8c:d5:49:5f:f1:f0:71:a3:e2:f1:d5:a8:cd:
         f5:5a:c2:31:91:10:08:46:f5:71:36:4c:17:b6:ad:ad:f1:1e:
         47:6e:03:cb:b6:8e:91:c9:b4:40:28:a3:60:20:59:7b:b1:6d:
         4e:ca:c6:8c:b6:52:56:67:cd:53:70:a7:63:35:98:89:5d:0d:
         6d:4b:9a:b8:80:c2:19:96:48:7d:16:b1:3e:5a:9f:d2:71:23:
         05:96:56:b3:86:d6:86:93:5d:09:94:5f:cb:4c:29:1e:4e:34:
         75:f0:af:a2:fd:a4:9b:46:5c:71:3a:1f:35:70:0c:62:27:e6:
         96:ee:d5:1d:03:61:1d:82:fb:f4:62:6d:df:d3:23:a1:51:da:
         c9:71:51:09:c1:8b:5d:ba:16:8c:7e:c0:ca:32:a3:df:35:f5:
         f5:58:f2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----