Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0150F13ABF1111F1883FFC0ACF1D38B0.roa
File:                     0150F13ABF1111F1883FFC0ACF1D38B0.roa (raw, json)
Hash identifier:          6UcZHCDuLs3eKekVdnp2wn6IK3kRgbUDL+x7Cjzoo0o=
Subject key identifier:   BC:13:65:23:3E:7E:1D:77:D9:DB:CB:DA:87:9C:A1:3B:56:FC:94:CE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EBFC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0150F13ABF1111F1883FFC0ACF1D38B0.roa
Signing time:             Sat 03 Oct 2026 09:58:38 +0000
ROA not before:           Sat 03 Oct 2026 09:58:34 +0000
ROA not after:            Tue 10 Nov 2026 09:58:34 +0000
asID:                     154177
IP address blocks:        154.90.44.0/23 maxlen: 24
                          154.90.46.0/23 maxlen: 24
                          154.90.52.0/23 maxlen: 24
                          154.90.56.0/23 maxlen: 24
                          154.90.58.0/23 maxlen: 24
                          154.90.62.0/23 maxlen: 24
                          154.93.37.0/24 maxlen: 24
                          154.93.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125948 (0x1ebfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  3 09:58:34 2026 GMT
            Not After : Nov 10 09:58:34 2026 GMT
        Subject: CN=6ac0d1ce-ed62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:11:0a:bc:0b:5b:db:b9:40:35:c9:f9:ad:bd:
                    d7:2c:8e:24:da:6a:38:b7:c1:e1:74:b2:8a:8d:23:
                    7d:e9:65:20:ba:57:ff:1e:35:8a:63:d4:18:b2:1c:
                    97:7c:39:95:51:92:5f:8b:59:09:bc:5b:c2:4b:52:
                    79:e3:c1:dd:36:33:b3:9a:ed:75:e2:b2:72:d7:37:
                    6d:77:2b:49:e2:6b:ce:d3:df:05:8f:a6:b2:9f:3f:
                    e2:ed:f9:8f:97:28:f8:cd:b6:b4:d1:6b:9f:8c:ab:
                    50:f8:0a:a2:50:88:da:57:3d:78:a6:21:68:83:6b:
                    fb:b2:04:2c:52:6b:d4:6e:90:eb:10:0b:4c:0b:4f:
                    60:6e:4a:9a:b0:40:9a:ec:bb:82:06:28:81:9d:47:
                    60:35:0f:30:8e:05:cf:79:19:d9:79:d0:3b:4f:f1:
                    58:81:8f:e7:69:82:1c:b1:f2:04:88:1f:87:26:cc:
                    d2:cc:6d:9c:12:22:2c:64:32:16:3e:10:bd:a3:ee:
                    9e:3d:1d:eb:db:10:1b:d1:78:51:3a:cb:cd:bb:bf:
                    50:e4:7c:70:b7:98:d6:34:67:cb:64:33:7f:48:dd:
                    52:7a:dd:dd:af:ea:f9:75:81:d8:eb:f6:a6:e3:0b:
                    b3:06:aa:04:73:39:2e:e3:39:80:d6:31:7f:9d:dd:
                    8f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:13:65:23:3E:7E:1D:77:D9:DB:CB:DA:87:9C:A1:3B:56:FC:94:CE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0150F13ABF1111F1883FFC0ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.90.44.0/22
                  154.90.52.0/23
                  154.90.56.0/22
                  154.90.62.0/23
                  154.93.37.0/24
                  154.93.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:89:05:48:2e:8e:08:20:c7:72:51:05:6a:30:d3:d5:c6:53:
         bd:c2:d1:f2:a1:64:02:06:dc:b9:f6:c7:34:5f:63:46:12:29:
         d1:06:f0:c6:4a:45:71:7a:c7:bf:b3:c9:e4:d5:57:9c:c9:07:
         91:bd:2a:79:9e:45:a9:14:06:a9:cf:1f:c1:3e:24:58:e7:27:
         48:27:ef:65:07:9a:b5:e8:b6:15:49:68:f6:53:55:76:cf:e8:
         2a:51:73:4d:17:57:22:44:33:ee:e4:fa:fc:81:44:72:86:8f:
         32:e2:67:32:aa:84:2d:2e:88:ae:e1:2d:63:7b:53:d4:40:b1:
         13:c9:b4:89:fb:1c:a7:a8:1e:b8:30:54:53:0f:c9:ac:70:b0:
         d7:fd:a3:49:99:f9:75:b9:11:66:9b:b9:85:de:f2:a7:d0:d4:
         34:e1:06:3f:73:79:2f:51:a5:55:37:d9:4d:43:3e:6a:8f:3c:
         b0:da:0f:70:86:64:6d:43:78:48:e9:9d:6c:dc:82:2b:8d:68:
         0b:d0:2e:44:37:d4:4f:30:f2:7c:22:a6:c6:1a:b1:18:ec:c5:
         10:d8:e6:09:26:5e:81:74:e1:28:d2:8f:c3:e5:ef:4d:10:b8:
         8d:60:35:b2:99:c9:9e:8c:36:bd:75:3d:c2:47:96:16:86:ae:
         34:00:b5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----