Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13150634BA3B11F1A132B502CF1D38B0.roa
File:                     13150634BA3B11F1A132B502CF1D38B0.roa (raw, json)
Hash identifier:          /NkQRyH7qNjWSiznkghwQOOb7fwhMuusIUKLdxe7xnA=
Subject key identifier:   32:88:38:83:9F:5F:BB:FE:15:7F:C2:8B:5D:C8:A0:23:31:66:58:34
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EAEA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13150634BA3B11F1A132B502CF1D38B0.roa
Signing time:             Sun 27 Sep 2026 06:17:12 +0000
ROA not before:           Sun 27 Sep 2026 06:17:07 +0000
ROA not after:            Sun 01 Nov 2026 06:17:07 +0000
asID:                     44559
IP address blocks:        154.203.224.0/24 maxlen: 24
                          154.205.225.0/24 maxlen: 24
                          154.205.226.0/24 maxlen: 24
                          154.205.227.0/24 maxlen: 24
                          154.205.228.0/24 maxlen: 24
                          154.205.229.0/24 maxlen: 24
                          154.205.230.0/24 maxlen: 24
                          154.205.231.0/24 maxlen: 24
                          154.205.232.0/24 maxlen: 24
                          154.205.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125674 (0x1eaea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 27 06:17:07 2026 GMT
            Not After : Nov  1 06:17:07 2026 GMT
        Subject: CN=6ab8b4e7-0358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:61:7d:c3:31:76:9d:ef:4b:75:ed:a6:f7:d0:
                    47:cf:0a:c8:ba:4b:84:0d:68:5b:62:75:98:8d:2b:
                    4d:8f:26:31:4f:00:0c:71:10:7b:6c:11:05:9d:b7:
                    6b:7b:5b:e1:ba:44:74:36:bd:db:43:03:d4:84:81:
                    1a:7d:7b:c0:df:bb:2f:e2:da:63:ac:52:40:a3:8a:
                    7c:7b:ea:04:57:30:4f:d8:ef:7a:cb:96:f3:9e:6b:
                    33:54:88:81:db:5d:1f:fa:c8:aa:fe:14:75:e2:0d:
                    bd:63:c6:bf:b8:3f:e4:12:0c:4e:ea:fa:85:8a:10:
                    35:6d:f7:77:78:05:1a:5a:84:6a:ae:74:33:08:97:
                    cf:b7:37:f1:55:5c:98:35:d8:a9:62:02:ee:64:73:
                    2b:31:ae:7a:39:6f:ac:cc:f5:b6:58:b5:c1:8a:1d:
                    7e:26:3f:eb:1d:0f:7d:aa:7c:9a:fa:45:85:6e:8c:
                    dc:12:a6:44:2c:3d:2d:81:09:e2:f4:ce:4e:09:cc:
                    93:cc:c9:3c:23:b9:0e:bc:ba:4c:c6:d8:c1:f9:fd:
                    05:5b:62:93:c1:af:f5:78:e3:fb:aa:42:16:e5:b2:
                    a0:4b:d3:07:9b:7c:9b:49:70:62:13:53:63:44:1c:
                    04:5c:3b:f3:6c:88:d8:2a:87:02:2c:eb:72:ff:be:
                    90:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:88:38:83:9F:5F:BB:FE:15:7F:C2:8B:5D:C8:A0:23:31:66:58:34
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13150634BA3B11F1A132B502CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.224.0/24
                  154.205.225.0-154.205.233.255

    Signature Algorithm: sha256WithRSAEncryption
         5c:10:f6:e3:47:85:10:87:a5:b7:ed:7f:d6:22:9c:94:66:d1:
         05:b5:fb:be:db:33:b6:b7:57:c8:bc:91:9b:d6:d0:b0:a5:7e:
         0e:b6:e4:50:e4:cc:53:27:ec:92:dc:b1:76:af:b2:79:36:8f:
         eb:a8:0e:ba:d5:51:ad:54:18:64:b6:6a:69:5b:1c:e2:25:14:
         90:3f:7a:08:91:ef:60:e8:7e:9a:da:1e:92:eb:a6:f6:c9:ae:
         eb:83:4f:7a:aa:67:7a:d4:a0:41:71:75:df:2f:4a:20:9d:e4:
         1c:11:a3:44:ce:27:1f:5a:05:e2:0b:61:d1:02:77:43:8c:c9:
         be:2b:b3:ed:5d:3e:85:ac:f3:97:4b:96:39:ce:ab:f8:9e:d7:
         21:af:7f:cf:39:25:8a:50:f3:d1:dc:5b:ce:bd:d8:61:64:cd:
         da:8d:7d:a9:57:0a:93:76:b2:9e:c4:2e:5d:9c:56:e0:38:94:
         d3:d8:7c:b5:88:72:96:54:5e:47:4e:c8:e2:ef:06:3d:17:f7:
         fd:f5:10:13:b0:a2:a0:19:1e:81:b3:09:8b:f5:5a:2b:c3:35:
         57:e2:53:98:f7:ff:ec:c4:56:aa:c6:26:7c:b3:79:3d:44:eb:
         e9:90:96:ce:64:b2:14:e0:27:b0:41:ad:a1:01:33:e4:bb:0a:
         b0:a1:52:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----