Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C84E64CBCA411F1A04DCFB9CE1D38B0.roa
File:                     1C84E64CBCA411F1A04DCFB9CE1D38B0.roa (raw, json)
Hash identifier:          y9FAeVGGzsNm7p/jU8ffAUvbNHAKkzDdMXkig/aSuag=
Subject key identifier:   96:75:5B:77:A6:74:21:F7:B8:72:17:1B:7E:3E:89:B8:83:6D:67:D6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EB9B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C84E64CBCA411F1A04DCFB9CE1D38B0.roa
Signing time:             Wed 30 Sep 2026 07:54:07 +0000
ROA not before:           Wed 30 Sep 2026 07:54:03 +0000
ROA not after:            Fri 06 Nov 2026 07:54:03 +0000
asID:                     202656
IP address blocks:        154.219.227.0/24 maxlen: 24
                          154.219.228.0/24 maxlen: 24
                          154.219.229.0/24 maxlen: 24
                          154.219.231.0/24 maxlen: 24
                          154.219.233.0/24 maxlen: 24
                          154.219.234.0/24 maxlen: 24
                          154.219.235.0/24 maxlen: 24
                          154.219.236.0/24 maxlen: 24
                          154.221.62.0/24 maxlen: 24
                          154.221.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125851 (0x1eb9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 30 07:54:03 2026 GMT
            Not After : Nov  6 07:54:03 2026 GMT
        Subject: CN=6abcc01f-c352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6c:77:07:f2:f2:27:19:38:d3:4f:23:72:b2:
                    e1:aa:e7:d0:ba:1c:5d:1a:6b:6c:2e:1f:24:86:5d:
                    66:65:53:00:8b:c4:1b:94:a2:91:a3:7f:10:ce:aa:
                    34:c9:5a:5d:bb:38:f1:ec:22:f2:a4:67:ab:64:16:
                    c5:f3:c9:c1:0d:0d:e7:73:4a:de:05:6c:1a:a1:6d:
                    e8:91:44:69:e5:2b:1d:0d:4a:c7:52:0f:4c:e3:cb:
                    13:c0:26:bb:91:de:48:f6:14:1c:84:2b:7d:1b:39:
                    36:5b:3f:4f:6f:d0:27:6a:e6:22:7a:c0:14:65:79:
                    6c:d9:bb:d7:31:a4:aa:a4:cc:56:c4:80:e7:4c:75:
                    cc:4f:fe:e7:20:6b:42:9d:47:7b:3d:23:a9:4d:8e:
                    34:cc:55:d1:d7:75:9b:b3:8a:8f:f4:6c:a8:86:f4:
                    a9:81:cd:6c:3e:a1:90:14:48:e4:7f:5b:a1:57:6a:
                    51:fa:b4:fa:1a:3b:c8:00:91:74:f4:e1:0a:b4:df:
                    de:40:4a:d9:d1:9d:2c:77:42:b7:3b:58:75:1c:72:
                    c0:f4:e8:2d:23:31:71:ea:82:b7:53:b5:9b:8f:02:
                    93:ff:fc:7a:d0:69:61:a2:d4:7f:65:fd:35:95:85:
                    10:4d:ba:76:d9:d9:61:f4:36:49:cf:a1:30:63:8f:
                    b0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:75:5B:77:A6:74:21:F7:B8:72:17:1B:7E:3E:89:B8:83:6D:67:D6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C84E64CBCA411F1A04DCFB9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.219.227.0-154.219.229.255
                  154.219.231.0/24
                  154.219.233.0-154.219.236.255
                  154.221.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:8e:1d:34:50:4f:47:ba:33:81:a2:e7:c6:02:a4:07:07:d0:
         1e:13:e0:bb:c9:15:e7:9d:b7:cd:87:6e:64:82:9a:63:85:13:
         51:fb:a7:74:0c:1d:7f:93:42:de:22:f4:c4:72:7d:3d:10:33:
         5d:4d:22:ef:18:85:fc:3c:f0:1a:ec:36:18:61:65:ca:05:25:
         34:1e:bf:bb:63:a6:ab:2a:89:11:81:ee:17:18:94:05:9a:e8:
         b3:dc:a8:e0:d4:7c:45:3c:be:aa:3e:bc:98:63:8f:d3:56:5b:
         9b:f4:5a:a0:9c:70:23:71:99:7e:cd:8d:de:8a:b9:7d:71:15:
         01:2b:e9:5b:e2:5f:32:b3:c5:f2:6a:39:ac:65:00:b9:17:3b:
         a7:4d:52:96:7e:62:15:bc:ac:2b:d6:ee:e1:98:e9:5a:91:16:
         90:21:28:42:8f:fe:12:52:7f:23:ac:cf:3f:e1:0b:47:e1:51:
         b1:d0:eb:04:2e:f7:6c:b7:9a:dc:78:83:f3:ea:36:10:1f:5f:
         65:64:82:84:5c:78:b2:38:3c:71:c3:16:00:5d:48:b7:64:66:
         ef:ce:26:cb:34:43:b3:a3:d9:f4:2a:df:e9:fe:39:83:c2:b0:
         6c:6b:2e:3f:f9:15:3e:f5:17:82:82:e9:00:b5:b6:fa:9f:21:
         c1:e1:ad:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----