Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EB35CACBC9811F181F8DEEBCE1D38B0.roa
File:                     1EB35CACBC9811F181F8DEEBCE1D38B0.roa (raw, json)
Hash identifier:          M5sHFhuGA78Mo3OdvonlEXdwVWpzmfOr4TDaX/ULQXg=
Subject key identifier:   6F:F6:21:4E:BA:FA:0E:66:C3:37:4A:F5:E2:59:89:02:C6:4C:C3:57
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EB67
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EB35CACBC9811F181F8DEEBCE1D38B0.roa
Signing time:             Wed 30 Sep 2026 06:28:16 +0000
ROA not before:           Wed 30 Sep 2026 06:28:12 +0000
ROA not after:            Fri 06 Nov 2026 06:28:12 +0000
asID:                     44559
IP address blocks:        154.209.208.0/24 maxlen: 24
                          154.209.209.0/24 maxlen: 24
                          154.209.210.0/24 maxlen: 24
                          154.209.211.0/24 maxlen: 24
                          154.209.212.0/24 maxlen: 24
                          154.209.213.0/24 maxlen: 24
                          154.209.214.0/24 maxlen: 24
                          154.209.215.0/24 maxlen: 24
                          154.209.216.0/24 maxlen: 24
                          154.209.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125799 (0x1eb67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 30 06:28:12 2026 GMT
            Not After : Nov  6 06:28:12 2026 GMT
        Subject: CN=6abcac00-f45a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f6:84:9a:6e:26:5f:df:56:d9:b5:b8:bc:20:
                    6b:19:5f:52:45:29:32:6c:cb:ce:9e:a6:53:5b:14:
                    e6:06:ac:a2:1a:6b:b5:c4:3e:1d:b7:fe:d8:a6:20:
                    32:f8:8e:17:c7:c6:c1:2e:70:f9:c8:1c:d4:4c:6d:
                    fc:ce:27:69:41:6d:18:5f:0f:5f:96:7c:26:db:c4:
                    91:34:09:54:3c:61:4b:b7:e7:89:75:aa:28:fc:8d:
                    cd:8a:2f:b0:6d:d8:72:53:a9:e5:bb:9b:ea:08:93:
                    fe:25:8b:36:4c:c6:6d:5e:1f:a8:b8:1a:82:56:5d:
                    65:50:26:ee:7c:6d:c8:d8:a3:26:49:19:3e:d9:e8:
                    63:cf:aa:3c:1a:27:3e:58:cb:bf:71:9a:54:13:7d:
                    92:cb:22:fd:d8:89:ef:02:3b:61:0b:04:1a:30:fb:
                    fc:48:c8:2e:96:63:f2:0c:f7:f0:cb:46:7d:07:d8:
                    2d:6d:e2:21:7c:5a:43:20:3d:3c:ca:1d:58:cc:cb:
                    54:30:68:42:35:03:77:04:f3:05:5e:ca:a5:9f:4f:
                    d1:d5:b0:db:d9:ec:d5:f5:d8:ce:bf:fc:f6:2e:64:
                    99:f6:f8:79:c6:fe:6a:e6:8a:7f:35:ba:2b:cf:e1:
                    26:af:de:23:41:65:e2:e2:b3:c4:d4:2a:60:a3:69:
                    1a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F6:21:4E:BA:FA:0E:66:C3:37:4A:F5:E2:59:89:02:C6:4C:C3:57
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EB35CACBC9811F181F8DEEBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.209.208.0-154.209.217.255

    Signature Algorithm: sha256WithRSAEncryption
         55:54:79:20:91:0a:52:cc:bc:f2:2a:8e:5b:1e:7a:85:ca:e1:
         a4:50:04:4c:f6:19:ab:f2:cb:d6:70:7f:28:6b:44:5c:bf:2d:
         c0:69:c5:44:79:79:07:35:fa:57:62:55:0d:42:78:ae:01:b4:
         89:eb:ed:8a:95:9f:34:e2:f8:67:24:59:45:f9:21:c0:01:04:
         56:04:80:a0:78:44:ce:6e:d9:00:53:1e:c4:0f:a9:4e:d9:d4:
         a3:45:f7:18:0e:de:b2:31:7c:cc:fc:2e:a4:eb:2a:e3:94:c5:
         1d:cd:55:6f:ea:eb:19:20:8f:e6:4c:8a:c9:34:53:35:6e:ae:
         a5:a8:0c:58:4a:16:c7:b3:02:22:ea:0a:8d:08:97:5e:93:f1:
         fc:a9:00:bc:84:e8:23:b8:b2:0d:1b:b2:44:66:87:81:72:b1:
         b8:37:67:66:48:9f:0c:44:b7:21:bc:a8:ec:48:02:63:26:9b:
         3a:18:d6:4e:cb:63:18:95:42:88:c1:89:2f:e9:78:dc:33:dc:
         19:85:f4:d9:89:2c:36:ad:2a:5e:c9:0f:d5:c7:9e:c3:93:66:
         44:71:b5:30:cf:ee:e9:e4:45:f6:07:f8:7b:81:25:74:d7:a7:
         e4:1a:01:19:55:89:37:10:7c:76:34:84:3f:68:dc:c9:88:4e:
         13:8a:af:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----