Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23611D90B5BB11F18C3162A0CE1D38B0.roa
File:                     23611D90B5BB11F18C3162A0CE1D38B0.roa (raw, json)
Hash identifier:          0RluowycaBIINqArGs5Stz8cFISQaPg+WO3tNPzy4jQ=
Subject key identifier:   19:1E:E1:65:2A:9C:A7:F1:AD:90:91:1D:75:E5:7C:D6:D1:67:2A:81
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E9CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23611D90B5BB11F18C3162A0CE1D38B0.roa
Signing time:             Mon 21 Sep 2026 12:51:18 +0000
ROA not before:           Mon 21 Sep 2026 12:51:14 +0000
ROA not after:            Thu 20 Sep 2029 12:51:14 +0000
asID:                     17561
IP address blocks:        154.207.157.0/24 maxlen: 24
                          154.207.158.0/24 maxlen: 24
                          154.207.160.0/24 maxlen: 24
                          154.207.162.0/24 maxlen: 24
                          154.207.164.0/24 maxlen: 24
                          154.207.167.0/24 maxlen: 24
                          154.207.172.0/24 maxlen: 24
                          154.207.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125390 (0x1e9ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 21 12:51:14 2026 GMT
            Not After : Sep 20 12:51:14 2029 GMT
        Subject: CN=6ab12846-750e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fc:51:da:f7:e2:3c:68:bf:6d:ec:b3:25:f0:
                    a1:69:13:46:24:7e:58:ab:c1:a0:4e:1d:76:7b:bf:
                    3d:a1:bc:41:be:1a:97:9e:b6:b7:25:2d:64:56:69:
                    5a:de:af:d5:d5:04:b2:ed:57:08:5b:32:c8:27:36:
                    1d:2a:54:96:73:f3:52:bc:12:8c:2d:e3:0c:c7:44:
                    d3:25:56:ba:5f:6d:75:48:88:3f:c0:5b:54:2f:b8:
                    5a:1b:0a:c4:3b:d3:40:fe:50:4c:7d:82:ed:d4:fc:
                    52:d8:fe:5f:bc:74:dd:0a:57:43:54:f2:67:50:94:
                    2a:c2:91:53:77:3c:74:ae:09:7f:fa:84:a0:bc:3a:
                    3a:d7:ad:36:a2:fa:fc:d0:0d:25:79:a9:6d:16:de:
                    ba:6c:30:1b:8f:ec:ab:44:7a:ce:68:12:2c:37:a8:
                    d1:bd:35:84:ef:e8:35:cb:0f:de:5f:28:ab:92:b5:
                    0e:b3:9f:99:e2:21:fd:64:e4:51:73:8b:5e:72:ac:
                    3b:d9:bc:b0:00:1c:fd:af:0d:52:b3:30:c0:4b:a4:
                    bc:0f:5e:94:06:e4:c4:94:db:97:d3:7c:f8:41:ad:
                    ff:cf:8d:30:35:89:00:65:c6:c8:7b:38:19:3b:d6:
                    3d:96:b8:dc:43:5c:82:f1:ee:3d:92:cd:06:45:b4:
                    30:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:1E:E1:65:2A:9C:A7:F1:AD:90:91:1D:75:E5:7C:D6:D1:67:2A:81
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23611D90B5BB11F18C3162A0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.207.157.0-154.207.158.255
                  154.207.160.0/24
                  154.207.162.0/24
                  154.207.164.0/24
                  154.207.167.0/24
                  154.207.172.0/24
                  154.207.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:e2:b3:33:f1:e4:ac:23:6a:57:1d:38:3e:03:8e:6f:ed:88:
         68:e5:df:bc:c6:36:41:90:6d:9f:1d:60:f3:31:df:83:09:23:
         9d:49:5c:c8:b7:1f:ff:33:83:fc:4b:85:76:c3:e5:1d:66:33:
         b1:8a:19:5f:38:ef:dc:ee:a6:69:b1:bc:8c:bc:d2:e2:a7:00:
         5b:f7:d5:8a:d8:a9:55:ef:c4:3b:4e:4b:82:1f:68:c1:33:33:
         e9:c2:9a:c2:56:df:ff:8b:3c:62:8e:43:f5:e4:a0:2f:9c:e2:
         ac:6f:7e:30:7b:50:a9:3b:80:e2:e0:02:ce:04:98:50:f2:37:
         de:2c:3c:2b:d6:e1:34:7c:d9:56:a3:0b:6f:44:f9:dd:a0:5e:
         37:ee:1e:65:54:f5:51:89:45:00:c9:0f:34:8b:49:77:f9:c5:
         51:2a:52:be:57:34:63:ce:97:6d:d7:56:1a:d6:43:58:8b:d0:
         ac:23:23:d9:67:d2:d6:77:49:d4:c9:cd:cc:cf:69:ef:11:80:
         36:4f:66:db:5d:66:8f:37:85:68:0b:57:76:da:43:f5:22:83:
         27:3e:93:95:e2:b6:65:11:c5:32:bc:71:1c:cb:ac:8c:15:6c:
         ea:ba:e3:c5:47:bc:9d:f4:4f:6a:d9:25:dc:c8:db:88:75:0d:
         25:a3:1f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----