Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26D9AE3EBCA911F18CDFCBD9CE1D38B0.roa
File:                     26D9AE3EBCA911F18CDFCBD9CE1D38B0.roa (raw, json)
Hash identifier:          EGEPqeXGG/QL9XZmPGzpGVo7ZtmTEL8S/gmT6x3ufgI=
Subject key identifier:   81:28:75:01:D6:91:D9:C0:98:37:C4:F4:D5:96:BE:05:CB:ED:CA:93
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EBAC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26D9AE3EBCA911F18CDFCBD9CE1D38B0.roa
Signing time:             Wed 30 Sep 2026 08:30:12 +0000
ROA not before:           Wed 30 Sep 2026 08:30:07 +0000
ROA not after:            Fri 06 Nov 2026 08:30:07 +0000
asID:                     202656
IP address blocks:        154.219.214.0/24 maxlen: 24
                          154.219.215.0/24 maxlen: 24
                          154.219.216.0/24 maxlen: 24
                          154.220.1.0/24 maxlen: 24
                          154.221.1.0/24 maxlen: 24
                          154.221.53.0/24 maxlen: 24
                          154.221.54.0/24 maxlen: 24
                          154.221.55.0/24 maxlen: 24
                          154.222.46.0/24 maxlen: 24
                          154.222.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125868 (0x1ebac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 30 08:30:07 2026 GMT
            Not After : Nov  6 08:30:07 2026 GMT
        Subject: CN=6abcc893-45f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b8:a7:95:4e:79:66:75:d3:f8:da:7d:8a:0c:
                    37:90:1e:8d:2f:94:c9:46:56:22:7b:95:65:0e:f1:
                    fb:d3:5d:1c:e7:c6:40:77:80:f8:25:07:eb:a0:f7:
                    a8:8a:44:2c:d2:9a:e6:30:d5:a0:d9:91:f3:a6:87:
                    90:df:e3:5f:73:37:44:be:c8:bc:e5:bd:2d:2b:25:
                    80:6f:e0:67:26:5b:ef:34:17:14:c2:29:92:94:6a:
                    d4:43:5f:5b:0d:0a:2b:7e:74:c3:15:4e:2a:eb:59:
                    ad:e1:8f:d2:92:bf:f1:bb:0d:ad:3a:26:2e:9b:29:
                    c6:6d:ff:6f:a3:f7:69:c2:d5:80:41:93:29:26:5c:
                    f8:24:b1:9c:91:21:e8:ff:90:d5:8e:48:ca:68:0b:
                    b0:8b:39:f3:af:da:b9:06:2f:90:88:8e:d5:1a:8b:
                    8f:d9:28:59:a2:ee:b3:70:7b:22:af:d0:77:d8:ca:
                    4d:54:db:99:fe:9d:79:b6:2c:a4:22:21:2f:d4:c8:
                    63:e5:16:59:8c:58:61:65:01:d4:e5:55:b3:cf:4c:
                    b5:0c:24:22:c7:e0:8e:82:13:24:5e:fd:24:f6:03:
                    02:4a:df:84:55:86:98:72:26:33:27:78:8c:15:f5:
                    f7:ff:84:12:d1:bc:dc:65:b1:03:4e:4f:e0:0d:71:
                    29:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:28:75:01:D6:91:D9:C0:98:37:C4:F4:D5:96:BE:05:CB:ED:CA:93
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26D9AE3EBCA911F18CDFCBD9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.219.214.0-154.219.216.255
                  154.220.1.0/24
                  154.221.1.0/24
                  154.221.53.0-154.221.55.255
                  154.222.46.0/24
                  154.222.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:6a:f6:46:87:f3:d8:ba:e6:b8:b8:f0:6e:e3:ff:31:f6:b0:
         9c:b8:ad:bd:32:dd:8b:51:05:21:7e:69:3a:61:3b:6f:34:73:
         bb:9a:ee:1c:b9:d2:6f:fa:38:bc:ee:ba:7f:99:06:75:d8:08:
         91:5a:e5:fa:22:ba:f8:27:26:88:03:2e:2d:8b:0a:17:88:da:
         d9:95:9d:20:49:95:45:ef:7b:cd:d0:77:5c:14:7d:dd:df:8f:
         b8:b9:22:96:f9:0a:eb:c9:50:07:4d:e0:a6:0d:c1:2a:b9:d2:
         8f:91:2d:0c:3e:ee:70:a4:3e:4d:ed:14:5b:35:7d:45:17:15:
         28:0f:5b:35:79:df:4e:8a:3e:1e:97:7e:19:55:fe:0b:d5:e9:
         f1:fd:48:dd:9b:ea:79:af:2c:6d:0f:34:05:15:be:04:e3:a4:
         6e:7a:80:48:ad:be:d6:3e:5d:5c:d2:85:7f:6d:34:a2:1f:57:
         f0:d5:18:c3:98:86:98:73:c7:25:ac:4e:df:cf:39:c5:1b:d2:
         ec:f7:13:47:06:7c:f1:c0:e6:5f:e8:df:43:24:4a:de:57:14:
         60:1e:79:0c:78:1c:59:ab:d3:42:bd:22:7f:4e:dd:a7:37:3c:
         1d:25:db:43:38:a7:f4:05:18:e9:ff:4b:f6:8e:5e:bf:03:cf:
         7f:7b:44:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----