Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EDF2588CF7C11F1B314B202CF1D38B0.roa
File:                     2EDF2588CF7C11F1B314B202CF1D38B0.roa (raw, json)
Hash identifier:          Thl2NPnB7bfYGrLqU5VZTpv7Np987o1CORG6l7MTBOk=
Subject key identifier:   36:32:FF:5B:04:B7:75:48:2F:30:4D:F3:EA:60:AF:DC:F4:D7:A4:50
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EFB9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EDF2588CF7C11F1B314B202CF1D38B0.roa
Signing time:             Sat 24 Oct 2026 07:26:10 +0000
ROA not before:           Sat 24 Oct 2026 07:26:05 +0000
ROA not after:            Thu 21 Jan 2027 07:26:05 +0000
asID:                     150750
IP address blocks:        154.208.32.0/19 maxlen: 24
                          154.208.32.0/24 maxlen: 24
                          154.208.33.0/24 maxlen: 24
                          154.208.34.0/24 maxlen: 24
                          154.208.35.0/24 maxlen: 24
                          154.208.36.0/24 maxlen: 24
                          154.208.37.0/24 maxlen: 24
                          154.208.38.0/24 maxlen: 24
                          154.208.39.0/24 maxlen: 24
                          154.208.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 00:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126905 (0x1efb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 24 07:26:05 2026 GMT
            Not After : Jan 21 07:26:05 2027 GMT
        Subject: CN=6adc5d92-84da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:39:a2:71:52:75:4f:70:3a:a3:cc:97:eb:ab:
                    8d:1f:4d:e1:cb:92:3a:4b:ad:e2:9b:9a:16:96:43:
                    a2:5e:aa:85:4a:be:78:39:34:9c:c0:78:6b:00:db:
                    ca:2b:5a:89:57:c7:1a:61:af:b6:d6:66:b8:7e:65:
                    34:97:96:50:74:bc:1e:b6:2d:b6:50:9c:b0:82:11:
                    b3:c1:c9:b0:4b:2f:18:64:6c:5f:7e:26:03:08:ac:
                    82:b2:24:02:d5:fe:0a:3d:d2:8a:f6:46:58:e8:b8:
                    97:b7:80:4d:49:f6:0c:e1:1e:b6:de:e0:d5:2c:71:
                    1d:29:2c:9e:e4:1d:20:fd:4e:66:16:ac:af:3f:38:
                    aa:7f:a3:d4:b9:c4:e0:be:31:e6:0a:c5:c6:17:77:
                    d7:4c:f8:68:12:99:94:c1:5c:27:c2:b0:04:48:23:
                    6f:04:96:94:b5:b9:4f:ad:3f:e4:00:d9:99:d3:c6:
                    55:4d:2f:79:b8:ff:e4:cc:50:3f:e0:06:9b:1d:fc:
                    11:3d:4a:fb:7a:ed:4a:4e:75:4b:93:ee:a3:78:5c:
                    23:01:0d:58:6c:47:43:fb:ca:3f:4c:24:5c:da:8e:
                    e1:09:13:c3:e7:e9:be:12:0d:64:68:21:ff:be:f3:
                    07:ad:6a:c9:d1:f0:3b:8f:9b:02:9d:7d:46:65:60:
                    45:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:32:FF:5B:04:B7:75:48:2F:30:4D:F3:EA:60:AF:DC:F4:D7:A4:50
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EDF2588CF7C11F1B314B202CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.208.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0f:1a:1c:79:51:73:20:ab:b4:0e:e9:b3:aa:95:e8:a0:f8:37:
         59:d5:e1:ee:1e:7b:cc:34:c0:7e:f9:d2:9f:49:52:52:80:00:
         a1:82:ec:d6:e9:19:33:60:9d:68:a0:93:ac:82:fd:77:a1:37:
         fd:8b:05:30:68:43:f6:fd:f8:2b:bc:0b:51:b9:2b:af:20:62:
         ad:12:4c:10:ab:ac:5d:7f:07:b5:d4:6b:09:85:1d:ad:96:c2:
         dc:1a:dd:32:67:5b:c6:75:b3:0d:cc:51:b3:40:45:14:9d:a0:
         01:b8:82:49:df:dd:08:2c:6a:e7:63:8b:8c:86:ee:db:d9:df:
         57:3b:51:1b:67:71:18:10:f8:38:15:19:07:3e:e1:5d:a6:02:
         59:17:38:fc:4b:84:16:0a:f7:8c:14:35:a7:54:4a:e4:40:2e:
         47:07:87:7c:51:01:e8:30:fb:58:87:a2:c6:b4:de:fe:f8:ff:
         35:82:80:c5:71:9a:4d:02:3b:03:0f:7c:47:66:af:5c:c5:fa:
         42:9c:c5:a9:32:d8:ea:3a:73:f4:10:ad:6c:32:6f:3e:19:76:
         09:ef:c0:dc:d0:54:7f:fb:e9:cb:7e:2e:1e:fc:63:dc:98:9d:
         26:bf:d1:13:d6:e4:b8:e5:03:49:83:67:ac:cb:87:55:f5:41:
         15:46:1f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----