Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F9BF852C22A11F1A33E55C7CE1D38B0.roa
File:                     2F9BF852C22A11F1A33E55C7CE1D38B0.roa (raw, json)
Hash identifier:          2/yf+PsZS9iDSAdqZq0H7d+N8bmG2Z2Zqp+OGtdVIeM=
Subject key identifier:   AA:42:59:00:28:C4:31:44:98:A3:8D:F8:A0:2D:59:F0:BF:CF:70:A2
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ECBC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F9BF852C22A11F1A33E55C7CE1D38B0.roa
Signing time:             Wed 07 Oct 2026 08:36:27 +0000
ROA not before:           Wed 07 Oct 2026 08:36:22 +0000
ROA not after:            Sat 17 Oct 2026 08:36:22 +0000
asID:                     40115
IP address blocks:        154.86.16.0/20 maxlen: 24
                          154.86.16.0/24 maxlen: 24
                          154.86.17.0/24 maxlen: 24
                          154.86.18.0/24 maxlen: 24
                          154.86.19.0/24 maxlen: 24
                          154.86.20.0/24 maxlen: 24
                          154.86.21.0/24 maxlen: 24
                          154.86.22.0/24 maxlen: 24
                          154.86.23.0/24 maxlen: 24
                          154.86.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 00:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126140 (0x1ecbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  7 08:36:22 2026 GMT
            Not After : Oct 17 08:36:22 2026 GMT
        Subject: CN=6ac6048b-2ebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:60:8b:50:97:a8:ae:3a:53:0a:08:b6:be:59:
                    f0:3e:7f:e1:94:48:9c:81:d5:b9:4f:df:1e:00:45:
                    96:c5:a6:fe:53:02:bb:4d:02:ef:99:98:f7:d2:a9:
                    da:62:5b:a5:0b:20:b1:50:88:63:5c:72:fb:ed:a1:
                    ac:a6:29:e7:5b:a6:ba:8e:92:16:35:d5:21:f6:bd:
                    96:80:b8:dd:c6:81:80:72:38:4e:a6:c1:f2:ec:8a:
                    4f:d2:bb:93:d0:6f:0d:3b:8f:95:02:e9:e0:c0:45:
                    d9:ea:90:51:d1:c5:3a:d9:8f:02:00:33:8d:88:c2:
                    41:79:c1:6e:51:d1:01:60:1b:8f:d0:57:6f:0a:39:
                    8d:41:e3:08:2a:1f:0c:8a:ff:00:76:1e:8a:a1:d2:
                    c9:c8:96:cb:c8:66:57:10:bf:b9:1b:30:8e:6f:41:
                    26:51:a9:3b:d5:21:55:af:3e:70:cf:e5:10:42:5f:
                    2b:8f:f3:2f:4c:da:a5:1d:31:4c:d2:6c:35:16:8f:
                    cd:fa:5d:d3:ba:e6:2b:d6:fb:12:33:a1:38:37:b1:
                    bc:59:76:4e:f4:cc:96:de:43:b6:1e:ae:f3:3d:40:
                    d2:6f:f5:57:c9:30:e3:3d:44:32:a4:7d:55:39:3b:
                    f6:7a:8b:89:cf:ea:62:3c:9a:8d:a8:c1:3c:26:14:
                    aa:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:42:59:00:28:C4:31:44:98:A3:8D:F8:A0:2D:59:F0:BF:CF:70:A2
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F9BF852C22A11F1A33E55C7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c1:8d:39:30:22:77:99:ee:4f:17:10:43:e1:0a:c5:c5:67:cd:
         3f:1a:8e:62:4f:95:ba:01:c7:98:cb:72:64:f4:64:c5:9a:86:
         8c:1a:5d:c4:93:60:7d:13:04:39:84:09:db:74:c3:cf:d1:00:
         57:9d:07:ae:60:ef:cf:d6:09:53:7f:7b:dc:34:3a:d3:b1:53:
         8e:c2:c3:5c:c5:63:2f:37:fe:61:22:88:c6:2b:28:0f:cd:c3:
         4b:f1:75:15:de:94:e6:49:a2:32:4d:29:8f:2a:55:82:70:f8:
         ad:27:2e:c5:54:f3:18:5b:76:90:ed:e3:4d:c3:9c:83:6c:90:
         47:8c:df:8b:a3:3e:e1:91:79:50:f7:dd:21:b7:f5:1a:46:99:
         7b:94:a9:2f:9e:23:04:4d:22:fb:95:f4:ff:b9:b4:92:61:bf:
         ef:04:85:e3:2d:42:5d:f8:6f:9e:70:4b:36:40:fe:1b:bc:89:
         a9:14:08:d5:f3:a3:61:5a:bc:01:db:c7:83:17:f1:15:54:8e:
         db:6f:89:51:ee:94:ac:1b:b9:53:a6:c1:9f:f3:f3:e8:40:67:
         8e:91:4e:30:db:d8:7b:c8:af:9c:de:c1:52:7b:3d:a1:b7:65:
         81:6c:a8:1d:7d:9d:76:4b:cc:ca:ba:e6:d7:67:5f:b8:46:ba:
         c4:09:ad:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----