Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32A9B620C49011F18D3C7200CF1D38B0.roa
File:                     32A9B620C49011F18D3C7200CF1D38B0.roa (raw, json)
Hash identifier:          8ypVPEfF8vK9GbjQv38kgGYJTVZyg/Nli8QvP0vZbFk=
Subject key identifier:   61:97:74:16:16:FB:B5:BC:95:A0:5C:37:A9:5A:D4:5D:2C:2D:69:DC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ED45
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32A9B620C49011F18D3C7200CF1D38B0.roa
Signing time:             Sat 10 Oct 2026 09:51:43 +0000
ROA not before:           Sat 10 Oct 2026 09:51:39 +0000
ROA not after:            Tue 17 Nov 2026 09:51:39 +0000
asID:                     22773
IP address blocks:        154.90.4.0/24 maxlen: 24
                          154.90.5.0/24 maxlen: 24
                          154.90.6.0/24 maxlen: 24
                          154.90.7.0/24 maxlen: 24
                          154.90.8.0/24 maxlen: 24
                          154.90.9.0/24 maxlen: 24
                          154.90.10.0/24 maxlen: 24
                          154.90.11.0/24 maxlen: 24
                          154.90.12.0/24 maxlen: 24
                          154.90.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126277 (0x1ed45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 10 09:51:39 2026 GMT
            Not After : Nov 17 09:51:39 2026 GMT
        Subject: CN=6aca0aaf-4a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5c:39:f7:8a:e8:f9:7e:31:f7:79:a7:69:45:
                    9d:97:91:71:a5:14:62:73:e8:1b:01:0b:e9:9b:da:
                    85:20:8b:f7:ca:87:9f:a1:e1:71:72:38:32:df:28:
                    17:92:8a:0a:13:57:50:28:25:74:b1:0b:0a:60:15:
                    6f:e3:d7:8f:e5:fc:3b:13:57:11:16:72:25:f5:0f:
                    02:fc:96:30:63:37:a5:ae:69:06:c3:84:a5:e3:3c:
                    f5:3b:79:bf:a0:d4:89:e0:2e:62:05:7b:31:cf:87:
                    37:18:94:fe:a5:8e:cc:94:a8:fd:3f:f0:5c:f7:2f:
                    6e:95:64:db:7a:82:9d:10:f5:12:60:9d:8e:6d:84:
                    78:5d:82:8d:74:f8:50:b7:7d:e6:4e:03:78:ff:6a:
                    cd:96:55:4a:85:78:5e:e8:c4:58:1b:97:23:1e:ef:
                    65:b7:3b:72:a1:4d:f2:1d:58:a9:0b:7e:1d:54:a1:
                    14:3c:37:a0:2e:c2:90:c8:86:34:97:e0:cc:72:41:
                    5a:46:b8:fa:76:11:28:24:13:8b:04:f6:0d:a6:1a:
                    1a:cb:4d:ba:f8:cf:f9:f2:0e:6d:f0:d9:6c:ff:94:
                    89:08:bc:6b:3a:45:0c:30:6c:59:27:19:d1:e5:da:
                    24:69:05:67:cc:d7:73:37:99:92:d0:ee:1d:bd:8a:
                    41:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:97:74:16:16:FB:B5:BC:95:A0:5C:37:A9:5A:D4:5D:2C:2D:69:DC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32A9B620C49011F18D3C7200CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.90.4.0-154.90.13.255

    Signature Algorithm: sha256WithRSAEncryption
         a0:09:b1:38:a5:01:69:3d:1c:68:36:34:de:d7:a8:04:33:db:
         40:c7:c3:51:69:3a:77:49:6a:d7:6b:14:c8:f3:0f:97:aa:24:
         07:9b:b1:69:72:31:4b:72:a9:7a:c4:97:85:dc:3f:cd:af:a7:
         79:26:82:3e:7c:3d:40:d9:4c:3f:9e:fd:a8:9f:d6:63:df:48:
         54:db:9c:52:0f:e6:b3:8f:11:b9:f1:13:f3:0e:e8:6c:ed:65:
         0c:84:86:8f:cd:f7:8a:e7:d0:2e:85:60:11:2a:85:3a:cd:97:
         a2:1d:ca:a4:1d:d1:6b:bc:64:7b:b8:59:ab:fc:4e:f2:7b:7b:
         e8:c2:66:8f:a3:76:b6:11:bb:41:fb:33:e5:a0:39:c7:ba:4d:
         9b:69:e7:f8:6b:dd:38:04:e7:4a:36:de:cd:88:e6:f9:d5:18:
         ed:be:60:a9:d4:7c:78:10:48:d4:ea:ff:33:ba:64:dc:18:3b:
         5e:5c:9f:22:e4:f8:21:81:ef:62:c1:8e:11:a2:ce:b1:77:e8:
         0c:e4:c3:c5:29:34:86:72:9f:fe:72:b3:c3:2b:c8:90:65:42:
         4d:3a:c1:28:ce:c5:f0:b3:f8:61:01:4d:6e:39:87:d7:17:f3:
         ce:cd:96:e8:87:7e:43:25:3d:63:da:d6:04:fa:d9:65:84:89:
         1d:92:d8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----