Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/332C2A88B7E311F1B11503BACE1D38B0.roa
File:                     332C2A88B7E311F1B11503BACE1D38B0.roa (raw, json)
Hash identifier:          8eemLLGRE8ZRAalzL7AXxYOBvvqARqaQlO1ARnqr7c0=
Subject key identifier:   9C:85:A5:DB:88:49:B2:7D:91:2B:41:33:E9:36:72:54:F0:40:A3:42
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EA6F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/332C2A88B7E311F1B11503BACE1D38B0.roa
Signing time:             Thu 24 Sep 2026 06:43:07 +0000
ROA not before:           Thu 24 Sep 2026 06:43:03 +0000
ROA not after:            Sun 01 Nov 2026 06:43:03 +0000
asID:                     62240
IP address blocks:        154.195.28.0/24 maxlen: 24
                          154.195.29.0/24 maxlen: 24
                          154.195.30.0/24 maxlen: 24
                          154.195.31.0/24 maxlen: 24
                          154.195.182.0/24 maxlen: 24
                          154.195.183.0/24 maxlen: 24
                          154.195.184.0/24 maxlen: 24
                          154.195.185.0/24 maxlen: 24
                          154.195.186.0/24 maxlen: 24
                          154.195.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 11:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125551 (0x1ea6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 24 06:43:03 2026 GMT
            Not After : Nov  1 06:43:03 2026 GMT
        Subject: CN=6ab4c67b-cb93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ff:30:0e:61:58:b7:6d:f1:1f:d2:07:2f:46:
                    66:6f:6d:81:ad:71:0c:4a:5e:ff:f0:22:fd:a1:49:
                    c4:44:99:51:2b:42:b0:03:e0:76:a3:e4:87:87:e2:
                    6d:2c:f4:79:3d:3e:e3:28:d3:61:e4:a8:85:4a:62:
                    22:7a:68:33:b2:f1:5f:9c:fa:99:d9:fe:ca:e2:63:
                    ee:b2:47:2e:57:2e:37:1d:91:f8:bc:ae:1b:cc:25:
                    7b:f8:b5:02:cb:fd:8a:fa:12:4d:03:64:10:3b:68:
                    32:e2:6a:3e:f3:5d:c1:2e:83:aa:08:75:6a:c0:08:
                    6a:23:d7:a9:48:a5:16:1a:c3:90:65:5c:43:ec:ca:
                    cd:d9:e8:5d:7a:32:2d:1c:06:0b:6e:1e:76:bd:8b:
                    3c:ac:af:03:03:18:f9:ab:9e:ae:2c:fe:02:45:29:
                    dc:84:99:c5:25:35:d2:af:46:3e:a0:09:b1:11:f2:
                    a4:bc:30:ac:81:8a:e7:1f:65:b1:33:b7:c4:89:50:
                    53:69:ef:db:df:bb:c1:ff:20:28:c1:f7:05:cd:a7:
                    8b:76:6b:03:26:21:70:98:69:a3:64:c1:36:96:f1:
                    02:5b:b9:e9:73:c6:cc:e1:cc:bc:24:35:94:f7:b8:
                    b3:17:b4:b8:49:69:25:e1:6d:32:f4:3d:d0:93:fe:
                    98:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:85:A5:DB:88:49:B2:7D:91:2B:41:33:E9:36:72:54:F0:40:A3:42
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/332C2A88B7E311F1B11503BACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.195.28.0/22
                  154.195.182.0-154.195.187.255

    Signature Algorithm: sha256WithRSAEncryption
         ca:ea:e3:10:76:72:6b:bc:a5:1c:49:a8:46:2b:6a:7c:f2:86:
         87:9a:ea:96:19:fa:6c:c1:b4:32:94:48:72:8a:66:64:dd:c9:
         da:48:4c:4f:fa:c8:5f:a0:09:96:72:04:ec:e5:af:9a:f0:85:
         33:b0:55:55:77:3a:3e:20:2c:26:41:70:30:3e:5e:04:1d:5d:
         40:a1:98:c6:39:f2:a5:1f:1b:f8:10:72:3c:f5:d8:6b:28:08:
         2e:8d:79:66:89:fb:15:f4:95:26:59:8a:4f:6b:53:dc:75:63:
         a0:d8:d6:9d:05:d0:37:8c:14:0c:f3:c6:21:0a:22:4f:8c:06:
         95:ce:3c:fb:b9:67:8e:48:36:8d:92:de:8a:77:82:48:58:28:
         d1:c1:91:b0:f6:47:e1:fb:6a:bb:0c:f7:fd:7c:14:41:a8:bb:
         5f:b3:42:f6:eb:10:38:8c:29:d6:87:c8:38:e0:ec:32:cc:6d:
         c2:0d:62:1c:67:99:dc:cb:4f:16:a6:53:d2:6f:50:4e:fc:8f:
         e7:96:d8:b0:3d:97:02:b6:02:4c:65:6d:eb:3a:f7:58:0c:52:
         e3:65:7c:d8:d7:cf:87:d6:d5:b0:c1:5f:03:e1:69:e0:9d:2a:
         27:25:ea:33:5e:a9:7c:c8:73:0e:be:15:cd:be:33:c0:cf:0a:
         44:c3:08:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----