Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F52CCEEBCA311F1AEADA0B3CE1D38B0.roa
File:                     3F52CCEEBCA311F1AEADA0B3CE1D38B0.roa (raw, json)
Hash identifier:          zopDesXosMlmFtUCaLIj+v1G6yv95diuYt4Ti/9qDbA=
Subject key identifier:   1D:C4:FA:B8:81:35:35:14:81:6C:BD:0A:C2:B0:9E:1F:B5:33:15:B8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EB96
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F52CCEEBCA311F1AEADA0B3CE1D38B0.roa
Signing time:             Wed 30 Sep 2026 07:47:56 +0000
ROA not before:           Wed 30 Sep 2026 07:47:51 +0000
ROA not after:            Fri 06 Nov 2026 07:47:51 +0000
asID:                     202656
IP address blocks:        154.218.31.0/24 maxlen: 24
                          154.219.217.0/24 maxlen: 24
                          154.219.218.0/24 maxlen: 24
                          154.219.219.0/24 maxlen: 24
                          154.219.220.0/24 maxlen: 24
                          154.219.221.0/24 maxlen: 24
                          154.219.223.0/24 maxlen: 24
                          154.219.224.0/24 maxlen: 24
                          154.219.225.0/24 maxlen: 24
                          154.219.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125846 (0x1eb96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 30 07:47:51 2026 GMT
            Not After : Nov  6 07:47:51 2026 GMT
        Subject: CN=6abcbeab-ea46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:02:87:f7:1d:b0:e7:05:43:e1:75:e8:b4:de:
                    c7:58:ff:20:de:2a:1d:1c:eb:e1:e8:bc:62:1c:1b:
                    f6:18:4a:59:97:98:9f:3e:81:8c:97:f9:a0:10:58:
                    41:e8:3f:93:ff:e3:9c:45:9b:bc:6a:7a:2d:50:2a:
                    eb:f4:50:0f:f8:aa:44:05:ee:c4:23:53:0b:b0:2d:
                    a8:12:82:24:15:a0:57:56:d4:6b:ae:61:ba:5c:c1:
                    f9:49:6c:fe:8a:58:5c:d2:2a:03:78:08:da:7c:f0:
                    7d:54:9b:5f:ca:26:ac:b8:6e:eb:66:43:a4:78:ad:
                    2e:0b:cb:f6:da:69:ee:46:f4:ce:8a:2d:07:ef:fb:
                    04:f1:99:67:53:f1:42:47:af:65:f1:12:ab:f3:4b:
                    78:0c:f5:f5:2e:8e:cb:a3:91:bb:e6:a7:bd:ef:f8:
                    16:59:24:dd:fa:c8:27:f8:a7:00:ad:e9:2f:3f:e8:
                    a1:42:2c:a6:89:5c:69:7b:2f:48:fc:6c:9a:c0:70:
                    c1:2c:42:c7:05:84:9d:74:86:66:ff:ed:fb:0b:c8:
                    19:12:be:66:59:ed:a6:35:a9:63:da:18:e8:5b:50:
                    c1:9a:ac:58:92:e6:fc:88:72:5c:4a:42:a9:87:31:
                    82:89:ac:31:a6:c9:40:05:92:70:09:69:ae:cd:fd:
                    b6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C4:FA:B8:81:35:35:14:81:6C:BD:0A:C2:B0:9E:1F:B5:33:15:B8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F52CCEEBCA311F1AEADA0B3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.218.31.0/24
                  154.219.217.0-154.219.221.255
                  154.219.223.0-154.219.226.255

    Signature Algorithm: sha256WithRSAEncryption
         09:b1:7f:ba:8c:5b:bc:54:15:a5:a2:24:f8:28:b6:af:02:45:
         d5:ca:b4:cc:8b:dc:c5:32:90:1d:d7:c3:e3:f4:fa:7c:1b:96:
         90:bd:d3:da:94:e3:a2:1e:a3:2c:b8:c5:01:f6:6b:9a:ab:67:
         97:87:ab:3a:52:6d:6a:aa:4e:e6:ca:f9:8f:67:0e:24:55:ef:
         15:dd:8a:96:cc:95:9c:bb:9f:5a:09:02:ed:a5:80:49:ec:7d:
         49:93:15:da:ba:10:2f:e9:07:3b:9c:dc:7f:6a:e8:9a:24:9f:
         79:e9:25:25:75:5a:67:f7:5c:21:90:13:5f:95:d6:8e:ec:c4:
         04:9b:f3:0b:b0:db:05:a6:b2:d1:f1:95:0c:5b:0c:c3:df:55:
         6b:49:a0:d7:33:8a:30:bb:31:98:9e:e3:32:d8:25:c6:c2:1d:
         77:b5:8f:24:da:3c:ad:2a:ac:bf:43:07:86:9a:9f:02:2e:1c:
         11:1d:78:46:84:1a:e6:0d:f9:0e:d3:28:34:19:d0:74:37:79:
         71:95:f0:ea:bc:f4:fb:73:53:19:d8:c9:fa:74:35:32:b1:d1:
         e8:ed:95:f9:ba:93:98:03:26:26:90:97:06:c7:59:ce:01:51:
         e5:27:26:4b:2e:f4:0f:a5:56:38:83:12:1f:93:14:56:ab:9a:
         fb:9b:cc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----