Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B614F5AD2A711F194A2D7B0CE1D38B0.roa
File:                     4B614F5AD2A711F194A2D7B0CE1D38B0.roa (raw, json)
Hash identifier:          ySJWpzplJws71e6nmKf/LP0C1jT8J74xrMMa1pjcrsY=
Subject key identifier:   9A:06:BF:92:DF:DF:5B:95:F5:9D:21:34:D4:03:2C:E0:61:1F:66:69
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01F0B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B614F5AD2A711F194A2D7B0CE1D38B0.roa
Signing time:             Wed 28 Oct 2026 08:12:19 +0000
ROA not before:           Wed 28 Oct 2026 08:12:15 +0000
ROA not after:            Wed 02 Dec 2026 08:12:15 +0000
asID:                     62240
IP address blocks:        154.194.33.0/24 maxlen: 24 (superfluous maxlen)
                          154.195.6.0/24 maxlen: 24 (superfluous maxlen)
                          154.195.7.0/24 maxlen: 24 (superfluous maxlen)
                          154.195.109.0/24 maxlen: 24 (superfluous maxlen)
                          154.195.110.0/24 maxlen: 24 (superfluous maxlen)
                          154.195.114.0/24 maxlen: 24 (superfluous maxlen)
                          154.195.115.0/24 maxlen: 24 (superfluous maxlen)
                          154.195.119.0/24 maxlen: 24 (superfluous maxlen)
                          154.195.139.0/24 maxlen: 24 (superfluous maxlen)
                          154.196.54.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127161 (0x1f0b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 28 08:12:15 2026 GMT
            Not After : Dec  2 08:12:15 2026 GMT
        Subject: CN=6ae1ae63-73fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:72:8a:e7:59:d0:31:fa:bb:d4:64:3d:dd:61:
                    ca:12:26:36:8f:6d:aa:80:5d:9d:4c:7c:a4:56:e9:
                    2f:8d:da:4f:1b:2f:85:07:ed:fa:27:64:21:5f:48:
                    e3:ab:9d:c5:11:56:11:06:a8:f6:df:60:c4:0f:ef:
                    a3:50:15:2f:ae:b2:2b:78:12:8d:91:a5:cf:90:12:
                    6f:5f:81:5a:0c:f6:0b:66:c2:1a:03:7c:53:6d:15:
                    80:a1:9c:7e:b6:84:30:13:34:62:91:a4:68:5b:de:
                    e0:ca:31:d2:6b:ef:7c:20:f3:19:9b:21:13:7c:64:
                    9a:01:5e:f2:22:8d:7c:f9:ae:b9:05:de:eb:f7:15:
                    c5:e1:09:42:24:ea:29:07:31:98:89:50:a9:7d:52:
                    a0:27:fe:60:f8:b4:a9:ee:53:97:4a:ef:a0:59:a0:
                    4a:42:28:98:19:8e:76:40:79:d8:24:54:84:8d:d2:
                    26:c7:6c:0c:2a:c9:2c:66:f0:bd:7f:fa:41:6c:7f:
                    a8:2c:4a:f9:d1:38:9d:28:cd:a5:f5:45:22:0a:b5:
                    e5:97:31:71:29:4c:ae:77:f0:2b:df:d7:04:3b:0a:
                    ee:71:1d:02:98:e1:07:49:0d:7f:86:a7:df:81:28:
                    40:b9:c4:6f:3e:76:38:69:a1:78:0e:0c:8f:8e:57:
                    f6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:06:BF:92:DF:DF:5B:95:F5:9D:21:34:D4:03:2C:E0:61:1F:66:69
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B614F5AD2A711F194A2D7B0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.33.0/24
                  154.195.6.0/23
                  154.195.109.0-154.195.110.255
                  154.195.114.0/23
                  154.195.119.0/24
                  154.195.139.0/24
                  154.196.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:78:54:6f:0e:90:d2:fc:3f:75:8b:d2:81:52:e0:d0:e6:a7:
         f1:c6:3a:f3:bf:16:93:ae:1d:fc:29:43:69:af:a6:06:16:94:
         2e:8f:6c:51:99:e5:18:20:18:d3:a6:72:fb:8e:c9:c5:a7:4f:
         ce:e8:e8:c8:b7:62:5a:92:29:91:3f:09:21:e0:1a:a2:c6:39:
         e6:01:ab:08:6e:63:55:66:30:86:55:53:4c:3d:64:e6:3a:07:
         10:df:4c:2f:b9:86:dc:48:9a:a5:12:87:47:bc:a0:18:f3:3d:
         34:e7:fa:73:f6:2f:ab:5e:fc:5d:28:f0:2f:a6:bf:b4:b1:9c:
         1e:31:68:b1:95:56:d1:20:5b:e0:a5:b0:61:30:3e:ca:75:48:
         b0:cd:38:62:a2:eb:8c:d8:a8:5a:8a:80:9a:40:60:d7:1b:47:
         06:1a:d4:88:0e:86:5d:b7:18:4d:7d:1b:58:ec:c1:8d:80:08:
         6b:88:e7:5c:5b:e6:88:af:25:f8:99:38:2e:7e:16:cb:91:a9:
         c5:a1:c1:cf:e3:33:35:8c:21:e4:70:63:f0:42:f2:a6:2e:04:
         5f:17:47:76:04:dd:22:e1:b7:4e:15:51:e4:a5:c1:3b:80:b2:
         7b:b5:b8:0b:65:25:8f:0d:67:36:1a:b3:48:6e:17:79:57:97:
         c8:00:9a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----