Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FF61990BF0311F1887F50B3CE1D38B0.roa
File:                     4FF61990BF0311F1887F50B3CE1D38B0.roa (raw, json)
Hash identifier:          p6trIRHjMHehsJzRJ1PY2NzOOuRh2CS6S3Egg8KqmDA=
Subject key identifier:   0B:1C:F3:82:7D:DB:CE:8F:15:FC:20:F8:85:AE:08:DB:89:08:51:8B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EBEE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FF61990BF0311F1887F50B3CE1D38B0.roa
Signing time:             Sat 03 Oct 2026 08:20:37 +0000
ROA not before:           Sat 03 Oct 2026 08:20:33 +0000
ROA not after:            Tue 10 Nov 2026 08:20:33 +0000
asID:                     138915
IP address blocks:        154.90.42.0/23 maxlen: 24
                          154.90.44.0/23 maxlen: 24
                          154.90.48.0/23 maxlen: 24
                          154.90.50.0/23 maxlen: 24
                          154.90.52.0/23 maxlen: 24
                          154.90.54.0/23 maxlen: 24
                          154.90.56.0/23 maxlen: 24
                          154.90.58.0/23 maxlen: 24
                          154.90.60.0/23 maxlen: 24
                          154.90.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125934 (0x1ebee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  3 08:20:33 2026 GMT
            Not After : Nov 10 08:20:33 2026 GMT
        Subject: CN=6ac0bad5-7d90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:31:e4:7b:eb:27:83:50:9b:06:85:8a:46:51:
                    78:19:fb:c1:50:b5:64:fc:06:58:eb:43:cc:e1:90:
                    1d:79:45:f8:91:c0:e7:bc:53:c3:30:c9:5a:7f:b7:
                    37:58:5e:44:13:9d:63:6c:6b:53:e2:5a:d5:ad:18:
                    0c:a2:2b:b1:1e:0a:5d:cb:57:07:d6:3f:3d:77:82:
                    6f:ac:28:9f:3d:57:ee:b3:70:f7:57:9e:b9:e3:53:
                    b5:2e:3b:ef:66:a1:ca:04:44:f0:0f:e3:90:85:52:
                    d2:d6:06:34:ab:f1:ee:d7:8b:4c:42:68:e2:19:50:
                    95:2c:45:b4:fc:ab:60:dc:9e:6e:92:50:18:12:f1:
                    b5:be:43:a0:cd:7c:8f:d2:98:f5:c9:e4:a5:01:84:
                    2f:7b:69:19:46:a8:3c:0a:5d:8f:5b:24:d1:31:0c:
                    de:b3:cc:71:f1:c3:fd:8f:83:72:13:a4:cb:77:9e:
                    69:65:3d:b0:d4:8d:2d:9a:93:38:bf:15:f7:12:49:
                    50:0e:83:a8:cc:c0:16:6b:d3:c8:b4:b1:0d:eb:42:
                    fd:c9:63:5b:30:e4:54:9b:2c:2c:56:b6:7d:61:e9:
                    58:63:dd:48:c5:96:60:57:19:c9:b5:c4:19:34:8b:
                    f8:13:2a:c1:46:b0:3c:4a:d4:2b:c8:22:c0:ff:f8:
                    57:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:1C:F3:82:7D:DB:CE:8F:15:FC:20:F8:85:AE:08:DB:89:08:51:8B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FF61990BF0311F1887F50B3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.90.42.0-154.90.45.255
                  154.90.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         96:7b:05:c5:ae:e5:09:bf:95:e9:44:e5:e2:30:41:79:47:d3:
         81:1f:3d:e1:90:75:51:09:48:74:42:c3:4c:eb:fe:f3:61:1a:
         29:37:9f:8f:73:e5:34:bc:ff:a6:d8:b9:97:e1:d9:f7:da:6c:
         39:18:e3:90:12:24:03:2b:77:75:dc:bc:50:69:d5:b7:23:3c:
         22:f7:05:b6:66:3a:37:4c:b7:db:2c:ee:a9:d8:18:df:27:63:
         5d:a7:c4:db:83:f6:39:80:57:03:69:f3:4d:61:cd:f7:5f:61:
         0b:17:9e:3a:c1:84:46:85:dd:47:81:0c:64:03:90:2a:64:3d:
         2f:df:92:e7:00:18:3f:f5:c9:50:89:f5:ed:bd:47:95:4e:11:
         9d:73:b4:65:1a:ac:57:d6:6f:20:fc:44:5a:65:1c:aa:a5:af:
         16:92:06:17:0a:a0:4d:8a:c8:4a:41:2b:2c:0c:a9:80:cb:0f:
         87:1d:f8:e2:f2:f3:ee:a6:88:eb:83:9a:69:f8:1c:c2:f0:06:
         41:7b:e1:4c:da:98:a2:68:4d:b8:1e:04:da:78:9c:f6:08:a3:
         a2:af:30:2a:73:9b:e5:84:d0:e2:cf:f9:ab:67:a1:a3:17:2e:
         11:9e:50:50:4c:34:80:c1:5e:75:73:18:19:15:2d:7d:c3:a5:
         da:1c:be:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----