Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/542715BEC48F11F19D3D4FFACE1D38B0.roa
File:                     542715BEC48F11F19D3D4FFACE1D38B0.roa (raw, json)
Hash identifier:          5e5lUvuPZDsw4cceqYKuzlzlL/5hIXzaSJaIusdAqkI=
Subject key identifier:   6B:76:35:7C:1D:A8:59:A1:E2:E1:91:0C:F0:E7:CC:51:57:4B:F4:4B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ED43
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/542715BEC48F11F19D3D4FFACE1D38B0.roa
Signing time:             Sat 10 Oct 2026 09:45:30 +0000
ROA not before:           Sat 10 Oct 2026 09:45:25 +0000
ROA not after:            Tue 17 Nov 2026 09:45:25 +0000
asID:                     22773
IP address blocks:        154.85.112.0/24 maxlen: 24
                          154.85.113.0/24 maxlen: 24
                          154.85.114.0/24 maxlen: 24
                          154.85.115.0/24 maxlen: 24
                          154.85.116.0/24 maxlen: 24
                          154.85.117.0/24 maxlen: 24
                          154.85.118.0/24 maxlen: 24
                          154.85.119.0/24 maxlen: 24
                          154.90.2.0/24 maxlen: 24
                          154.90.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126275 (0x1ed43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 10 09:45:25 2026 GMT
            Not After : Nov 17 09:45:25 2026 GMT
        Subject: CN=6aca093a-3165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:55:c2:97:6f:20:24:8c:59:ef:e7:92:d5:38:
                    80:98:a5:79:37:a4:f2:46:a6:e8:bc:e7:f6:88:d4:
                    d9:5d:54:fe:37:9b:5b:d1:cf:59:f5:c1:80:8d:f0:
                    f0:c3:5c:e9:6f:d4:d5:0f:5b:05:7f:45:d5:e0:54:
                    d4:e8:a3:7a:d8:ef:3c:64:d4:62:89:bd:39:99:8f:
                    cc:46:37:1b:db:82:68:83:66:54:f6:75:50:bf:86:
                    36:b5:a8:bd:f6:f6:53:5b:46:c2:c2:ff:69:d5:86:
                    05:94:31:26:f4:84:d9:4a:89:f8:57:6f:c7:ce:10:
                    93:a9:f2:bb:b3:9a:05:a1:24:93:ea:18:3d:5a:39:
                    05:9c:e3:19:97:f6:8c:6c:70:40:5a:6f:4d:d7:10:
                    3a:2a:e1:e6:66:f2:71:86:84:3b:9f:bb:4e:92:1b:
                    6f:94:32:15:59:6b:09:03:f6:88:2c:ea:70:87:f9:
                    4f:25:da:c8:cb:37:c3:26:fa:ba:2f:dd:d2:68:57:
                    9d:fd:43:5b:4d:7a:8f:1c:3e:87:e8:93:d3:2f:69:
                    7e:dc:c9:5b:69:b8:84:b9:63:77:45:85:f9:bd:8f:
                    a8:01:3b:1e:a0:bc:2e:33:19:a5:7a:59:b7:0d:4d:
                    83:16:80:66:eb:b2:a7:17:58:28:74:55:6b:9b:7f:
                    c2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:76:35:7C:1D:A8:59:A1:E2:E1:91:0C:F0:E7:CC:51:57:4B:F4:4B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/542715BEC48F11F19D3D4FFACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.85.112.0/21
                  154.90.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:4e:6f:ea:bc:73:63:f7:40:8a:2c:c7:6f:3d:97:c8:96:1e:
         ed:a3:5b:8f:49:ad:bd:09:af:ee:db:70:7d:41:55:df:0e:b8:
         09:2c:e1:42:00:25:ff:84:6c:6e:dc:9f:92:0f:18:a6:b0:3c:
         ac:76:ab:02:7a:f3:c8:7a:3f:c6:ce:ef:45:a0:c8:49:c0:38:
         a2:23:8f:2b:b1:d0:e1:a6:51:57:7a:df:08:f3:69:07:d0:10:
         2d:22:c1:54:cf:48:d8:bf:68:44:4e:c6:d5:f5:51:4a:3c:05:
         09:f5:c7:f8:0c:4b:9e:89:40:c5:a3:5b:cf:a0:cb:be:7e:27:
         e4:3e:35:c6:f5:47:a3:e7:ec:75:d2:61:f8:60:a6:cd:c6:d8:
         0e:e7:04:55:01:ef:c4:21:03:23:37:b4:72:14:b8:be:2f:9e:
         6e:85:18:6b:29:b8:f4:38:62:13:da:78:77:c4:8a:59:6f:89:
         85:95:d0:55:71:9a:55:3b:4d:2b:a9:67:99:25:35:c5:4c:2e:
         0d:00:15:3f:24:fe:5b:b0:6c:3c:50:5c:98:3d:b5:36:2e:18:
         80:11:3f:8c:4b:a8:1b:db:55:80:cb:96:af:a4:01:52:aa:52:
         4e:06:fd:47:ee:4c:4e:0a:b6:96:9a:81:8c:40:99:a2:fb:ef:
         ff:d8:3e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----