Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56A98192BA3911F1BDA9A4F7CE1D38B0.roa
File:                     56A98192BA3911F1BDA9A4F7CE1D38B0.roa (raw, json)
Hash identifier:          VLZLxg+t0zYIOzPlk9Yi2JajscKKQnPX0bGKF2/sTow=
Subject key identifier:   BB:4C:07:DD:7A:C4:40:2C:13:68:5C:B2:87:89:FE:E2:9B:F7:85:D5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EAE6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56A98192BA3911F1BDA9A4F7CE1D38B0.roa
Signing time:             Sun 27 Sep 2026 06:04:46 +0000
ROA not before:           Sun 27 Sep 2026 06:04:40 +0000
ROA not after:            Sun 01 Nov 2026 06:04:40 +0000
asID:                     44559
IP address blocks:        154.198.36.0/24 maxlen: 24
                          154.203.213.0/24 maxlen: 24
                          154.203.214.0/24 maxlen: 24
                          154.203.215.0/24 maxlen: 24
                          154.203.216.0/24 maxlen: 24
                          154.203.217.0/24 maxlen: 24
                          154.203.218.0/24 maxlen: 24
                          154.203.219.0/24 maxlen: 24
                          154.203.220.0/24 maxlen: 24
                          154.203.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Oct 2026 00:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125670 (0x1eae6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 27 06:04:40 2026 GMT
            Not After : Nov  1 06:04:40 2026 GMT
        Subject: CN=6ab8b1fe-5282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:72:5e:7c:8f:db:50:8c:c1:3f:22:50:82:f8:
                    39:a0:47:a7:8e:e3:c0:08:1a:d9:0f:dd:e5:04:cd:
                    88:b2:10:3c:1f:51:78:36:48:84:17:93:8d:00:83:
                    9f:2c:2d:bc:44:81:df:45:d8:14:1c:e6:51:42:a8:
                    77:c8:c4:33:67:c4:58:d4:c3:fe:8b:cf:b9:58:0e:
                    af:31:29:c0:bc:2d:d6:24:7f:4b:d0:17:c2:a8:dc:
                    58:40:b5:27:7a:7b:93:c2:78:a9:83:e5:56:4a:61:
                    98:d5:38:59:59:a5:fc:c5:bb:2d:1d:3f:46:08:4f:
                    e8:e4:7d:d5:7d:8b:53:82:94:73:2d:47:80:56:d3:
                    72:c1:03:cb:2e:24:13:cf:ae:2e:05:ff:44:08:46:
                    1d:ea:db:18:8c:31:aa:3d:b8:1c:bd:26:80:46:8e:
                    23:1b:e8:bd:68:46:c7:3c:7c:f0:a3:ae:fb:eb:28:
                    2a:94:01:4f:87:8e:50:c3:e1:bb:58:d2:91:f5:12:
                    9f:65:6b:55:fd:65:af:67:69:b9:b2:00:62:9b:be:
                    b4:4b:d7:1c:19:67:0e:14:3e:72:44:a7:e0:41:a3:
                    3f:c7:38:79:07:3d:ab:d0:f8:e9:ca:01:f0:44:ac:
                    f7:4c:48:77:e0:a1:5e:b8:bd:90:19:fd:c5:50:4f:
                    b3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:4C:07:DD:7A:C4:40:2C:13:68:5C:B2:87:89:FE:E2:9B:F7:85:D5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56A98192BA3911F1BDA9A4F7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.198.36.0/24
                  154.203.213.0-154.203.221.255

    Signature Algorithm: sha256WithRSAEncryption
         a0:6c:fc:2f:dc:52:81:ce:20:c4:e5:c5:e9:40:63:18:3a:38:
         d1:85:2b:b1:95:4f:aa:23:07:19:eb:fc:5e:fa:18:27:d1:9a:
         17:0d:9e:cb:80:60:04:b6:86:01:01:13:0a:6f:86:31:79:14:
         8d:32:03:20:6d:5a:a5:54:1f:8b:40:2e:c2:9f:d0:b6:a0:b5:
         7f:1d:a1:8d:41:0e:28:4a:b5:05:93:ab:06:42:bb:ca:30:7d:
         38:9f:8a:b8:8a:a6:90:d2:76:50:df:16:8a:8a:94:8e:f8:c9:
         8d:a4:36:a9:3b:21:4d:52:16:58:c6:b4:75:15:87:d7:4e:79:
         cc:5d:7c:53:d4:10:33:b3:7b:ba:10:f9:5c:30:81:be:b1:a7:
         3b:82:20:a8:d1:3c:91:43:f7:08:86:01:87:d3:61:df:3f:01:
         cd:57:7b:9e:be:97:16:4f:95:d7:f6:07:db:f3:31:c4:30:a5:
         b0:c5:06:08:e0:4f:57:2e:4b:b9:2f:4b:88:16:bf:ef:bd:20:
         d2:1b:68:1f:65:94:41:31:d7:6d:a2:40:8e:7b:a9:87:e7:80:
         0e:21:76:fe:1f:a9:5a:44:d4:ff:12:da:14:5c:eb:b9:f5:75:
         52:75:04:6a:73:d9:6e:25:82:7b:12:2a:74:e1:de:74:59:fc:
         a7:48:21:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----