Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BEF41A2B7EE11F18651F100CF1D38B0.roa
File:                     5BEF41A2B7EE11F18651F100CF1D38B0.roa (raw, json)
Hash identifier:          NN01A1emB4gl5Z6cit3wwKnMa5vyNmQWSWkMOtkgaVY=
Subject key identifier:   B6:6B:D4:6F:7C:73:03:98:8C:BB:CD:4C:91:10:EB:AF:3E:F1:E6:24
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EA9D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BEF41A2B7EE11F18651F100CF1D38B0.roa
Signing time:             Thu 24 Sep 2026 08:03:00 +0000
ROA not before:           Thu 24 Sep 2026 08:02:56 +0000
ROA not after:            Sun 01 Nov 2026 08:02:56 +0000
asID:                     62240
IP address blocks:        154.194.120.0/24 maxlen: 24
                          154.194.121.0/24 maxlen: 24
                          154.194.122.0/24 maxlen: 24
                          154.194.123.0/24 maxlen: 24
                          154.194.124.0/24 maxlen: 24
                          154.194.125.0/24 maxlen: 24
                          154.194.127.0/24 maxlen: 24
                          154.195.108.0/24 maxlen: 24
                          154.196.52.0/24 maxlen: 24
                          154.196.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 11:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125597 (0x1ea9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 24 08:02:56 2026 GMT
            Not After : Nov  1 08:02:56 2026 GMT
        Subject: CN=6ab4d934-e375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b3:b0:e2:99:35:91:b7:18:dd:29:80:29:44:
                    17:57:68:24:3e:ad:0b:23:63:af:8d:fb:81:26:3a:
                    ca:31:7e:20:3e:f3:a8:5e:03:41:a9:fc:ea:2f:f7:
                    d0:ff:cc:f3:02:f9:8d:cf:21:f4:fd:d4:75:d3:b3:
                    36:02:7a:15:26:45:4f:58:58:90:d5:8a:2e:2f:2b:
                    b6:d8:62:5b:6f:1f:12:a4:0a:c3:2c:4d:1d:4f:4a:
                    a3:2c:d6:60:26:5c:5b:66:bb:5b:b3:54:6e:7b:b9:
                    c2:23:71:aa:af:08:3e:35:9e:b9:4a:a9:c0:98:ff:
                    3e:31:dc:9d:be:73:25:76:0f:9f:f3:19:bc:23:61:
                    50:a0:b3:54:1a:e4:0d:6f:47:cb:54:b2:16:8a:41:
                    55:7d:b0:96:28:01:72:10:f3:89:37:ff:a2:8c:5e:
                    4e:69:ec:46:db:52:f0:14:5d:3e:b7:a6:b7:2e:7a:
                    87:bf:a8:43:e2:cd:91:65:37:6b:98:ae:10:0f:61:
                    97:c1:6b:34:0f:b1:cb:a2:31:78:75:d7:38:71:20:
                    f0:85:c2:d0:87:f5:03:ab:09:f4:67:ad:40:e4:52:
                    c6:5a:14:91:f8:e3:00:97:76:a5:10:19:1e:00:56:
                    1f:7f:aa:a6:40:b3:e3:3a:37:e1:13:e9:8c:52:d4:
                    0a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6B:D4:6F:7C:73:03:98:8C:BB:CD:4C:91:10:EB:AF:3E:F1:E6:24
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BEF41A2B7EE11F18651F100CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.120.0-154.194.125.255
                  154.194.127.0/24
                  154.195.108.0/24
                  154.196.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:b4:f5:f6:2f:10:50:c9:d4:3d:c7:dc:4d:2b:4c:13:70:d2:
         45:9b:58:ed:34:af:6e:bb:11:25:29:1e:42:2b:b0:e6:be:ef:
         bf:ac:6c:68:36:db:36:d8:aa:7f:78:00:68:96:72:46:8e:87:
         63:10:38:19:60:18:49:d4:0b:d0:ba:0b:fb:53:e0:c4:02:2e:
         58:f3:e9:da:a1:80:13:69:ae:5a:10:17:e9:b5:24:f2:1f:e9:
         f0:7e:91:d1:ca:24:1a:55:11:03:11:62:5f:14:54:55:ac:dd:
         0a:05:81:57:ba:d1:7e:b9:ef:61:6d:f4:23:fc:d7:6a:de:4e:
         d7:41:63:87:dc:57:23:d8:aa:33:05:3e:bc:c3:1a:ce:08:41:
         89:5d:dd:f9:d8:36:63:61:45:13:22:12:81:de:4f:0c:55:5b:
         13:43:72:5f:1a:b6:44:6b:92:f1:7e:37:54:a8:c3:90:13:75:
         27:14:af:44:88:a4:d3:65:f8:f7:3e:e7:98:50:f3:f8:38:93:
         58:e0:ea:65:2d:1b:b4:f9:2a:4c:3a:42:be:22:b6:39:19:52:
         32:6a:70:ed:00:dc:5e:3d:6f:00:57:fd:2b:3f:21:a5:65:b8:
         2f:9e:67:9f:3a:c7:31:ff:d1:87:b5:6e:cd:75:f5:0e:7c:8f:
         76:6b:66:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----