Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CE4D986C15411F192DF11D4CE1D38B0.roa
File:                     5CE4D986C15411F192DF11D4CE1D38B0.roa (raw, json)
Hash identifier:          a2tMKesSH2pGHfOSxBzwPGqGzUmK1mXI/sCXCekQfs8=
Subject key identifier:   B0:B2:EF:5C:F9:F4:79:7B:88:D6:10:70:0E:B9:C4:3F:1A:1D:B9:39
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC6B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CE4D986C15411F192DF11D4CE1D38B0.roa
Signing time:             Tue 06 Oct 2026 07:05:51 +0000
ROA not before:           Tue 06 Oct 2026 07:05:47 +0000
ROA not after:            Fri 06 Nov 2026 07:05:47 +0000
asID:                     151347
IP address blocks:        154.84.242.0/24 maxlen: 24
                          154.84.244.0/24 maxlen: 24
                          154.84.245.0/24 maxlen: 24
                          154.84.247.0/24 maxlen: 24
                          154.84.248.0/24 maxlen: 24
                          154.84.249.0/24 maxlen: 24
                          154.84.251.0/24 maxlen: 24
                          154.84.252.0/24 maxlen: 24
                          154.84.253.0/24 maxlen: 24
                          154.84.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 10:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126059 (0x1ec6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  6 07:05:47 2026 GMT
            Not After : Nov  6 07:05:47 2026 GMT
        Subject: CN=6ac49dcf-bea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bc:d8:75:50:0a:6f:da:a2:74:82:04:b4:14:
                    d9:27:eb:5c:95:1f:4a:a8:00:3b:07:64:37:6e:71:
                    86:97:1f:20:34:56:23:59:5a:8e:dd:e0:0c:e0:5c:
                    02:c9:73:21:39:cc:89:59:29:3d:50:3e:a4:9a:9f:
                    97:67:02:08:71:94:79:d5:a5:c1:c9:3a:6b:72:2d:
                    8a:b8:42:48:60:72:6a:29:16:98:bd:85:e4:ae:e4:
                    97:35:da:26:e4:a5:3c:8c:b9:f6:da:38:6b:ca:7a:
                    8d:80:a8:83:ff:d9:28:46:0f:11:f8:6d:fc:19:55:
                    e0:d0:c8:ce:71:fb:04:34:b0:0a:8d:d8:d8:0b:a8:
                    78:70:71:35:34:81:ee:6f:d9:3d:07:c1:22:c6:df:
                    3a:c2:6f:1d:5d:33:d8:15:d8:2c:47:5d:d8:e4:e5:
                    f8:73:a1:e3:b8:0e:6b:9a:da:4c:7e:6a:24:fc:0f:
                    d6:6f:aa:6f:60:b7:1c:7d:6f:10:d1:4e:eb:81:58:
                    f0:df:ae:08:1d:6f:a2:a3:1e:3a:e2:11:f9:9e:5e:
                    bb:ab:29:cc:59:6f:6b:ba:53:13:b2:58:ae:4f:15:
                    b5:7c:6b:26:27:20:e3:5a:00:af:31:94:59:fa:90:
                    1b:1a:38:73:ed:03:51:8c:8f:df:33:fe:08:d0:44:
                    b2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B2:EF:5C:F9:F4:79:7B:88:D6:10:70:0E:B9:C4:3F:1A:1D:B9:39
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CE4D986C15411F192DF11D4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.242.0/24
                  154.84.244.0/23
                  154.84.247.0-154.84.249.255
                  154.84.251.0-154.84.254.255

    Signature Algorithm: sha256WithRSAEncryption
         79:cb:18:0b:fa:27:73:58:c6:02:92:2d:31:38:d6:39:f9:f1:
         b6:95:6b:cb:40:a3:88:fc:b5:af:b9:5c:72:4e:85:79:85:df:
         ce:5d:49:02:11:e6:f5:c0:bc:db:52:1e:de:52:e3:73:bd:c6:
         38:2b:1d:e1:57:30:a1:7e:f9:b7:c3:de:6a:0f:af:ac:d8:8c:
         0a:a2:e8:72:f1:ff:b7:c3:67:b1:8f:75:ee:c3:3e:d4:e3:b3:
         db:f5:31:c6:04:e0:4c:62:e7:12:b9:af:a2:11:d8:71:50:aa:
         34:f5:6d:6e:00:3c:09:3b:e0:c4:50:e1:21:3e:53:05:d1:85:
         78:d3:f2:62:18:99:ac:60:d4:cf:63:13:e7:75:ec:db:76:44:
         b2:7f:b5:55:f7:69:2d:cb:d1:ee:c6:60:26:90:b3:99:70:91:
         b5:49:8b:a7:7f:ed:62:bf:61:96:94:ed:0a:0b:8c:31:34:64:
         13:52:0d:f7:99:56:1e:5b:53:50:7d:a7:cc:26:71:96:6c:0c:
         9a:28:c5:30:e5:9d:1b:4f:b9:1c:33:cd:83:e8:f8:cc:ff:12:
         8f:1c:fc:62:b8:a7:d2:d1:96:d0:48:2b:33:0c:65:9f:12:a3:
         6d:ad:ae:71:25:89:c9:a5:67:ab:f5:bb:1d:7c:f2:4f:d3:b3:
         d7:32:d3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----