Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/604752BCC6D511F192E3CBD3CE1D38B0.roa
File:                     604752BCC6D511F192E3CBD3CE1D38B0.roa (raw, json)
Hash identifier:          saTcDfKvReA8i+JCofJd8nG5jUlqiMM6y6xVH2d8wHw=
Subject key identifier:   BC:EC:2A:D1:BF:EF:1D:59:3C:9F:EE:DF:D2:4C:DD:50:A1:7B:98:AA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EDC0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/604752BCC6D511F192E3CBD3CE1D38B0.roa
Signing time:             Tue 13 Oct 2026 07:11:57 +0000
ROA not before:           Tue 13 Oct 2026 07:11:52 +0000
ROA not after:            Fri 20 Nov 2026 07:11:52 +0000
asID:                     152726
IP address blocks:        154.200.28.0/24 maxlen: 24
                          154.200.29.0/24 maxlen: 24
                          154.200.30.0/24 maxlen: 24
                          154.200.31.0/24 maxlen: 24
                          154.200.32.0/24 maxlen: 24
                          154.200.33.0/24 maxlen: 24
                          154.200.44.0/24 maxlen: 24
                          154.200.45.0/24 maxlen: 24
                          154.200.90.0/24 maxlen: 24
                          154.200.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126400 (0x1edc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 13 07:11:52 2026 GMT
            Not After : Nov 20 07:11:52 2026 GMT
        Subject: CN=6acdd9bd-34ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:41:87:b5:9e:1f:f0:e0:01:34:d0:26:47:84:
                    92:1d:e6:1f:82:bd:70:3a:6e:72:4d:3d:ea:85:4f:
                    2a:b5:86:52:f0:ce:44:ef:53:2d:ec:97:81:1a:96:
                    3d:b4:fc:12:56:42:1c:84:e9:0c:96:29:ac:97:d5:
                    e5:56:83:b6:32:ba:76:3a:ef:49:82:99:62:ce:c0:
                    f4:52:ac:33:67:e9:e4:d3:36:45:c6:bf:15:a7:81:
                    9c:fd:94:ec:a7:3d:95:99:c9:66:53:ef:a6:fe:81:
                    7b:2d:ab:74:12:f2:07:26:95:f0:61:10:9d:d0:ce:
                    f3:d9:19:d1:6e:05:a3:50:72:81:ad:ff:5f:e3:d0:
                    fb:fc:03:e6:84:35:cf:22:30:29:09:5b:6a:2d:f8:
                    f3:ba:fd:92:2f:42:ae:15:dc:14:04:f5:22:53:9d:
                    b8:40:45:32:58:15:4c:65:af:21:2d:e2:26:96:3f:
                    5e:70:e1:01:fe:e0:3e:99:43:65:b2:b2:24:7f:5c:
                    e4:54:96:84:b2:66:aa:97:15:85:41:c1:76:d9:34:
                    75:ec:c3:ea:09:6e:21:7a:0d:45:2d:d1:c0:37:3f:
                    be:76:95:14:75:58:6f:57:fe:9e:31:d4:6a:f2:3b:
                    ab:4e:a0:94:a6:bd:a5:63:5f:b3:62:f3:e4:e1:54:
                    9b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:EC:2A:D1:BF:EF:1D:59:3C:9F:EE:DF:D2:4C:DD:50:A1:7B:98:AA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/604752BCC6D511F192E3CBD3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.28.0-154.200.33.255
                  154.200.44.0/23
                  154.200.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:5d:4d:75:22:6b:87:1c:70:6e:08:02:97:70:4c:0f:80:72:
         11:ad:b9:85:b5:1c:7a:d8:84:33:74:28:72:68:b6:ce:00:1a:
         76:88:b7:88:e3:5a:ec:6a:51:b1:91:ec:40:26:06:12:dd:ee:
         e9:3b:d7:eb:76:5f:ea:80:c7:85:9a:65:55:31:c8:54:df:7b:
         13:d2:1b:9a:f4:09:0d:9e:9b:e8:da:9f:8b:65:55:90:b1:30:
         f5:be:5b:3e:ea:99:a7:b8:ab:99:ff:6e:50:d1:af:c9:ac:cd:
         2e:c9:f5:72:48:0e:b0:d2:8f:af:1c:b9:aa:ac:b8:a0:1e:c6:
         92:27:e1:d8:18:c8:f8:94:e1:fc:a3:63:71:57:14:4c:04:8b:
         2c:6a:44:6b:1d:46:8d:35:6a:75:cd:d6:58:89:6c:e4:db:20:
         84:d0:f4:22:69:96:e3:f8:73:63:e3:1d:7f:b0:12:e5:fd:78:
         17:8c:20:91:35:1d:15:c8:89:93:5f:b4:3e:f0:fd:1f:92:12:
         ac:ae:e4:18:d2:6c:17:b3:5a:57:25:1e:56:42:ad:e5:d3:3a:
         25:23:53:cc:fd:a8:17:31:12:ed:9c:30:fb:f4:8c:36:fa:8e:
         37:dd:61:4f:ae:05:2a:7a:81:78:8d:24:d3:2a:da:2c:ec:71:
         39:c0:f8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----