Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/610D8DB6BCA211F1A0E8CEAECE1D38B0.roa
File:                     610D8DB6BCA211F1A0E8CEAECE1D38B0.roa (raw, json)
Hash identifier:          U/FXImnC+ACRfa5UGmhGzXkSGjnyrfSQwYG3pyVb+IQ=
Subject key identifier:   6A:47:56:28:2B:70:0B:8E:A7:6D:AE:AD:4C:EC:7B:16:34:2C:0F:95
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EB92
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/610D8DB6BCA211F1A0E8CEAECE1D38B0.roa
Signing time:             Wed 30 Sep 2026 07:41:43 +0000
ROA not before:           Wed 30 Sep 2026 07:41:39 +0000
ROA not after:            Fri 06 Nov 2026 07:41:39 +0000
asID:                     202656
IP address blocks:        154.219.29.0/24 maxlen: 24
                          154.221.60.0/24 maxlen: 24
                          154.222.40.0/24 maxlen: 24
                          154.222.41.0/24 maxlen: 24
                          154.222.42.0/24 maxlen: 24
                          154.222.192.0/24 maxlen: 24
                          154.222.193.0/24 maxlen: 24
                          154.222.194.0/24 maxlen: 24
                          154.222.195.0/24 maxlen: 24
                          154.222.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125842 (0x1eb92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 30 07:41:39 2026 GMT
            Not After : Nov  6 07:41:39 2026 GMT
        Subject: CN=6abcbd37-e99c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d6:22:3e:50:b6:a2:51:a4:c8:ed:c6:19:72:
                    4f:72:32:3c:99:52:7c:b7:c6:27:2c:48:fc:9c:26:
                    09:4d:cd:46:95:e0:60:43:64:f3:9c:52:11:f2:e4:
                    13:50:79:11:49:44:b3:3c:52:eb:17:33:13:0f:0e:
                    dc:2f:97:58:aa:74:ad:04:f2:a0:2e:4d:e2:cb:05:
                    7f:08:55:d5:ad:a4:ce:bc:f3:fc:7b:c3:ec:73:6e:
                    f9:be:ee:3a:7a:47:85:21:99:ff:ac:7f:96:d3:1f:
                    45:dd:cb:8e:5a:41:1b:1c:e4:1f:ef:3a:cb:26:07:
                    7e:ff:06:3f:f9:7a:55:c9:31:08:61:4c:1b:c2:28:
                    20:db:6e:f9:0e:74:f4:de:70:84:89:7a:2a:73:cf:
                    92:cd:26:92:5d:c9:5d:d1:9f:40:0e:71:5c:5c:7e:
                    e4:54:6a:29:47:64:9e:46:9a:98:fe:5b:9e:53:83:
                    50:a1:65:68:6e:89:51:f6:78:27:9d:18:32:7c:3e:
                    7b:b8:f5:e8:6c:82:9d:95:83:36:61:11:96:e0:c3:
                    21:fb:93:13:71:92:0a:b0:e8:e9:43:99:b1:67:cc:
                    31:ac:54:43:4b:aa:c9:d9:95:c2:cd:4a:ca:09:cc:
                    4d:c7:3e:4c:41:c8:76:56:2a:95:ba:2b:6d:54:72:
                    cf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:47:56:28:2B:70:0B:8E:A7:6D:AE:AD:4C:EC:7B:16:34:2C:0F:95
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/610D8DB6BCA211F1A0E8CEAECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.219.29.0/24
                  154.221.60.0/24
                  154.222.40.0-154.222.42.255
                  154.222.192.0-154.222.196.255

    Signature Algorithm: sha256WithRSAEncryption
         c7:a9:0e:89:be:7e:49:76:c6:29:06:03:38:9e:89:8b:0f:4e:
         0b:3e:f3:1d:2e:42:ab:fe:3b:bf:15:71:8e:b0:c7:76:72:5d:
         46:14:ce:f6:e8:08:3b:47:00:93:36:06:48:8e:d3:52:36:76:
         ac:85:e0:2a:9c:9e:0b:86:eb:93:9d:f8:7c:a6:a6:24:9f:8c:
         d0:d3:f9:c3:f2:a5:dc:01:fa:0d:a8:fb:47:9f:b1:40:a1:0c:
         a9:37:1d:5f:20:0f:ad:fe:dd:d8:a8:4f:48:cd:91:f6:0d:da:
         dd:91:ac:63:75:e6:8d:f6:3f:9a:83:d4:26:df:f0:45:f3:ab:
         0f:ef:e3:6a:4f:76:3b:ff:ab:7c:16:64:5f:92:a7:83:10:9a:
         e8:21:fa:e4:bc:9d:3c:c7:1c:f0:3a:a9:ca:85:cd:30:f4:13:
         32:d3:41:4c:42:a8:61:a8:d5:2d:2c:c9:a2:f7:be:8a:61:52:
         f7:31:cf:a1:f5:65:c5:4c:82:5f:06:91:73:ee:db:3e:64:cd:
         c2:70:f9:f9:61:e6:52:5d:0c:e8:2b:ac:bc:92:e5:24:3d:c7:
         82:e0:4a:a2:8e:75:cd:dd:34:7f:ca:70:d5:7a:30:c8:76:63:
         95:bb:b2:46:d8:51:3d:fe:df:da:c4:76:b0:fa:d5:58:c1:be:
         dc:57:2c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----