Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CE00876BCA711F19478EDCDCE1D38B0.roa
File:                     6CE00876BCA711F19478EDCDCE1D38B0.roa (raw, json)
Hash identifier:          t0CMrWlxvkcY3ZLrMRhc5rNBbqskjXyB4u8YruCTJAQ=
Subject key identifier:   30:92:D1:DB:35:B9:63:26:47:87:8D:9E:08:2F:B3:0D:D9:87:FE:36
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EBA8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CE00876BCA711F19478EDCDCE1D38B0.roa
Signing time:             Wed 30 Sep 2026 08:17:50 +0000
ROA not before:           Wed 30 Sep 2026 08:17:45 +0000
ROA not after:            Fri 06 Nov 2026 08:17:45 +0000
asID:                     202656
IP address blocks:        154.222.1.0/24 maxlen: 24
                          154.222.12.0/24 maxlen: 24
                          154.222.13.0/24 maxlen: 24
                          154.222.14.0/24 maxlen: 24
                          154.222.15.0/24 maxlen: 24
                          154.222.43.0/24 maxlen: 24
                          154.222.44.0/24 maxlen: 24
                          154.222.45.0/24 maxlen: 24
                          154.222.198.0/24 maxlen: 24
                          154.222.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125864 (0x1eba8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 30 08:17:45 2026 GMT
            Not After : Nov  6 08:17:45 2026 GMT
        Subject: CN=6abcc5ae-05dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:2d:86:a3:89:a4:57:74:53:7c:e7:58:d2:69:
                    ff:a0:58:45:be:7f:b4:25:b2:57:37:ff:b4:dd:01:
                    d8:da:dc:ed:24:87:57:7f:5c:5e:63:f0:05:8b:5f:
                    d4:0b:0a:0d:76:18:a3:2d:56:38:62:e2:a5:57:4f:
                    66:1a:d6:70:43:64:ab:b7:bd:96:3d:e3:1a:88:5e:
                    9f:3d:64:89:26:1b:89:02:c7:c4:e2:19:5b:a5:32:
                    8a:8a:6a:71:0f:05:68:d1:23:f6:86:ce:f4:58:97:
                    60:e5:74:36:48:cd:99:4e:4b:6e:0b:d4:74:1c:c5:
                    0e:0d:a1:a4:b0:9f:7c:53:ce:2b:48:c5:48:15:5f:
                    38:4f:e2:d8:cf:3c:29:c1:a7:5f:bd:83:00:76:9d:
                    ee:98:e9:e3:f5:eb:45:a4:18:41:20:06:50:ee:98:
                    c1:e6:85:75:ad:ef:d2:d0:0d:20:0f:11:31:a5:6b:
                    c3:46:a7:f1:c5:60:d4:5f:e9:e4:9a:60:0c:eb:7f:
                    a8:a8:05:98:6f:36:4f:23:c0:2a:bc:8e:3d:3e:8f:
                    f2:24:df:78:cb:3f:ba:e1:26:0c:86:02:2a:d7:6e:
                    cc:f6:50:b0:b5:32:e9:f7:b8:e1:86:41:90:8f:b5:
                    1a:9b:e5:9e:2a:88:cc:04:54:f8:f4:ef:2f:0e:ff:
                    b6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:92:D1:DB:35:B9:63:26:47:87:8D:9E:08:2F:B3:0D:D9:87:FE:36
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CE00876BCA711F19478EDCDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.1.0/24
                  154.222.12.0/22
                  154.222.43.0-154.222.45.255
                  154.222.198.0/24
                  154.222.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:ed:ef:63:77:ab:80:22:07:8b:a0:68:1a:c3:fa:71:9c:e0:
         32:6a:5d:50:9b:15:07:82:5d:3f:61:d7:f1:14:f2:17:33:0b:
         5b:a5:fc:43:43:7e:e7:f2:b4:8c:21:41:26:9e:23:3f:69:91:
         bd:03:83:ab:ec:00:3a:bc:f0:0d:c4:5c:bc:93:c6:c2:2b:23:
         57:a4:da:36:07:83:27:30:aa:c4:1a:57:71:ac:8e:a7:b1:7d:
         7c:ca:7b:20:2f:f5:b0:bc:a3:12:17:11:ba:97:ad:87:ff:26:
         b4:48:12:4c:56:e6:3a:5a:fe:8c:37:8a:b1:d2:85:40:a4:fc:
         36:9c:42:81:72:aa:80:ee:2c:74:62:7e:af:0d:32:06:16:56:
         86:f7:80:44:b6:5f:0f:69:0e:24:31:08:e4:e2:c8:b4:c4:16:
         9f:10:63:d3:73:cd:ee:59:90:07:93:38:a8:39:83:b1:82:31:
         3f:57:7d:22:98:d3:16:90:ed:00:31:6f:b9:b3:d0:67:b8:96:
         c5:b1:b5:e2:6b:d9:36:2d:a7:33:20:ab:02:9a:0d:23:18:81:
         ec:29:b2:40:4a:b3:af:e4:f5:ef:ce:07:33:a3:a1:01:6e:fc:
         81:8a:05:37:2b:20:7c:ef:da:fc:8b:0c:70:d4:00:4d:cc:23:
         60:e3:7a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----