Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70394502BF0211F1A98D94AECE1D38B0.roa
File:                     70394502BF0211F1A98D94AECE1D38B0.roa (raw, json)
Hash identifier:          /nn0Ny5ze/ikgevGFlRM599xdQIL0asGvrcW6vF6t7c=
Subject key identifier:   A9:88:1E:DB:78:A7:83:EC:75:AB:85:20:62:83:37:0B:CF:86:92:E0
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EBEC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70394502BF0211F1A98D94AECE1D38B0.roa
Signing time:             Sat 03 Oct 2026 08:14:22 +0000
ROA not before:           Sat 03 Oct 2026 08:14:18 +0000
ROA not after:            Tue 10 Nov 2026 08:14:18 +0000
asID:                     138915
IP address blocks:        154.95.72.0/22 maxlen: 24
                          154.95.94.0/24 maxlen: 24
                          154.95.96.0/22 maxlen: 24
                          154.95.100.0/22 maxlen: 24
                          154.95.104.0/22 maxlen: 24
                          154.95.108.0/22 maxlen: 24
                          154.95.112.0/22 maxlen: 24
                          154.95.116.0/22 maxlen: 24
                          154.95.120.0/23 maxlen: 24
                          154.95.122.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125932 (0x1ebec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  3 08:14:18 2026 GMT
            Not After : Nov 10 08:14:18 2026 GMT
        Subject: CN=6ac0b95e-6720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:72:58:94:c1:3b:26:96:f2:f5:33:de:b2:e9:
                    26:bd:88:3e:6e:5b:9f:11:d2:bb:4b:a8:23:49:2a:
                    cd:de:74:f7:bb:11:0e:54:33:8a:36:87:8d:29:0a:
                    c3:7d:ff:df:12:7a:00:f9:82:a4:aa:b0:00:8b:f6:
                    d2:1d:b6:5a:ee:ec:f4:4d:49:a3:5b:f6:f6:d2:22:
                    25:08:36:7d:83:7a:cc:b0:22:9d:5f:92:19:64:e5:
                    0f:c5:74:15:55:c8:18:11:b3:51:6e:0b:48:0e:97:
                    eb:56:e8:52:45:4c:aa:6d:fe:bc:bd:ab:28:51:72:
                    32:a6:fc:e7:f6:02:77:0c:68:00:fd:39:a6:1c:bc:
                    55:aa:ec:f7:d5:98:7d:41:0e:e6:96:9a:f5:6e:c2:
                    e4:53:01:b7:e7:15:22:8e:64:74:1e:fb:09:32:3c:
                    1f:40:c6:51:1c:6a:1c:82:40:8d:b8:3c:c6:5d:a9:
                    ad:2e:17:3f:07:96:4c:7e:af:96:82:a2:d6:b9:e8:
                    55:14:49:2f:0c:32:86:a3:02:50:c9:64:39:73:ba:
                    65:5a:d2:76:cd:2e:ff:75:b9:6e:e0:09:d7:82:4f:
                    51:63:90:a1:71:30:9a:2a:6d:85:7c:ee:08:12:0d:
                    65:6a:89:a0:15:e8:c9:4b:73:33:16:d7:17:1d:f7:
                    fa:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:88:1E:DB:78:A7:83:EC:75:AB:85:20:62:83:37:0B:CF:86:92:E0
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70394502BF0211F1A98D94AECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.95.72.0/22
                  154.95.94.0/24
                  154.95.96.0-154.95.123.255

    Signature Algorithm: sha256WithRSAEncryption
         87:9d:f1:f5:8e:3d:95:bc:16:35:20:a6:a0:cb:2b:ce:4c:0e:
         c0:47:a6:de:8f:d4:a6:5d:29:ff:73:97:22:ab:4c:f9:93:56:
         e2:64:9b:f6:50:d6:b2:c4:b9:a7:a6:ac:6b:da:fb:81:89:a7:
         07:a8:83:f2:92:c5:af:5c:bd:71:7a:6b:32:6f:32:e9:6a:42:
         44:40:36:81:54:a5:5c:4f:97:ca:72:62:0d:78:85:9d:e9:04:
         da:4c:83:22:f2:70:74:58:8b:da:35:e9:24:fa:de:25:76:ad:
         b8:84:ba:aa:53:bc:9a:92:cc:63:95:dd:ed:25:f7:c3:9e:73:
         3b:7b:41:14:26:95:08:b6:e6:46:64:6f:6d:c8:6a:66:12:81:
         c4:2d:13:80:c7:5a:8b:04:e3:fd:f7:4c:8b:45:dd:37:f0:5c:
         d3:1c:fb:59:6e:fd:8c:c4:ca:f5:6c:24:96:e7:32:27:3e:ce:
         bc:cf:14:f5:03:ea:1a:5a:55:18:0a:6c:b3:fe:06:a9:76:56:
         f0:aa:ca:5b:41:12:4a:47:e5:df:7e:19:20:eb:fa:c4:80:a5:
         1f:e4:30:f2:d0:33:9b:20:1d:87:b8:ac:b5:88:c1:13:50:5f:
         5f:8a:79:30:74:77:4e:73:47:d0:57:8d:65:39:a0:af:6d:d4:
         70:24:64:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----