Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73B7D128C49B11F19CD717C9CE1D38B0.roa
File:                     73B7D128C49B11F19CD717C9CE1D38B0.roa (raw, json)
Hash identifier:          yFatrAIRNRFIdhZdANkKDPc/cFlNYr+pyv+XizrdK0Y=
Subject key identifier:   CE:86:06:7C:4D:CF:09:18:CE:69:75:02:D6:C9:92:95:C1:CF:4C:DB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ED5F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73B7D128C49B11F19CD717C9CE1D38B0.roa
Signing time:             Sat 10 Oct 2026 11:12:17 +0000
ROA not before:           Sat 10 Oct 2026 11:12:12 +0000
ROA not after:            Tue 17 Nov 2026 11:12:12 +0000
asID:                     22773
IP address blocks:        154.213.207.0/24 maxlen: 24
                          154.213.208.0/24 maxlen: 24
                          154.213.209.0/24 maxlen: 24
                          154.213.210.0/24 maxlen: 24
                          154.213.213.0/24 maxlen: 24
                          154.213.214.0/24 maxlen: 24
                          154.213.215.0/24 maxlen: 24
                          154.213.216.0/24 maxlen: 24
                          154.213.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126303 (0x1ed5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 10 11:12:12 2026 GMT
            Not After : Nov 17 11:12:12 2026 GMT
        Subject: CN=6aca1d91-1f7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cd:f8:5e:8e:84:0e:cd:26:e4:58:06:1c:8f:
                    05:83:8d:00:f4:9f:c8:2b:7b:39:57:1d:2f:3f:a6:
                    28:3e:bb:39:cc:34:ff:a5:60:66:53:c2:44:1e:d8:
                    19:eb:ac:be:c1:3d:25:de:3b:64:55:7a:69:71:36:
                    5d:74:e5:7d:a3:26:54:77:ad:22:92:92:5a:25:91:
                    2b:ed:ae:c1:30:c7:d3:96:44:0b:2d:bf:83:67:73:
                    be:a1:c6:ce:b3:6b:6c:33:40:6c:e3:de:b8:4c:df:
                    34:0d:4e:43:a9:aa:21:34:bd:db:f7:cf:bc:0c:c8:
                    6f:a0:23:24:86:be:e9:43:58:20:bd:86:06:ed:2e:
                    27:1d:8b:ae:b0:9d:4a:e9:b0:00:bc:4c:9f:70:68:
                    0b:c4:f7:c8:46:14:bc:57:ca:33:54:2a:cd:aa:6a:
                    7e:4d:d9:5d:9d:04:71:a9:c7:53:05:ab:63:e3:d4:
                    d3:df:be:8f:1f:23:39:5a:78:17:e7:f1:d5:62:2e:
                    96:1a:05:e8:8b:5d:7c:3a:61:4c:73:02:63:45:b1:
                    a5:6d:9a:bf:d3:7c:f6:d2:61:b3:ea:4a:25:12:ae:
                    dd:ac:e2:16:a8:6a:06:11:e9:75:f2:7b:d3:66:fd:
                    ea:28:04:d7:44:64:ff:18:71:03:15:5a:3f:a0:c5:
                    4a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:86:06:7C:4D:CF:09:18:CE:69:75:02:D6:C9:92:95:C1:CF:4C:DB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73B7D128C49B11F19CD717C9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.213.207.0-154.213.210.255
                  154.213.213.0-154.213.217.255

    Signature Algorithm: sha256WithRSAEncryption
         9d:68:08:03:df:94:b7:30:9c:02:f8:ab:0e:04:87:28:ca:7c:
         d5:ef:8e:7e:d2:82:4d:57:6b:07:73:7d:77:f3:59:b0:4c:e5:
         c0:a4:3c:aa:1e:cf:9a:b1:81:6d:2a:fa:a3:0c:76:52:99:a5:
         14:9c:c9:ab:e4:33:2c:ba:2f:48:42:1d:18:7c:1e:6d:f7:8b:
         0d:70:c2:6a:65:da:61:bd:a6:6c:d8:a2:35:0f:83:ad:48:ae:
         4a:2d:99:13:16:73:89:4b:98:38:ca:02:64:3f:8b:a8:c9:d6:
         96:5f:fa:c7:83:58:d2:df:d7:2b:84:bb:28:c7:1a:f6:fc:2e:
         a8:ad:9f:2e:40:44:df:fd:aa:e7:e2:3a:90:b4:10:24:55:dd:
         01:1d:b9:70:28:2f:b2:e7:67:bf:cb:7a:14:65:9c:26:f1:f6:
         3f:75:69:a4:0f:56:bd:b7:e6:0c:14:32:dc:d2:2a:ba:75:78:
         db:c3:3c:03:cd:08:fe:94:5c:5b:eb:22:10:70:b7:09:1d:07:
         49:8a:95:78:84:ea:4c:05:b5:19:4f:d2:10:f9:f3:61:34:03:
         9a:42:2c:24:95:ab:f7:7e:fe:62:96:6d:56:83:fa:11:bc:4d:
         33:a3:49:90:ac:03:c6:42:54:57:d6:1d:52:45:c8:20:ce:a2:
         3c:cf:05:7d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----