Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D427364D2AC11F18CD6B2D1CE1D38B0.roa
File:                     7D427364D2AC11F18CD6B2D1CE1D38B0.roa (raw, json)
Hash identifier:          NUWRmhS4O3cn336miKwpyICIRfes3h1Y5e0WVFzUH7U=
Subject key identifier:   82:45:DC:A5:BA:4B:7D:72:14:AA:B2:46:59:EC:A6:D0:67:33:F6:F7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01F0CB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D427364D2AC11F18CD6B2D1CE1D38B0.roa
Signing time:             Wed 28 Oct 2026 08:49:31 +0000
ROA not before:           Wed 28 Oct 2026 08:49:26 +0000
ROA not after:            Wed 02 Dec 2026 08:49:26 +0000
asID:                     62240
IP address blocks:        154.194.79.0/24 maxlen: 24 (superfluous maxlen)
                          154.194.82.0/24 maxlen: 24 (superfluous maxlen)
                          154.194.89.0/24 maxlen: 24 (superfluous maxlen)
                          154.194.92.0/24 maxlen: 24 (superfluous maxlen)
                          154.196.16.0/24 maxlen: 24 (superfluous maxlen)
                          154.196.17.0/24 maxlen: 24 (superfluous maxlen)
                          154.196.19.0/24 maxlen: 24 (superfluous maxlen)
                          154.196.20.0/24 maxlen: 24 (superfluous maxlen)
                          154.196.21.0/24 maxlen: 24 (superfluous maxlen)
                          154.196.23.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127179 (0x1f0cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 28 08:49:26 2026 GMT
            Not After : Dec  2 08:49:26 2026 GMT
        Subject: CN=6ae1b71a-7c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:32:13:da:33:6c:53:99:a4:b1:20:04:30:a0:
                    dd:17:58:ae:b6:53:90:2a:71:d3:a0:25:2a:b2:08:
                    1b:bc:0a:e8:22:1e:81:a8:e1:42:11:49:ff:96:62:
                    78:38:d3:24:34:c5:fe:9a:b5:dd:82:78:16:36:b8:
                    b1:a2:d0:f7:26:d1:21:a9:d7:39:f6:1c:a0:18:16:
                    6f:08:aa:61:d3:ea:ec:fd:62:b6:91:92:61:e5:ed:
                    f9:b3:6e:95:7d:bb:2b:16:54:4c:e7:db:40:05:96:
                    a8:7a:e7:af:8c:eb:bd:8c:46:85:39:e6:dd:80:9e:
                    47:90:e7:1a:f8:b9:d9:e3:d3:dd:23:94:dd:51:b9:
                    07:2c:eb:81:d9:67:29:c2:2d:76:83:4c:d4:3e:c7:
                    85:eb:a0:f7:f8:f1:2b:8f:3b:88:e9:ba:65:1c:7a:
                    d6:5f:55:0a:23:df:6f:01:e9:89:a9:90:6b:96:75:
                    04:d4:1c:87:df:5e:0f:dc:d6:86:7e:a3:33:df:e4:
                    a4:b4:4e:49:34:e4:44:23:de:7a:7d:a1:55:4d:1c:
                    ee:d9:fa:fa:8c:8b:4a:77:5e:9c:82:fc:ab:b9:5f:
                    86:cc:86:9b:d0:07:a4:55:88:ab:1a:4d:53:d0:c5:
                    28:64:7f:fd:72:96:43:50:60:37:e8:b9:75:9a:67:
                    6d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:45:DC:A5:BA:4B:7D:72:14:AA:B2:46:59:EC:A6:D0:67:33:F6:F7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D427364D2AC11F18CD6B2D1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.79.0/24
                  154.194.82.0/24
                  154.194.89.0/24
                  154.194.92.0/24
                  154.196.16.0/23
                  154.196.19.0-154.196.21.255
                  154.196.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:43:b5:ec:17:fa:22:f4:bf:ff:8e:d6:9f:91:13:f5:39:e7:
         2e:ef:58:87:3b:26:e2:49:ba:04:69:66:7c:0f:e3:33:17:ba:
         b6:65:52:86:3c:7c:3d:73:62:07:31:36:3f:33:c9:89:64:c5:
         63:fe:d4:8f:9c:7c:aa:01:37:98:df:e4:34:0c:0c:b9:d3:4f:
         00:1c:6a:08:04:b2:a3:d7:56:a2:88:0e:23:05:85:7a:e7:32:
         ae:97:e6:d9:6d:70:9a:d8:7a:a9:58:e1:de:b6:11:e8:e9:4f:
         ea:86:21:f2:8d:40:03:09:ff:bb:39:65:8c:cc:08:45:71:65:
         fc:7a:76:7d:34:fc:26:5d:aa:20:60:51:75:fe:02:2b:59:65:
         be:0a:8e:b0:1e:ce:c6:e5:25:89:a6:e7:58:57:5c:89:d8:de:
         fa:ab:83:81:c5:f3:1c:05:ac:62:43:cd:36:c3:dd:96:c1:19:
         e5:2e:fc:2f:29:41:97:61:cc:96:57:ac:08:cd:fb:0b:9c:40:
         f0:13:6e:d6:d9:7e:1c:ea:02:66:15:a1:2f:28:33:b2:24:06:
         a2:c0:6b:1d:8e:45:b0:b9:8e:a4:79:e2:2e:49:37:1e:4e:d9:
         da:cf:b3:87:22:04:c7:d1:a8:f0:44:bb:87:9e:0d:b4:4a:62:
         95:28:fc:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----