Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DFD1C28C3AB11F184FAF5B0CE1D38B0.roa
File:                     8DFD1C28C3AB11F184FAF5B0CE1D38B0.roa (raw, json)
Hash identifier:          IFVpi8bvel6QcHbec9d34tXNoo2ygL38HLFJTzKE7sc=
Subject key identifier:   BC:53:2A:91:6E:76:23:B3:58:26:6C:8A:D6:C7:94:28:26:0F:AC:7A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ECEC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DFD1C28C3AB11F184FAF5B0CE1D38B0.roa
Signing time:             Fri 09 Oct 2026 06:35:02 +0000
ROA not before:           Fri 09 Oct 2026 06:34:56 +0000
ROA not after:            Mon 08 Oct 2029 06:34:56 +0000
asID:                     17561
IP address blocks:        154.193.62.0/24 maxlen: 24
                          154.193.84.0/24 maxlen: 24
                          154.193.85.0/24 maxlen: 24
                          154.196.133.0/24 maxlen: 24
                          154.196.161.0/24 maxlen: 24
                          154.197.111.0/24 maxlen: 24
                          154.197.114.0/24 maxlen: 24
                          154.197.115.0/24 maxlen: 24
                          154.198.58.0/24 maxlen: 24
                          154.202.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126188 (0x1ecec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  9 06:34:56 2026 GMT
            Not After : Oct  8 06:34:56 2029 GMT
        Subject: CN=6ac88b16-4823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7e:fe:1f:e2:78:5d:3e:b5:cb:ca:39:db:ff:
                    11:05:da:11:e5:37:3e:13:c3:0d:40:b3:25:b4:86:
                    3f:af:5e:af:f9:ff:88:a8:d7:0d:6a:df:99:5f:af:
                    b7:c1:c5:c9:9b:9a:06:e5:00:5f:c7:e6:d7:8d:68:
                    f8:31:e0:2c:24:a7:99:7d:27:fc:30:b5:8c:02:21:
                    02:1a:e3:f9:01:ad:b9:0e:95:5e:c0:a6:03:c0:7e:
                    ad:80:fb:f3:11:de:f6:fe:19:23:b8:33:f9:89:5e:
                    36:87:49:26:6c:a5:a2:31:e8:e4:ed:fa:4a:26:b5:
                    62:51:b9:81:0e:4f:81:35:61:72:37:d3:48:83:f1:
                    03:c3:26:4f:03:fd:85:d7:90:b3:3f:2b:3d:f7:26:
                    6d:14:9f:bd:5b:1d:bc:2a:ce:71:b4:07:86:20:a6:
                    0d:46:fc:5b:80:3b:c5:13:cd:6e:14:90:77:37:76:
                    34:d2:5e:cc:f0:96:f2:4c:ed:84:4e:dd:87:ea:7b:
                    f9:e7:8d:f1:2f:1a:c3:de:d1:74:68:fb:1d:52:b3:
                    9f:5c:74:96:58:06:ed:97:cf:1b:9c:32:1d:d9:6a:
                    18:e8:20:3d:b2:bb:92:56:32:75:3a:78:57:79:7c:
                    94:b0:71:0f:82:51:da:40:ee:df:f7:08:ad:ca:e3:
                    ab:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:53:2A:91:6E:76:23:B3:58:26:6C:8A:D6:C7:94:28:26:0F:AC:7A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DFD1C28C3AB11F184FAF5B0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.62.0/24
                  154.193.84.0/23
                  154.196.133.0/24
                  154.196.161.0/24
                  154.197.111.0/24
                  154.197.114.0/23
                  154.198.58.0/24
                  154.202.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:75:eb:39:eb:79:10:91:3f:d8:e4:f7:3a:88:a6:14:9b:37:
         ec:ab:4e:8f:70:31:73:0d:ff:2e:c5:51:2f:68:8a:b4:a0:69:
         e9:8a:8d:62:ef:45:50:59:21:d1:c6:1a:99:c8:6a:dd:cd:4e:
         e7:f6:54:ec:74:62:dd:47:7a:66:2a:a0:81:e4:99:08:6c:32:
         76:41:e9:4a:c1:2a:74:8f:dd:74:cb:d2:2b:77:0e:5d:4a:37:
         55:03:99:ff:45:07:62:88:74:22:97:fe:67:a3:c9:86:e2:ef:
         e5:dd:b3:e1:f0:7f:bd:f9:a3:7f:45:ab:ae:01:57:e2:81:e1:
         57:9a:22:c7:8b:39:7c:ae:e5:92:0e:22:c9:8b:ca:a0:54:45:
         ce:86:4e:6f:d9:2e:4a:5f:c3:fe:d9:a1:78:10:bd:2c:4d:d2:
         55:66:2a:c6:fb:db:fe:c4:2a:ff:da:77:67:32:f4:14:ab:71:
         19:38:9f:75:d9:ea:c5:4a:c8:5a:fb:83:18:3f:6c:b6:cb:f0:
         73:e9:97:8a:b3:83:ff:0d:85:61:03:69:56:c1:64:6d:53:b7:
         17:63:6e:16:ab:7e:6c:15:f1:6b:3a:e3:4d:22:8b:dd:d4:d3:
         79:86:e8:31:6b:6d:d2:8b:5f:f1:5c:59:b8:1d:c1:31:60:99:
         f8:90:b6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----