Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E2D77D4C79C11F1B6776BE7CE1D38B0.roa
File:                     8E2D77D4C79C11F1B6776BE7CE1D38B0.roa (raw, json)
Hash identifier:          N4HvLm007HK9M6LTQ5zTqNtp68L7dneEAH3ghyXlY5c=
Subject key identifier:   55:48:10:BB:9B:87:91:84:FF:6B:2A:D5:91:98:FA:FB:B8:F3:B5:3C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EDE7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E2D77D4C79C11F1B6776BE7CE1D38B0.roa
Signing time:             Wed 14 Oct 2026 06:57:44 +0000
ROA not before:           Wed 14 Oct 2026 06:57:39 +0000
ROA not after:            Fri 13 Nov 2026 06:57:39 +0000
asID:                     17497
IP address blocks:        154.193.31.0/24 maxlen: 24
                          154.222.128.0/22 maxlen: 24
                          154.222.128.0/24 maxlen: 24
                          154.222.129.0/24 maxlen: 24
                          154.222.130.0/24 maxlen: 24
                          154.222.131.0/24 maxlen: 24
                          154.222.140.0/22 maxlen: 24
                          154.222.140.0/24 maxlen: 24
                          154.222.141.0/24 maxlen: 24
                          154.222.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126439 (0x1ede7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 14 06:57:39 2026 GMT
            Not After : Nov 13 06:57:39 2026 GMT
        Subject: CN=6acf27e8-c677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b0:7e:f4:61:24:ea:d1:c1:3e:95:5c:20:b0:
                    3e:8a:27:53:6a:44:a7:27:1f:9b:bc:f0:13:df:f0:
                    b6:98:3d:09:a0:3d:fc:1a:87:7f:02:47:42:e9:1f:
                    2f:6c:a3:1e:a0:27:d9:97:f6:15:8b:23:a8:73:f6:
                    4a:92:72:76:e4:65:15:9e:51:ce:68:56:37:24:a5:
                    7a:ea:7c:84:13:ae:67:92:2c:9d:c5:5e:0d:39:d5:
                    38:c9:54:f9:36:e1:50:45:9a:20:00:09:34:b7:26:
                    37:68:06:2a:0c:f1:06:12:52:40:17:97:d8:27:a8:
                    c7:c0:7f:55:7d:73:00:4d:c3:66:71:07:47:6c:f3:
                    98:8e:8b:85:83:35:b9:b1:3c:2c:c8:f1:d8:aa:aa:
                    fc:ee:1a:d8:d9:8d:7b:7c:96:db:ce:8f:19:57:1b:
                    ae:75:25:fc:d6:ca:0a:24:0e:a1:7d:f7:4f:df:49:
                    d3:f9:8c:cb:38:83:03:6d:72:cf:1c:e9:b7:47:f7:
                    f3:ed:d6:77:16:5a:dc:7d:35:99:7e:1e:bc:ee:59:
                    8f:ec:67:ed:48:66:63:83:41:94:24:0e:53:dc:cc:
                    ef:c3:28:cd:3b:01:97:fb:0f:7a:2d:fe:ad:93:bb:
                    6c:8f:0e:00:1c:44:9b:d4:e6:b5:31:7b:67:1d:9c:
                    fb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:48:10:BB:9B:87:91:84:FF:6B:2A:D5:91:98:FA:FB:B8:F3:B5:3C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E2D77D4C79C11F1B6776BE7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.31.0/24
                  154.222.128.0/22
                  154.222.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:18:0c:a2:0d:6a:9f:12:c4:e0:03:db:24:00:82:a8:6a:76:
         e1:18:fe:d8:3f:07:32:4c:76:a9:6c:77:57:a1:ef:e8:b4:28:
         5d:ec:54:d1:ef:e1:e1:bb:59:99:ec:c6:a4:76:5c:75:d2:e4:
         ca:c4:25:70:49:cd:36:77:48:68:6a:62:33:db:51:bb:aa:fc:
         3a:2b:e4:ac:5d:dd:18:d2:a2:7c:89:7c:db:27:ab:ed:e6:e4:
         13:bf:3a:0a:45:b3:83:1e:c0:d1:f2:5b:c5:1c:ec:9c:9e:26:
         88:43:57:95:9f:72:01:bb:cc:d6:db:25:a2:d8:3c:16:4b:ac:
         b5:dd:14:bb:57:29:d5:1b:57:51:18:88:be:5c:fb:0d:08:ab:
         87:a5:e3:48:65:36:e2:d4:f0:26:d2:ba:ad:9c:01:0a:70:4f:
         1f:e3:29:58:f8:68:43:4b:1e:28:16:d6:77:1f:8a:61:0a:ee:
         eb:bf:24:22:48:17:59:0a:35:94:4b:1f:a6:23:3f:7e:17:16:
         e8:8f:2b:b5:61:8d:8f:a2:68:d4:67:e8:fe:59:d5:1a:80:2b:
         7a:76:07:8e:0a:26:7d:9f:e3:a3:93:ad:6c:f4:26:0b:45:a0:
         a3:99:a6:d1:4b:ec:af:38:d4:bb:f4:df:d4:70:52:f5:71:fa:
         f5:66:a3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----