Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91113FB6B7F311F1930955A3CE1D38B0.roa
File:                     91113FB6B7F311F1930955A3CE1D38B0.roa (raw, json)
Hash identifier:          f1tRTB8OShWbl0BOBJ7hBoM/wIcjsran0pt6rzlyE7E=
Subject key identifier:   6D:18:39:65:C1:76:06:82:54:BE:9B:C8:67:0F:AD:DE:81:C7:D8:44
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EAAF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91113FB6B7F311F1930955A3CE1D38B0.roa
Signing time:             Thu 24 Sep 2026 08:40:17 +0000
ROA not before:           Thu 24 Sep 2026 08:40:13 +0000
ROA not after:            Sun 01 Nov 2026 08:40:13 +0000
asID:                     62240
IP address blocks:        154.194.70.0/24 maxlen: 24
                          154.194.71.0/24 maxlen: 24
                          154.194.75.0/24 maxlen: 24
                          154.194.76.0/24 maxlen: 24
                          154.194.77.0/24 maxlen: 24
                          154.194.86.0/24 maxlen: 24
                          154.194.87.0/24 maxlen: 24
                          154.194.88.0/24 maxlen: 24
                          154.195.172.0/24 maxlen: 24
                          154.196.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 11:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125615 (0x1eaaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 24 08:40:13 2026 GMT
            Not After : Nov  1 08:40:13 2026 GMT
        Subject: CN=6ab4e1f1-880b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ed:1f:f0:9d:9f:60:fb:5c:4e:a2:e2:e4:c8:
                    7b:38:a4:b3:9b:f7:e2:c3:35:c8:06:cd:86:97:10:
                    6f:ea:07:a8:37:59:8b:11:0b:8c:dd:e7:52:8d:3d:
                    6f:1c:62:6e:60:62:fa:a8:e8:1a:54:91:55:b3:fc:
                    a4:09:3c:76:91:8f:40:6b:dd:63:79:17:d0:bd:f1:
                    d8:8e:31:8c:61:79:02:37:03:36:e8:31:73:48:3a:
                    fb:ad:2f:f1:df:84:cf:58:3d:97:5d:b3:ea:b0:59:
                    94:26:be:f2:f2:27:a3:e6:9b:12:7e:d2:9b:ca:fe:
                    eb:f3:a5:87:fd:c1:e5:4b:5e:14:9d:8c:55:02:f6:
                    50:ae:e0:b2:83:d2:62:4b:ef:ed:e9:c8:9f:68:c7:
                    6f:14:43:0f:76:5e:53:08:b4:b6:f1:bd:6f:0d:b1:
                    ce:3f:cd:18:2a:d6:a0:77:2d:93:9e:0e:de:08:56:
                    38:ec:2a:4f:db:ff:99:03:cc:7a:8b:ff:5f:c8:cb:
                    42:87:d7:fd:70:36:de:5e:b7:2f:fc:33:a7:c1:1a:
                    d4:21:ea:59:d3:1e:e0:cc:0a:55:d6:4f:34:01:92:
                    72:27:4a:1a:b7:78:cd:24:83:85:67:75:2f:9e:ec:
                    96:45:59:1d:cc:2c:a1:6e:0e:4c:cf:5f:a3:52:59:
                    2f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:18:39:65:C1:76:06:82:54:BE:9B:C8:67:0F:AD:DE:81:C7:D8:44
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91113FB6B7F311F1930955A3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.70.0/23
                  154.194.75.0-154.194.77.255
                  154.194.86.0-154.194.88.255
                  154.195.172.0/24
                  154.196.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:84:b9:92:b4:9d:9c:5c:7d:40:30:86:b5:9f:9f:28:fd:16:
         af:d2:8f:88:98:c7:1a:77:aa:46:f9:5e:e0:29:4c:32:d2:59:
         e0:3b:87:52:13:39:c5:da:7b:d1:07:67:f6:8e:2d:e5:9d:98:
         7b:d3:85:1a:a5:39:04:fb:6e:8a:b1:b2:a1:40:ec:cb:60:54:
         ca:83:03:55:15:6e:ff:7c:1b:09:e6:93:12:42:3d:cc:c5:d1:
         1d:a2:aa:04:37:87:71:f2:fd:d4:4a:3a:5f:72:ba:2e:bb:1f:
         a4:5a:1b:46:e0:37:6b:d7:7b:6a:50:30:f8:83:2c:4e:74:46:
         f8:0f:ee:a4:ce:54:5c:fb:86:4d:cf:b6:bb:03:97:63:9d:61:
         65:82:35:14:26:c6:94:7a:7f:94:1d:69:ad:d2:f4:8a:8b:8c:
         65:3a:01:1c:e3:ed:15:44:6e:9f:dc:c0:6b:f5:92:8d:5f:54:
         ac:0f:0d:09:48:69:42:5d:53:96:cf:29:83:20:e4:e3:b4:8b:
         e9:41:88:3a:84:9d:7e:79:50:5f:fd:76:53:9b:08:d1:8b:0b:
         2d:6f:cf:56:5b:19:a7:85:c0:a3:0d:c0:8d:26:ab:54:85:60:
         6d:c5:05:fa:04:33:4d:cc:e7:27:d7:d8:8f:2c:ed:a1:3e:f6:
         30:82:1d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----