Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/968F7DECB98611F19CADFFE5CE1D38B0.roa
File:                     968F7DECB98611F19CADFFE5CE1D38B0.roa (raw, json)
Hash identifier:          GTP258WnUeNiZIN0XO3sggXvdUe1+eQHMP1eziEJICo=
Subject key identifier:   1F:42:EF:92:0A:C6:08:00:11:47:59:5C:47:EA:F6:DD:1E:76:E9:88
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EAD3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/968F7DECB98611F19CADFFE5CE1D38B0.roa
Signing time:             Sat 26 Sep 2026 08:45:13 +0000
ROA not before:           Sat 26 Sep 2026 08:45:09 +0000
ROA not after:            Sun 01 Nov 2026 08:45:09 +0000
asID:                     62240
IP address blocks:        154.85.26.0/24 maxlen: 24
                          154.85.97.0/24 maxlen: 24
                          154.85.99.0/24 maxlen: 24
                          154.90.1.0/24 maxlen: 24
                          154.90.129.0/24 maxlen: 24
                          154.90.130.0/24 maxlen: 24
                          154.90.131.0/24 maxlen: 24
                          154.90.142.0/24 maxlen: 24
                          154.90.143.0/24 maxlen: 24
                          154.90.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125651 (0x1ead3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 26 08:45:09 2026 GMT
            Not After : Nov  1 08:45:09 2026 GMT
        Subject: CN=6ab78619-b5a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3c:bb:5c:95:fa:de:f8:f2:14:f3:4b:11:3d:
                    18:4c:67:39:29:c5:a5:8b:40:3e:0d:b4:f1:b6:e2:
                    56:1b:e4:62:7d:3a:1f:9e:79:67:78:d7:58:72:55:
                    d4:9b:e8:60:8d:1b:65:68:17:e6:ee:3e:13:7c:eb:
                    71:65:a9:72:54:57:2c:36:c2:cb:fc:9d:45:dc:c9:
                    a7:3d:9f:2d:a6:15:de:19:aa:dd:5d:97:e0:1b:75:
                    d7:a2:07:6b:e6:99:ba:57:bb:ac:7c:fa:3f:a7:53:
                    4c:3d:f8:38:54:7c:8a:78:42:d0:c3:1b:2e:b4:9f:
                    f6:39:38:80:d2:3e:ce:5d:4e:7c:41:3e:72:c6:f2:
                    87:78:2e:ad:3e:43:30:da:b2:a2:9a:99:9b:3e:11:
                    0f:06:e4:b4:b3:67:7b:a8:bc:a0:72:ed:f6:98:e1:
                    bc:6b:32:dc:c9:7e:0c:4f:37:8a:81:17:35:0a:41:
                    28:4c:30:28:09:ec:90:fc:ac:3b:ef:84:88:7d:58:
                    6e:a3:3c:7d:40:e7:09:ba:ab:d6:4a:21:a0:41:c8:
                    2f:ac:ed:df:5a:48:7c:3b:3b:78:19:ca:11:7d:e6:
                    d9:b6:7f:15:84:7e:5f:53:ef:1a:af:18:6e:fb:fc:
                    b5:78:39:3a:58:34:b9:eb:3a:90:ee:63:06:57:c3:
                    83:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:42:EF:92:0A:C6:08:00:11:47:59:5C:47:EA:F6:DD:1E:76:E9:88
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/968F7DECB98611F19CADFFE5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.85.26.0/24
                  154.85.97.0/24
                  154.85.99.0/24
                  154.90.1.0/24
                  154.90.129.0-154.90.131.255
                  154.90.142.0/23
                  154.90.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:77:7f:32:d5:0b:29:ed:34:7e:12:ef:6a:80:40:dd:ae:29:
         c7:96:ca:10:6b:43:6e:c2:31:35:56:e9:fb:ca:7a:dc:00:20:
         1d:a7:9e:9a:9d:a0:ec:e0:be:1d:e0:16:ce:a6:07:46:52:5e:
         f1:2c:e9:aa:80:b2:82:02:39:b8:11:26:81:b9:c9:a3:07:e1:
         8b:0e:86:51:8f:88:f7:5e:1c:4c:7b:ac:63:ab:33:a7:94:df:
         68:01:73:95:73:bb:e0:f4:14:a0:26:32:94:b7:4f:bb:50:7e:
         dd:24:69:59:df:4d:62:aa:79:41:ba:60:19:83:a8:b4:0e:32:
         27:b5:a5:d6:e0:dc:ec:be:7e:58:ff:3f:97:6c:93:83:d2:4d:
         c4:72:de:ac:24:38:da:28:b9:65:92:85:15:59:ac:b5:ff:7e:
         db:7d:ee:b5:20:3a:a4:cf:4d:7e:10:50:d4:2b:09:6d:0a:2e:
         85:05:99:83:74:2c:20:31:3b:f8:03:20:0c:19:f5:4a:37:8c:
         51:75:4f:48:ca:a6:9c:00:3b:58:f8:81:44:32:d6:5b:00:fd:
         89:01:a7:a0:a6:a2:0b:bb:19:a7:76:05:57:8c:a2:18:43:b3:
         9e:0f:89:ad:be:11:da:74:ef:ce:be:1d:f9:b8:dd:bc:a8:1e:
         7d:af:ef:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----