Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C908F3ABF1F11F1918E4FE9CE1D38B0.roa
File:                     9C908F3ABF1F11F1918E4FE9CE1D38B0.roa (raw, json)
Hash identifier:          K88AoeF9twWSDCYZWJH19Y+zqiRkL2bXfx6U9r0U8FY=
Subject key identifier:   B3:8E:B6:6A:52:E5:53:1B:58:5E:2B:8D:00:FE:DA:7B:4B:40:D7:EF
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC0C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C908F3ABF1F11F1918E4FE9CE1D38B0.roa
Signing time:             Sat 03 Oct 2026 11:43:12 +0000
ROA not before:           Sat 03 Oct 2026 11:43:07 +0000
ROA not after:            Tue 10 Nov 2026 11:43:07 +0000
asID:                     139646
IP address blocks:        154.204.0.0/24 maxlen: 24
                          154.208.12.0/22 maxlen: 24
                          154.208.16.0/20 maxlen: 24
                          154.212.128.0/24 maxlen: 24
                          154.215.0.0/24 maxlen: 24
                          154.218.0.0/24 maxlen: 24
                          154.221.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 08 Oct 2026 09:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125964 (0x1ec0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  3 11:43:07 2026 GMT
            Not After : Nov 10 11:43:07 2026 GMT
        Subject: CN=6ac0ea50-7d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ec:f3:fd:cc:f2:04:d7:a6:09:3d:13:7c:74:
                    c4:7d:93:ba:e1:6f:99:c7:3a:b5:e5:ba:38:6c:bc:
                    72:b1:72:c5:b5:a3:53:8a:4c:74:c3:0c:73:a1:05:
                    c2:a3:20:ed:79:27:79:43:f3:96:26:57:79:91:31:
                    82:a0:9e:3d:1a:37:86:5c:33:d9:97:02:b1:9f:4e:
                    e1:24:09:ee:03:b2:3d:1f:48:1e:25:6b:76:7f:6b:
                    65:5a:64:9c:1e:7c:bd:2c:31:32:dc:f7:9e:d9:d0:
                    43:f2:ed:7e:41:75:46:58:75:26:15:5c:28:0b:fd:
                    45:6d:56:82:db:ab:4d:20:6b:5f:b2:cf:bf:c0:dd:
                    3a:7e:2c:5b:e7:d7:c2:5c:26:14:c3:d9:06:b9:ab:
                    f2:c0:c6:23:e5:c2:ae:c2:98:dc:b9:a6:0e:8e:79:
                    6b:ea:cf:38:bb:47:c7:3f:52:94:ac:be:8d:17:38:
                    fb:4a:7a:8d:d8:49:25:0c:9e:2f:af:70:9c:88:ba:
                    8c:bc:c9:24:81:b4:a3:f2:9b:b6:f5:1e:83:da:de:
                    26:f5:1e:75:e1:a3:f2:c9:83:15:f0:17:2d:80:b4:
                    32:49:dc:a4:f7:70:9a:c7:43:e0:ba:43:cb:29:89:
                    b3:f7:1a:62:35:23:aa:f1:e5:b4:49:dc:83:be:95:
                    14:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8E:B6:6A:52:E5:53:1B:58:5E:2B:8D:00:FE:DA:7B:4B:40:D7:EF
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C908F3ABF1F11F1918E4FE9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.204.0.0/24
                  154.208.12.0-154.208.31.255
                  154.212.128.0/24
                  154.215.0.0/24
                  154.218.0.0/24
                  154.221.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:63:30:47:e1:ce:30:5d:d4:a1:ff:bc:2d:30:45:a6:50:98:
         e0:e3:f9:64:ca:d2:2e:fa:f6:8c:97:ae:ff:c5:69:a6:fb:5f:
         88:04:d0:13:79:4f:3d:8d:c3:0c:19:a8:74:06:6d:7a:1d:bb:
         f4:e3:84:1b:5a:b8:0e:bd:29:78:2b:8b:6a:19:2a:f3:a8:52:
         b4:27:e2:44:e6:cf:e9:a3:b1:3d:97:1c:28:39:8d:0b:ef:a1:
         01:9f:1c:71:ba:f4:d4:85:c3:80:8a:3a:5a:a9:1c:13:1e:dc:
         f2:82:36:24:89:3c:ba:52:4d:d9:65:20:1b:8d:de:56:ad:1a:
         73:49:8e:b4:67:24:15:a9:58:af:cc:a0:51:38:59:df:43:a9:
         2b:52:91:fb:e6:b2:2e:04:3d:8a:d9:ad:35:6a:4a:f4:20:c1:
         0f:5b:a8:85:f6:c0:70:25:ef:23:8d:6d:37:7c:82:82:8b:c0:
         d8:aa:a1:20:22:e9:92:66:98:f6:99:7b:8e:05:b8:4a:5d:a1:
         b4:c9:4a:47:5c:9f:f0:b5:a4:4e:3c:79:79:8a:1e:1d:45:e1:
         a0:9d:bd:87:3a:3d:9b:4d:ee:59:37:fd:b2:9b:ae:7d:24:df:
         6d:5b:0e:c5:5d:eb:9c:2f:4f:cc:81:67:23:ee:d5:33:1c:f9:
         c0:ba:bb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----