Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1DEBB40B7EC11F1AB3FF8F4CE1D38B0.roa
File:                     A1DEBB40B7EC11F1AB3FF8F4CE1D38B0.roa (raw, json)
Hash identifier:          OQMZ4QKPpbOzckOSVCwrsl46ARro3hXDsFwRpJ0qzvo=
Subject key identifier:   E8:21:6A:39:4A:AC:BD:E0:B8:AA:F0:9C:44:5D:CC:E4:17:1B:D9:BE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EA93
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1DEBB40B7EC11F1AB3FF8F4CE1D38B0.roa
Signing time:             Thu 24 Sep 2026 07:50:38 +0000
ROA not before:           Thu 24 Sep 2026 07:50:34 +0000
ROA not after:            Sun 01 Nov 2026 07:50:34 +0000
asID:                     62240
IP address blocks:        154.194.79.0/24 maxlen: 24
                          154.194.82.0/24 maxlen: 24
                          154.194.89.0/24 maxlen: 24
                          154.194.92.0/24 maxlen: 24
                          154.194.93.0/24 maxlen: 24
                          154.194.98.0/24 maxlen: 24
                          154.194.99.0/24 maxlen: 24
                          154.194.119.0/24 maxlen: 24
                          154.196.24.0/24 maxlen: 24
                          154.196.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 11:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125587 (0x1ea93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 24 07:50:34 2026 GMT
            Not After : Nov  1 07:50:34 2026 GMT
        Subject: CN=6ab4d64e-24ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8e:c8:49:9d:57:6f:5e:02:4e:3f:f5:1a:d0:
                    6b:53:7e:2e:94:7e:bd:b5:ce:d2:59:aa:57:ee:19:
                    61:92:b9:90:f8:9c:f0:dc:17:88:22:a7:d6:e6:14:
                    4d:a4:81:a9:10:d2:ac:02:54:8e:25:1a:3f:69:2e:
                    5e:d2:e7:7a:56:1d:cf:8a:7c:f1:97:ec:d6:b6:40:
                    7e:c6:b6:42:ea:9c:74:a4:df:10:89:6d:5b:17:79:
                    53:07:aa:33:df:b7:f4:38:6d:b7:1c:6c:1c:f5:3c:
                    ae:81:1e:a9:17:61:93:96:52:62:15:41:19:09:2e:
                    9e:a7:7b:1c:75:ab:ff:98:85:a2:3f:c1:3a:ab:f3:
                    e9:cf:a7:66:5b:42:d9:1a:03:8d:e8:26:c2:c7:52:
                    cf:06:50:da:f2:45:72:7d:bc:48:ab:30:22:fe:8d:
                    a3:9c:ca:51:a8:86:30:e4:c3:73:11:eb:3e:7b:8c:
                    9a:30:78:e8:9b:dc:e4:8e:fb:de:60:82:ce:d1:2d:
                    d5:63:24:59:0d:e6:bd:45:14:51:5d:ae:77:3f:bc:
                    7a:23:c8:83:90:99:9d:d6:51:83:ee:c2:36:52:a6:
                    8a:a0:40:d9:0e:56:51:e1:2e:5b:70:c8:16:dd:50:
                    70:fc:f6:e0:e2:4a:08:26:3f:ec:f6:c6:b1:18:aa:
                    e9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:21:6A:39:4A:AC:BD:E0:B8:AA:F0:9C:44:5D:CC:E4:17:1B:D9:BE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1DEBB40B7EC11F1AB3FF8F4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.79.0/24
                  154.194.82.0/24
                  154.194.89.0/24
                  154.194.92.0/23
                  154.194.98.0/23
                  154.194.119.0/24
                  154.196.24.0/24
                  154.196.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:1c:d1:95:f5:9e:8e:1e:0a:8d:52:bb:52:5e:3a:d9:43:8f:
         13:fa:b1:ad:48:bb:2c:05:78:7f:e3:8f:43:e3:83:41:c3:45:
         ec:a3:89:f8:30:c5:ca:b9:db:f6:b5:2d:52:50:a7:57:80:0f:
         4f:f0:33:a4:1a:a6:99:52:4e:42:5c:dd:1c:9c:b3:0c:63:a8:
         46:21:82:5d:37:f0:71:8b:4d:3e:eb:cb:b2:2a:79:88:e2:19:
         0a:ab:ba:94:5b:2a:d3:44:fa:2a:70:76:f5:65:7b:47:3a:b8:
         57:64:78:fe:6f:ec:00:b7:93:33:6c:8d:c0:bc:26:e4:e9:48:
         f7:e1:24:6a:01:a5:6f:47:2b:30:44:1d:02:bf:94:b5:83:48:
         1d:e5:94:14:88:ad:98:ef:40:6c:c7:2f:47:fd:fa:93:60:7c:
         e3:86:a9:b9:9b:57:45:d8:a8:73:37:fb:e0:86:3c:d4:45:aa:
         1a:d2:59:13:6d:17:b4:27:87:e4:50:3d:a2:90:40:67:9e:14:
         e7:b4:73:33:40:0c:7b:88:11:30:06:66:60:46:72:f4:68:ca:
         b9:56:3f:b9:d5:42:4c:bd:c7:1a:ff:a9:cd:8a:e1:16:af:16:
         03:73:42:86:f4:ee:8d:1e:ab:ae:f3:b2:84:05:be:63:5d:d6:
         f8:ce:04:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----