Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB566E00C2F211F18EC599F8CE1D38B0.roa
File:                     AB566E00C2F211F18EC599F8CE1D38B0.roa (raw, json)
Hash identifier:          l4+lYc8BAKlsygpWvOknZzA9zNdL1sqrqoEupogYvHg=
Subject key identifier:   20:A5:F3:23:81:C2:45:20:EC:D9:52:A7:32:E2:EB:46:65:20:CB:3F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ECC7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB566E00C2F211F18EC599F8CE1D38B0.roa
Signing time:             Thu 08 Oct 2026 08:31:34 +0000
ROA not before:           Thu 08 Oct 2026 08:31:28 +0000
ROA not after:            Fri 30 Oct 2026 08:31:28 +0000
asID:                     134365
IP address blocks:        154.194.248.0/21 maxlen: 24
                          154.194.248.0/24 maxlen: 24
                          154.194.249.0/24 maxlen: 24
                          154.194.250.0/24 maxlen: 24
                          154.194.251.0/24 maxlen: 24
                          154.194.252.0/24 maxlen: 24
                          154.194.253.0/24 maxlen: 24
                          154.194.254.0/24 maxlen: 24
                          154.194.255.0/24 maxlen: 24
                          154.198.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126151 (0x1ecc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  8 08:31:28 2026 GMT
            Not After : Oct 30 08:31:28 2026 GMT
        Subject: CN=6ac754e6-642b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bc:69:72:73:a7:1b:a6:21:c4:32:eb:cb:d9:
                    cd:6a:a7:9a:14:6b:e9:0c:0d:72:96:25:eb:cd:0a:
                    dc:e9:bf:5f:16:50:7a:75:cc:95:3d:a4:31:cb:9b:
                    97:41:63:eb:a8:10:cf:51:19:27:ef:69:92:c4:88:
                    24:3b:ec:cd:12:05:e9:e4:5e:59:4e:9c:12:b3:fd:
                    c0:90:c1:dd:e2:7f:7c:b8:3d:61:cc:d2:ea:8e:52:
                    82:2b:51:5e:82:6b:86:c1:7e:ae:ed:c4:8d:84:0c:
                    cd:f8:fb:6d:2b:21:3e:f0:d3:e1:e1:c2:29:91:ba:
                    4c:c7:e4:03:a3:12:88:26:26:92:5a:39:aa:1e:08:
                    0e:80:5d:f0:23:48:a4:2c:31:fc:42:9f:89:5a:c3:
                    17:76:4d:21:6b:2f:55:94:4e:3d:68:d7:01:90:94:
                    f5:fe:07:da:fc:1e:ea:28:0d:63:c4:36:e5:fa:52:
                    3c:c1:1c:79:2b:a9:ad:38:48:e9:c1:68:2f:9e:43:
                    51:51:67:d5:b4:68:ff:59:65:41:97:46:d6:47:e3:
                    18:77:83:4d:bf:65:47:ef:ad:25:a8:8f:cd:a4:f5:
                    8e:0a:4d:f4:ba:77:37:b5:fa:6c:16:e8:9a:26:77:
                    7a:56:9e:4b:6f:d6:61:27:3e:13:5a:0d:12:9b:50:
                    ed:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A5:F3:23:81:C2:45:20:EC:D9:52:A7:32:E2:EB:46:65:20:CB:3F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB566E00C2F211F18EC599F8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.248.0/21
                  154.198.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:be:56:e5:d8:9c:19:4d:05:4e:20:7c:a6:11:19:95:d4:27:
         b6:b0:16:8f:fd:6c:d2:2c:0a:5d:27:bd:83:f3:50:ac:ba:08:
         1f:37:01:7e:b4:8f:a4:26:33:a2:23:b7:44:b4:9e:6e:43:55:
         0c:63:f8:a6:f3:e6:6d:e3:b5:12:7d:69:3a:e8:14:d5:dc:b3:
         28:e2:ef:dc:25:87:89:9e:db:5c:52:b5:58:b1:d4:6f:97:63:
         3d:cc:6b:60:a0:c1:da:e3:aa:42:8f:1c:fb:b4:49:ba:3c:80:
         c4:75:76:cf:6c:81:8c:32:ff:5d:02:82:a5:59:a3:15:35:90:
         18:15:ae:26:c7:e3:73:c8:c6:4f:3f:18:7d:88:6a:d6:83:38:
         a9:05:d0:73:b1:fa:25:0a:4f:03:e7:04:66:0f:2b:45:9a:0a:
         30:dd:94:39:ff:31:e4:11:cc:21:91:f5:d1:66:77:68:bd:1c:
         59:4a:8f:33:22:33:99:be:e3:fa:3f:1c:51:55:75:5f:1b:e1:
         94:d1:dc:e2:a6:a7:d7:3a:e3:0b:dd:91:49:9d:5e:c9:f8:39:
         41:a6:f9:eb:ef:c8:1a:7f:71:7f:49:c9:21:58:0d:9c:43:4f:
         90:81:0d:36:ab:4f:7d:ec:f9:28:dd:f2:7c:3b:03:e0:71:ec:
         d9:34:d9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----