Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0C71446BEFD11F1BA43A00ECF1D38B0.roa
File:                     B0C71446BEFD11F1BA43A00ECF1D38B0.roa (raw, json)
Hash identifier:          5MzO+YIYtgV5TBLd5hlwhqAaydfE9Tt5KNVtj77CRQU=
Subject key identifier:   B1:85:5E:D4:D6:A9:D1:F8:31:28:DF:20:E4:78:DD:AE:65:E1:DE:A1
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EBE0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0C71446BEFD11F1BA43A00ECF1D38B0.roa
Signing time:             Sat 03 Oct 2026 07:40:23 +0000
ROA not before:           Sat 03 Oct 2026 07:40:19 +0000
ROA not after:            Tue 10 Nov 2026 07:40:19 +0000
asID:                     138915
IP address blocks:        154.223.58.0/23 maxlen: 24
                          154.223.60.0/23 maxlen: 24
                          154.223.62.0/23 maxlen: 24
                          154.223.64.0/24 maxlen: 24
                          154.223.66.0/23 maxlen: 24
                          154.223.68.0/23 maxlen: 24
                          154.223.70.0/23 maxlen: 24
                          154.223.72.0/23 maxlen: 24
                          154.223.74.0/23 maxlen: 24
                          154.223.76.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125920 (0x1ebe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  3 07:40:19 2026 GMT
            Not After : Nov 10 07:40:19 2026 GMT
        Subject: CN=6ac0b167-d497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7c:44:7d:53:71:71:60:89:90:df:aa:4e:57:
                    8a:1c:2f:70:88:2a:77:5f:a5:5a:8b:63:3b:64:13:
                    22:1c:36:9a:38:b8:46:70:28:c5:a4:3a:5d:4d:36:
                    ec:02:d7:91:1f:dd:98:64:36:4d:33:b2:19:ca:b0:
                    1b:ed:20:a2:39:4b:06:55:20:8d:b7:9d:01:dc:cb:
                    36:14:36:93:64:8c:df:b1:c8:48:5b:f4:d0:5e:e4:
                    4b:9c:a5:f2:d3:6a:0f:b2:62:1a:96:76:23:4c:22:
                    42:14:f2:5d:f4:1b:47:70:cd:d7:20:f8:78:f1:63:
                    4e:0c:34:a7:8b:7d:f9:1b:83:cb:99:a1:3b:1b:cf:
                    aa:11:ab:ba:bd:2e:9b:f7:08:c6:13:ae:bf:2d:ea:
                    31:67:4e:c5:87:42:fd:51:ad:f7:b3:a2:18:e0:2c:
                    19:c8:b1:81:1f:3b:dd:3f:40:bc:be:01:72:f1:bf:
                    1e:ed:1e:8d:a7:59:4a:b7:6a:3f:17:d8:0d:74:37:
                    17:15:76:bf:ad:43:08:1f:25:02:ac:5d:95:d3:c9:
                    80:c7:d5:4e:cd:10:6f:60:b0:e8:dd:50:16:99:14:
                    0a:04:d6:9b:d5:8e:47:f7:5e:98:68:0d:e5:ee:f7:
                    de:1d:19:a1:e8:0a:ba:4f:41:19:71:bf:eb:b5:22:
                    85:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:85:5E:D4:D6:A9:D1:F8:31:28:DF:20:E4:78:DD:AE:65:E1:DE:A1
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0C71446BEFD11F1BA43A00ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.223.58.0-154.223.64.255
                  154.223.66.0-154.223.77.255

    Signature Algorithm: sha256WithRSAEncryption
         11:46:67:74:e9:27:ea:3b:50:3f:a2:50:56:47:f8:cc:31:23:
         70:15:74:8f:20:be:cc:b7:a0:84:37:75:15:56:55:cc:47:21:
         e3:c4:58:d6:09:98:e8:d4:74:76:32:d0:ac:a3:79:64:e2:c4:
         fe:40:13:a5:4c:7f:9a:4a:2a:dd:2c:e7:b7:64:5a:60:d0:c6:
         22:6d:85:92:73:bf:26:3d:7c:ac:7c:fa:b2:f0:54:5d:4b:44:
         27:02:06:8d:f8:7b:67:d8:42:c0:b2:a4:e2:42:a2:a7:ae:8e:
         61:8f:ea:2a:5f:8b:2f:7c:0e:a2:1d:90:4f:ef:10:96:c8:3e:
         fa:1a:f1:6e:26:58:9d:eb:9f:69:6a:f3:eb:7c:fc:8a:6b:82:
         cb:f2:27:0e:2f:5d:0e:75:16:7e:c3:7b:90:3b:4f:0a:7a:1d:
         24:9d:83:6e:16:30:7b:97:7c:a4:b6:89:5a:93:8e:4b:b6:be:
         79:c3:eb:ad:92:76:05:98:21:23:f3:f7:10:50:35:41:1b:f3:
         46:53:46:51:42:2f:8d:ac:cf:96:08:f9:18:e7:ec:09:24:d5:
         be:87:a8:7b:8d:c8:5c:d5:75:87:65:46:80:46:b0:5b:cb:c5:
         a7:21:ee:de:c9:04:64:c2:89:5d:7c:d6:33:50:69:e8:1d:25:
         c5:32:16:af
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----