Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B280C214B7E611F18626C9CFCE1D38B0.roa
File:                     B280C214B7E611F18626C9CFCE1D38B0.roa (raw, json)
Hash identifier:          4A34SI4JuFxvWV91tuZCoVErZDWRsrq5IoaNJxnp1lQ=
Subject key identifier:   93:D1:72:CE:0E:4F:B0:4C:7B:AB:C1:6A:83:1D:51:95:2D:6B:8E:B2
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EA7D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B280C214B7E611F18626C9CFCE1D38B0.roa
Signing time:             Thu 24 Sep 2026 07:08:09 +0000
ROA not before:           Thu 24 Sep 2026 07:08:05 +0000
ROA not after:            Sun 01 Nov 2026 07:08:05 +0000
asID:                     62240
IP address blocks:        154.194.33.0/24 maxlen: 24
                          154.195.6.0/24 maxlen: 24
                          154.195.7.0/24 maxlen: 24
                          154.195.139.0/24 maxlen: 24
                          154.195.145.0/24 maxlen: 24
                          154.195.146.0/24 maxlen: 24
                          154.195.147.0/24 maxlen: 24
                          154.195.158.0/24 maxlen: 24
                          154.196.83.0/24 maxlen: 24
                          154.196.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125565 (0x1ea7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 24 07:08:05 2026 GMT
            Not After : Nov  1 07:08:05 2026 GMT
        Subject: CN=6ab4cc59-1f29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9e:a4:13:14:14:54:89:a8:ad:d3:9f:3a:3e:
                    b9:ff:42:1d:ea:a1:39:1e:83:4d:a1:e9:3e:70:a1:
                    a3:6e:2a:ca:fd:3f:8f:45:4a:29:32:f0:f4:a7:8f:
                    cd:2a:01:42:45:42:96:f8:71:86:41:c5:9c:e6:5b:
                    e0:dd:b7:ca:23:4b:9b:dc:d8:a0:5b:77:56:84:18:
                    c1:75:97:fd:f4:91:ca:fb:b0:fd:0d:8d:3a:ba:86:
                    3c:7c:85:93:c2:ff:e6:e6:36:6b:6f:7f:ac:7f:c9:
                    cd:79:a2:b1:fa:45:9b:58:01:bc:17:72:35:4c:83:
                    33:1a:4e:8b:52:e8:40:48:7d:8e:06:89:b0:54:fe:
                    fe:5f:b9:55:3d:20:9e:1d:41:9c:27:0c:28:80:96:
                    8c:67:06:bb:9c:a5:95:5a:9a:e9:d6:ea:4e:37:13:
                    77:0e:3c:25:3f:da:3c:a8:6d:38:ef:83:72:07:c0:
                    83:80:e5:59:36:c2:88:24:19:4e:59:68:f1:4f:30:
                    37:5b:40:d8:c5:13:09:64:3f:4c:47:c2:01:fe:92:
                    ae:aa:33:5e:9d:35:c1:0a:34:42:a9:fd:76:40:0f:
                    32:68:d7:da:15:aa:3b:00:8b:88:87:68:f0:7f:2c:
                    bc:65:12:b7:a6:aa:dd:83:a1:ac:1d:9a:57:88:1c:
                    74:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D1:72:CE:0E:4F:B0:4C:7B:AB:C1:6A:83:1D:51:95:2D:6B:8E:B2
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B280C214B7E611F18626C9CFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.33.0/24
                  154.195.6.0/23
                  154.195.139.0/24
                  154.195.145.0-154.195.147.255
                  154.195.158.0/24
                  154.196.83.0/24
                  154.196.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:a0:9e:83:48:be:53:e6:98:a2:d9:fa:4b:e9:7e:93:6b:e2:
         d0:5e:48:b7:cc:0a:04:02:57:d5:36:af:54:c4:c2:80:51:16:
         c1:a3:26:c1:3a:c4:ab:82:96:c8:9b:74:96:6a:ba:94:5c:40:
         e7:92:b7:9d:1d:d8:96:ee:b8:1a:d6:da:32:2e:d4:da:97:33:
         7f:55:07:a7:fd:2f:5b:7f:92:e8:c1:0a:36:f6:d1:c3:93:03:
         98:0d:7c:5b:6d:08:c7:75:e0:71:19:76:bf:41:8d:16:17:4a:
         de:ec:b6:57:aa:b4:80:55:03:80:f7:a4:f7:98:20:6e:e4:4f:
         ec:47:b1:73:45:8d:6f:04:00:d2:c5:48:4b:04:31:0c:e4:5a:
         c7:97:0c:34:ff:99:4f:9f:3e:05:49:6c:c5:df:7c:fa:56:b8:
         b2:3c:c2:f4:ce:ed:51:1e:98:db:1b:d3:c5:6d:a8:0a:53:ea:
         08:12:34:e9:3c:4c:99:39:b8:1d:c5:7b:7c:92:23:97:f1:90:
         17:7d:e8:41:1b:38:eb:52:18:71:b7:2d:5f:a4:c8:3d:3d:df:
         18:3c:91:52:83:a6:77:b1:51:b6:9e:3b:d0:b0:c6:29:2e:e4:
         93:17:d7:ac:82:42:de:74:06:b8:69:b3:76:12:e2:f5:63:c7:
         b2:a3:6d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----