Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6164D70BB5311F19042CD1ACF1D38B0.roa
File:                     B6164D70BB5311F19042CD1ACF1D38B0.roa (raw, json)
Hash identifier:          aFqhu7ztJNTqIPNxUFmIZ0HxYQ/LObBcQZLrTooyntw=
Subject key identifier:   F9:11:55:95:18:D6:2F:00:65:CD:C2:33:DD:DF:FE:FF:70:27:0E:B5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EB26
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6164D70BB5311F19042CD1ACF1D38B0.roa
Signing time:             Mon 28 Sep 2026 15:46:04 +0000
ROA not before:           Mon 28 Sep 2026 15:46:00 +0000
ROA not after:            Sat 05 Jan 2030 15:46:00 +0000
asID:                     46071
IP address blocks:        154.209.6.0/24 maxlen: 24
                          154.209.7.0/24 maxlen: 24
                          154.210.203.0/24 maxlen: 24
                          154.210.204.0/24 maxlen: 24
                          154.210.205.0/24 maxlen: 24
                          154.210.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 00:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125734 (0x1eb26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 28 15:46:00 2026 GMT
            Not After : Jan  5 15:46:00 2030 GMT
        Subject: CN=6aba8bbc-2e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:03:c3:0d:bb:bb:2f:67:ba:4e:eb:31:aa:63:
                    e8:fc:6c:51:a9:2f:ab:86:22:e0:9a:0e:d9:d4:f4:
                    16:c2:12:45:1f:d0:8d:61:dc:1f:e6:fe:67:9e:83:
                    93:8b:64:71:6b:af:d1:10:82:10:29:2f:ba:89:be:
                    ea:4a:64:59:44:91:e2:a8:ae:49:d6:c1:e5:80:28:
                    1a:98:23:f3:a9:34:89:a9:7f:a5:e2:49:ec:69:a5:
                    a4:ea:9e:1a:12:99:a6:48:9e:26:84:7d:d1:63:25:
                    40:93:69:f3:de:fb:e5:96:d6:5b:88:f7:f4:aa:04:
                    b7:29:60:70:6f:ef:31:a2:bd:b8:cd:6d:01:dc:6c:
                    a9:e3:c2:a5:1b:db:fc:b0:10:10:f8:4d:6b:48:09:
                    e6:6e:99:97:52:49:1b:1f:49:79:14:f2:90:82:8c:
                    6b:75:c7:9e:20:93:c8:45:d2:de:56:88:5a:c3:a7:
                    be:c1:b0:3d:5b:20:04:69:0b:12:76:8a:25:be:51:
                    cd:cb:ba:67:90:35:20:21:c4:1d:c6:a2:55:bf:0f:
                    2f:a5:5a:3b:eb:15:80:7f:c4:cc:90:d0:eb:da:00:
                    4b:40:b3:1f:07:a1:3a:a9:19:13:c8:ba:01:7e:5e:
                    7b:a0:13:70:62:64:2d:e9:22:bd:9f:7d:9c:f0:19:
                    41:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:11:55:95:18:D6:2F:00:65:CD:C2:33:DD:DF:FE:FF:70:27:0E:B5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6164D70BB5311F19042CD1ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.209.6.0/23
                  154.210.203.0-154.210.205.255
                  154.210.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:50:f5:12:00:d8:b1:36:20:ee:bb:65:cf:f3:ff:33:64:4b:
         98:cc:e0:16:36:be:de:df:0f:f4:5e:b3:a8:61:87:c9:4d:67:
         27:d5:d6:33:b7:6f:d2:18:0d:42:dc:03:e5:fa:49:cf:79:ea:
         4a:d2:20:7a:2e:c7:b2:c1:97:53:d0:b7:37:9a:df:62:0d:37:
         8f:f8:c8:6d:b5:33:95:37:7c:7a:65:51:27:f7:9b:db:2d:2c:
         ac:67:b4:4f:16:6c:57:dd:24:43:95:be:71:b6:c9:1a:12:19:
         ff:76:3d:ef:7f:b5:b8:8d:df:51:31:31:45:7d:08:b7:c4:70:
         51:f4:87:25:96:9f:10:2d:84:cc:2b:29:b6:86:f1:23:58:27:
         38:7c:17:e0:04:19:ab:63:27:0f:36:2b:92:58:26:ef:74:79:
         dc:e3:12:03:a7:48:a3:4b:d1:43:68:2f:d0:af:ae:c8:d1:b5:
         1c:df:07:1d:ca:bd:83:15:e0:4e:bc:c8:4e:2a:7e:3c:87:d8:
         92:69:fc:0c:d0:74:d4:10:f9:f5:02:71:88:9d:34:d4:10:dd:
         c2:1c:c1:81:76:c5:85:85:01:8d:f9:85:71:9e:7a:ad:ba:a2:
         19:bb:b5:3a:4d:94:59:d4:d5:f2:de:03:0a:84:06:ee:19:db:
         60:1b:95:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----