Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B89E7224B7DF11F19EA708A4CE1D38B0.roa
File:                     B89E7224B7DF11F19EA708A4CE1D38B0.roa (raw, json)
Hash identifier:          aDEO6H079xWoLewN5g7Pthfr9sXdOqZQ0FFIUvufCEU=
Subject key identifier:   88:9C:F9:8C:77:12:39:7E:72:B8:58:99:37:65:37:4B:25:06:23:21
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EA63
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B89E7224B7DF11F19EA708A4CE1D38B0.roa
Signing time:             Thu 24 Sep 2026 06:18:13 +0000
ROA not before:           Thu 24 Sep 2026 06:18:09 +0000
ROA not after:            Sun 01 Nov 2026 06:18:09 +0000
asID:                     62240
IP address blocks:        154.194.117.0/24 maxlen: 24
                          154.195.113.0/24 maxlen: 24
                          154.195.141.0/24 maxlen: 24
                          154.195.142.0/24 maxlen: 24
                          154.196.63.0/24 maxlen: 24
                          154.196.65.0/24 maxlen: 24
                          154.196.66.0/24 maxlen: 24
                          154.196.67.0/24 maxlen: 24
                          154.196.69.0/24 maxlen: 24
                          154.196.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 11:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125539 (0x1ea63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 24 06:18:09 2026 GMT
            Not After : Nov  1 06:18:09 2026 GMT
        Subject: CN=6ab4c0a5-e442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:17:96:1b:fd:2e:6b:ed:0d:96:35:06:d1:84:
                    0e:11:22:51:6e:e6:fe:fe:2e:91:48:ed:b4:71:27:
                    37:9c:0b:d4:64:31:5d:78:be:0c:6d:fa:44:2d:be:
                    e4:4f:49:69:1e:87:af:ea:34:01:8c:19:07:c8:48:
                    b4:69:fb:52:17:8f:b6:a6:43:ea:14:5d:94:a9:91:
                    03:a0:b0:e9:2b:4b:94:66:75:ea:bf:b2:2b:eb:39:
                    16:a9:08:62:49:cd:61:e7:c1:76:1a:60:5e:2a:fb:
                    53:26:c0:51:ed:f9:e0:ca:8a:b9:e3:51:d3:a9:b3:
                    38:04:cb:a8:6e:b4:6c:d4:35:8a:0a:0e:a8:8e:56:
                    37:64:58:04:cd:60:d5:9a:34:84:a4:1e:e6:9a:64:
                    f0:40:06:cd:db:dc:8e:da:e7:cb:9c:ab:c1:a7:e0:
                    c6:d0:31:a6:98:c4:33:0f:a4:03:c5:11:04:59:30:
                    fb:7d:59:64:c9:31:9e:83:a2:a7:0c:29:cc:2b:83:
                    97:4f:bf:98:09:d4:e8:fa:0a:65:9e:d8:5f:fb:da:
                    08:4f:13:b8:37:06:79:af:42:8e:f8:bb:55:fb:6a:
                    68:9c:ff:1b:a1:94:2a:0d:1c:02:ef:ae:69:59:dc:
                    c7:4a:0f:a1:48:f4:a1:13:02:f7:c1:4b:ed:3b:d0:
                    9b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9C:F9:8C:77:12:39:7E:72:B8:58:99:37:65:37:4B:25:06:23:21
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B89E7224B7DF11F19EA708A4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.117.0/24
                  154.195.113.0/24
                  154.195.141.0-154.195.142.255
                  154.196.63.0/24
                  154.196.65.0-154.196.67.255
                  154.196.69.0/24
                  154.196.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:4b:8b:cb:dd:f1:b4:b7:c8:90:72:d5:bc:f5:45:f1:c4:79:
         2a:5f:a8:d4:96:bd:9d:31:19:01:42:65:bc:b7:bd:a9:c6:39:
         3c:15:4f:07:22:70:44:af:76:88:ba:c5:37:de:f8:18:48:8a:
         7e:67:0c:6c:c1:0f:76:fe:a5:9b:54:a4:05:16:92:e2:42:66:
         75:c8:be:bd:e9:c6:65:ec:5d:f9:87:33:e3:77:9f:2e:85:45:
         34:dc:19:32:ba:71:fb:ea:28:06:71:67:fa:ff:f6:d9:17:3b:
         a5:bc:0b:c8:9d:d1:98:24:bc:dd:4e:61:d5:26:26:85:27:73:
         e0:ad:9f:39:04:a9:82:29:37:81:ce:f4:d1:fa:25:58:03:9e:
         69:d3:55:13:8f:f2:5a:98:e2:d6:c0:6a:fd:94:7b:b2:2b:a7:
         e5:2d:6f:23:99:92:84:f9:36:b1:a2:de:27:53:ac:14:5b:57:
         c5:a7:d8:c6:5c:e2:6e:32:bd:27:1f:27:94:74:82:d2:9e:bb:
         42:16:e8:29:2e:0b:34:78:14:a1:03:a0:a8:e9:9b:ef:f2:6a:
         26:2c:8f:2d:da:e7:0e:3f:45:b7:a2:8a:a4:07:38:e6:95:27:
         f9:88:7b:ff:3e:9b:82:1d:c7:89:db:aa:a9:89:76:48:60:eb:
         02:1c:5c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----