Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C064D342C15111F18A4A81C4CE1D38B0.roa
File:                     C064D342C15111F18A4A81C4CE1D38B0.roa (raw, json)
Hash identifier:          DPOlc2Kv3tSnj9W+ko9cjvM1kVdSqBXwWGe2jIMe8Ks=
Subject key identifier:   88:09:64:C0:CC:A3:07:7D:95:AC:07:5C:11:27:FD:85:E9:CE:22:26
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC65
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C064D342C15111F18A4A81C4CE1D38B0.roa
Signing time:             Tue 06 Oct 2026 06:47:09 +0000
ROA not before:           Tue 06 Oct 2026 06:47:05 +0000
ROA not after:            Fri 06 Nov 2026 06:47:05 +0000
asID:                     151347
IP address blocks:        154.84.194.0/24 maxlen: 24
                          154.84.211.0/24 maxlen: 24
                          154.84.212.0/24 maxlen: 24
                          154.84.213.0/24 maxlen: 24
                          154.84.214.0/24 maxlen: 24
                          154.84.234.0/24 maxlen: 24
                          154.84.236.0/24 maxlen: 24
                          154.84.238.0/24 maxlen: 24
                          154.84.240.0/24 maxlen: 24
                          154.84.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 10:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126053 (0x1ec65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  6 06:47:05 2026 GMT
            Not After : Nov  6 06:47:05 2026 GMT
        Subject: CN=6ac4996d-6ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:16:43:4f:08:e6:11:ca:42:bd:0d:c6:e6:85:
                    b6:83:0c:15:36:70:2c:99:f5:15:aa:66:ed:2c:1d:
                    70:11:c2:7e:6f:d9:42:f7:e0:db:6e:bd:8b:9b:66:
                    fb:f7:6e:c6:b0:1d:bd:90:40:15:2b:5a:13:58:39:
                    0d:ed:a7:25:fe:0b:a9:32:07:50:be:8c:d9:31:f9:
                    0b:bc:ef:d3:d4:03:14:75:3e:16:a9:2a:c8:a0:13:
                    36:fd:b3:fe:d7:be:07:aa:2c:10:c9:22:25:ba:f9:
                    9c:e3:81:ab:67:a5:aa:fe:20:90:d8:ab:c5:e9:5c:
                    a2:6b:75:34:5c:7a:ad:6e:97:74:72:d0:7d:d3:8c:
                    dd:2d:14:45:b2:ef:45:f7:81:67:93:33:ef:2a:a3:
                    a8:67:71:29:12:cb:14:1b:9b:69:1a:f2:f6:3c:ca:
                    06:d2:3a:8c:b3:22:a0:8c:cb:c6:41:73:1b:0f:85:
                    83:8e:1f:9d:2f:56:8d:a3:36:72:e3:d5:21:9d:73:
                    ca:52:70:67:3f:91:df:03:48:fa:4a:9b:45:86:c0:
                    e6:de:2e:3f:c0:d6:6b:60:5b:a7:0a:76:06:1a:b6:
                    bb:bb:f9:ba:30:dc:34:0a:98:2b:01:0e:b1:4a:ec:
                    e9:35:be:d9:9d:42:56:83:59:08:e6:81:95:1d:fc:
                    77:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:09:64:C0:CC:A3:07:7D:95:AC:07:5C:11:27:FD:85:E9:CE:22:26
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C064D342C15111F18A4A81C4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.194.0/24
                  154.84.211.0-154.84.214.255
                  154.84.234.0/24
                  154.84.236.0/24
                  154.84.238.0/24
                  154.84.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:d3:b7:2c:14:56:b5:7c:ca:70:0a:2a:64:a1:c0:1c:f0:cf:
         e4:72:03:cf:aa:52:42:68:e2:00:ba:b3:93:56:d6:f6:e3:d5:
         36:ed:36:69:e1:2b:03:80:5a:71:87:f5:38:5e:4f:4d:3a:7f:
         45:ff:cb:f4:d2:0b:f4:85:22:b8:ab:56:29:17:b0:05:62:ac:
         19:f2:48:7c:02:16:76:4a:7b:66:9a:37:fb:cb:5c:c6:cc:90:
         9e:09:ee:ed:10:f1:85:f3:e4:23:c0:0d:cb:7b:8f:32:b5:58:
         fe:52:dd:b9:ba:47:56:5b:10:b7:39:7d:be:61:21:2b:83:9e:
         b3:0a:08:14:11:37:93:ed:a3:3d:37:a5:d8:1a:28:4a:76:30:
         ea:f3:58:1a:de:50:57:d4:7e:a5:f8:f0:91:a6:3d:b7:77:0c:
         4e:11:08:5d:89:bc:d6:58:f0:ad:d8:b7:bb:7d:3e:4c:87:1b:
         2c:97:fa:0a:02:9c:ad:e5:a8:e4:5d:75:ff:52:5c:55:8f:75:
         90:a7:15:46:25:12:65:f1:cb:b9:ff:00:8e:88:3c:00:85:ea:
         54:a2:b0:40:fe:00:89:81:5b:c5:6d:fb:7a:14:66:e0:5d:a4:
         7a:8f:43:7e:75:61:a9:53:22:48:b5:20:29:e6:07:e9:cb:ce:
         53:9c:cc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----