Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C16054E2B97711F1BBEE5A08CF1D38B0.roa
File:                     C16054E2B97711F1BBEE5A08CF1D38B0.roa (raw, json)
Hash identifier:          beU1OkxXO6y6OcD9eMjz2COSVHO34HpTuUU3s2E9z4c=
Subject key identifier:   CA:2A:15:3C:67:E7:C0:AF:6B:0A:9D:09:C7:28:95:3C:D6:32:0A:1A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EAC7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C16054E2B97711F1BBEE5A08CF1D38B0.roa
Signing time:             Sat 26 Sep 2026 06:59:02 +0000
ROA not before:           Sat 26 Sep 2026 06:58:58 +0000
ROA not after:            Sun 18 Oct 2026 06:58:58 +0000
asID:                     139613
IP address blocks:        154.83.135.0/24 maxlen: 24
                          154.83.137.0/24 maxlen: 24
                          154.83.141.0/24 maxlen: 24
                          154.83.158.0/24 maxlen: 24
                          154.83.187.0/24 maxlen: 24
                          154.83.190.0/24 maxlen: 24
                          154.83.191.0/24 maxlen: 24
                          154.83.209.0/24 maxlen: 24
                          154.83.211.0/24 maxlen: 24
                          154.83.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125639 (0x1eac7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 26 06:58:58 2026 GMT
            Not After : Oct 18 06:58:58 2026 GMT
        Subject: CN=6ab76d36-1cdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:02:e1:32:9c:45:d3:c0:bf:fe:36:86:f2:62:
                    67:4b:f6:f1:93:a0:07:0b:1d:98:af:f7:11:e9:75:
                    3f:b0:e1:79:66:ee:48:2a:36:e0:ca:5a:df:75:6f:
                    0b:7a:bf:f8:20:7e:67:c6:98:8a:d6:70:8c:2b:a2:
                    64:0b:fd:67:38:e3:0c:5a:96:e2:b1:42:a9:61:6f:
                    e1:82:db:cf:f0:15:46:91:66:fe:6b:68:8c:f6:44:
                    af:f0:8a:2d:d0:57:99:7b:1f:28:38:54:d0:d8:22:
                    ca:82:27:6c:98:c6:cd:78:34:59:c0:a8:c6:6f:91:
                    90:cb:a0:19:73:f3:aa:df:72:29:7a:19:2d:6e:29:
                    d5:e7:52:45:5c:6e:a3:be:17:29:4a:f7:3a:c7:36:
                    b1:26:77:d1:43:d1:2b:bf:d4:13:5c:2b:1d:16:1e:
                    6a:68:6b:b6:fb:f8:3e:35:7d:22:85:c4:d8:06:ca:
                    33:fb:e3:8c:dd:a1:bf:78:de:de:4a:ba:f9:28:06:
                    4e:52:98:3a:87:72:9a:02:9f:c1:05:f0:6e:26:ed:
                    23:26:43:8a:e8:5d:5d:32:f5:11:c7:1f:7a:a2:a9:
                    46:dc:e7:df:4c:b1:2d:66:60:75:ca:34:94:c8:e7:
                    24:5c:b1:e1:28:07:a7:25:bf:20:27:38:51:17:d2:
                    f1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:2A:15:3C:67:E7:C0:AF:6B:0A:9D:09:C7:28:95:3C:D6:32:0A:1A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C16054E2B97711F1BBEE5A08CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.135.0/24
                  154.83.137.0/24
                  154.83.141.0/24
                  154.83.158.0/24
                  154.83.187.0/24
                  154.83.190.0/23
                  154.83.209.0/24
                  154.83.211.0/24
                  154.83.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:82:58:a7:f0:b1:2b:67:bf:16:c9:74:8b:36:74:67:41:3c:
         f4:3c:d2:31:bf:9c:1a:79:56:bd:11:e6:e3:ce:d3:dc:bf:ed:
         90:33:7e:d5:02:c0:63:b0:a0:ac:a5:cc:ea:6f:32:78:cf:4b:
         05:ce:47:c8:9e:4c:53:33:97:34:1a:43:12:50:c4:13:8d:41:
         09:d5:11:c8:52:70:08:8a:0b:28:9d:6b:a0:fa:59:33:76:a0:
         db:84:89:d6:f4:b0:09:e6:0b:42:53:96:d4:2d:5d:30:59:f1:
         b7:d3:a8:7a:19:3e:7d:ff:6b:8f:e2:77:72:73:00:fe:c5:60:
         07:45:d4:1f:0b:a5:52:59:18:9b:da:78:ab:82:e6:db:ab:80:
         cd:69:52:e1:69:e0:7f:bb:ea:42:60:24:66:40:3d:93:db:9c:
         42:7c:e0:b0:40:57:d3:5e:83:d1:b8:2d:bb:6e:a3:b3:ac:7d:
         f2:05:f1:e5:42:d5:b5:80:3b:3f:8e:07:16:d3:09:ce:fb:c3:
         4c:54:7a:ad:76:f2:f3:b2:73:11:0b:a9:d2:2e:33:70:6e:b4:
         dc:b7:76:d5:35:b5:bc:50:1a:ec:48:ac:20:af:be:b5:1b:ac:
         0f:cc:e0:25:70:b5:7a:6b:fb:21:f3:59:7d:63:d2:9f:35:cf:
         81:82:be:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----