Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2A81F4ABCC611F1920CE816CF1D38B0.roa
File:                     C2A81F4ABCC611F1920CE816CF1D38B0.roa (raw, json)
Hash identifier:          g64UTKCAyAt8ik3UcfeEBTaAGIN5uWeIcSchmhfrieg=
Subject key identifier:   78:74:C0:F0:8E:B9:3B:DF:2F:CA:2D:E3:CD:52:41:2F:13:AA:6B:9D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EBB0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2A81F4ABCC611F1920CE816CF1D38B0.roa
Signing time:             Wed 30 Sep 2026 12:02:08 +0000
ROA not before:           Wed 30 Sep 2026 12:02:04 +0000
ROA not after:            Fri 06 Nov 2026 12:02:04 +0000
asID:                     202656
IP address blocks:        154.219.192.0/24 maxlen: 24
                          154.219.195.0/24 maxlen: 24
                          154.219.196.0/24 maxlen: 24
                          154.219.198.0/24 maxlen: 24
                          154.219.199.0/24 maxlen: 24
                          154.221.56.0/24 maxlen: 24
                          154.221.57.0/24 maxlen: 24
                          154.221.58.0/24 maxlen: 24
                          154.221.59.0/24 maxlen: 24
                          154.221.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125872 (0x1ebb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 30 12:02:04 2026 GMT
            Not After : Nov  6 12:02:04 2026 GMT
        Subject: CN=6abcfa40-5330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:75:f2:37:73:5c:df:84:0a:2a:9f:f3:f1:56:
                    be:5c:8d:99:fc:68:11:5c:a2:07:99:a0:01:07:02:
                    8e:bb:91:17:8f:17:72:20:94:8f:92:51:28:23:00:
                    1f:e7:a9:ef:e0:9e:d9:79:85:d9:0a:79:89:47:36:
                    de:ea:03:e2:31:83:63:00:3e:9b:6a:71:51:82:8f:
                    3b:c9:c4:33:a6:e7:22:2d:fb:1e:c5:15:55:9d:ae:
                    c1:67:ac:16:5e:71:64:8d:44:0c:f5:a4:d4:2c:69:
                    55:4e:ac:a0:ee:70:6c:db:01:ce:a3:81:78:4f:8c:
                    1e:6b:72:08:ae:0f:c0:64:7e:70:6d:12:19:6f:51:
                    56:4d:d4:3e:d6:c7:a2:e8:3f:82:d0:82:9d:ff:d0:
                    ee:cb:68:27:cf:d8:62:2a:cf:16:1f:55:b6:36:1c:
                    16:f7:b4:71:3e:3a:6c:4c:b4:01:cc:89:49:a9:9f:
                    c7:cd:38:b2:72:3b:03:34:fe:99:84:c6:d3:1b:d1:
                    fb:73:83:c0:ff:d1:13:37:c6:61:be:e1:b6:e1:21:
                    58:d0:85:09:9e:4e:7f:32:dd:fe:c5:ce:d7:02:5e:
                    ce:fa:4f:44:6d:0e:94:5b:64:08:6c:9b:d8:80:5f:
                    57:dc:34:e8:94:eb:8e:84:4b:5c:0d:e0:90:99:ba:
                    17:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:74:C0:F0:8E:B9:3B:DF:2F:CA:2D:E3:CD:52:41:2F:13:AA:6B:9D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2A81F4ABCC611F1920CE816CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.219.192.0/24
                  154.219.195.0-154.219.196.255
                  154.219.198.0/23
                  154.221.56.0/22
                  154.221.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:92:b9:1f:1a:0a:24:01:c8:2a:11:a4:a0:58:a7:aa:db:4a:
         69:4d:a9:b9:32:7b:ca:49:30:dc:2f:7e:04:09:2d:36:6f:b5:
         6c:7c:ad:e3:e5:84:53:10:97:f2:58:4b:8f:a8:ec:b0:0d:28:
         a2:28:ed:09:e0:9c:6d:15:48:08:7b:f2:15:71:fe:da:1f:07:
         c3:ab:28:e0:3f:54:ad:6e:9e:79:ed:67:d9:e5:db:8c:8d:bd:
         ad:26:89:5a:45:4b:b6:61:5d:bc:d6:6b:d6:7f:cd:31:7f:18:
         32:e9:d8:ee:f2:bd:00:e8:11:c6:ca:b5:b4:5a:ad:83:8b:6b:
         b0:04:56:84:86:58:10:7b:23:2f:9b:fe:71:d2:b5:63:3f:0a:
         c7:21:03:8c:24:39:6f:65:e8:b7:3f:c3:cd:b7:1f:13:6e:a4:
         ec:ae:82:fa:94:6e:b9:a0:ea:a8:bc:a4:f0:cf:11:05:7d:bb:
         4f:58:45:e4:c0:c8:29:cd:6a:d5:ed:93:88:95:87:7f:17:33:
         62:15:9d:06:b8:71:3b:46:08:30:ff:e9:80:a6:48:a8:3b:57:
         95:a8:5d:0d:18:3f:3f:73:0f:c3:92:d0:48:70:cc:72:2b:45:
         48:4a:1c:e1:44:71:b2:2f:70:ae:72:96:7a:23:a3:d6:a6:a1:
         f7:6b:f8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----