Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5F2F8FECC5311F1A85986A9CE1D38B0.roa
File:                     C5F2F8FECC5311F1A85986A9CE1D38B0.roa (raw, json)
Hash identifier:          8C7VshykDGwAb/1DjvCJK0KYvpceF5SJusyQjuMXC2I=
Subject key identifier:   36:DA:91:D3:7C:83:61:75:89:D8:5C:41:3C:62:20:ED:CC:29:F9:E5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EEF4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5F2F8FECC5311F1A85986A9CE1D38B0.roa
Signing time:             Tue 20 Oct 2026 06:59:20 +0000
ROA not before:           Tue 20 Oct 2026 06:59:14 +0000
ROA not after:            Fri 06 Nov 2026 06:59:14 +0000
asID:                     140227
IP address blocks:        154.86.16.0/24 maxlen: 24
                          154.86.17.0/24 maxlen: 24
                          154.86.18.0/24 maxlen: 24
                          154.86.19.0/24 maxlen: 24
                          154.86.20.0/24 maxlen: 24
                          154.86.21.0/24 maxlen: 24
                          154.86.22.0/24 maxlen: 24
                          154.86.23.0/24 maxlen: 24
                          154.86.24.0/24 maxlen: 24
                          154.86.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 13:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126708 (0x1eef4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 20 06:59:14 2026 GMT
            Not After : Nov  6 06:59:14 2026 GMT
        Subject: CN=6ad71148-7603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:91:a5:65:c7:fd:b1:9a:1d:15:90:93:b6:f7:
                    e5:be:fe:6a:ba:83:d0:7c:cf:39:ee:bf:65:a8:eb:
                    60:23:02:e6:29:96:88:d4:c1:71:b2:52:68:ac:ad:
                    73:d4:74:36:69:71:59:d9:69:ee:0b:d0:90:9f:b7:
                    49:2b:c8:7f:d2:de:33:1c:ff:54:79:49:fc:15:87:
                    d4:55:9a:e2:48:f4:7d:13:36:10:e8:e9:aa:fd:83:
                    c8:43:46:bb:68:40:bd:86:3d:af:90:c1:59:b8:1c:
                    53:d4:04:9d:1e:b6:9f:1c:96:be:be:ab:b8:00:9c:
                    0c:e8:47:6b:79:53:93:f6:a4:0b:be:cf:1f:34:0a:
                    88:00:1f:6e:d7:6a:9f:03:04:85:32:cf:d6:d2:96:
                    15:67:f9:bd:23:3e:09:04:d6:46:91:a1:f3:7f:73:
                    21:b9:d6:f7:06:f3:1c:da:f9:53:93:1e:d1:9c:cd:
                    0e:8d:9f:52:0a:81:29:c3:38:5e:47:73:73:2e:ef:
                    4a:b0:6f:1b:1d:a9:a5:19:d4:0d:78:77:f7:57:f1:
                    b6:77:ed:29:8f:96:7c:18:91:c6:b6:86:31:b0:5d:
                    b5:55:ab:ff:28:7a:2a:cb:c5:df:dc:56:7d:f0:9d:
                    a2:01:62:06:72:95:71:f8:86:fb:25:f1:47:7c:9c:
                    c5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DA:91:D3:7C:83:61:75:89:D8:5C:41:3C:62:20:ED:CC:29:F9:E5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5F2F8FECC5311F1A85986A9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.16.0-154.86.25.255

    Signature Algorithm: sha256WithRSAEncryption
         6b:9d:7c:e4:fe:ad:63:5f:21:50:23:8e:a2:16:f3:44:d0:65:
         35:13:4f:b9:29:1a:d7:06:e8:02:e3:00:0a:d4:2b:c2:ac:0f:
         68:18:84:fe:0e:1c:30:dc:59:57:cd:9a:de:7a:42:45:ef:f4:
         1b:24:c4:27:e1:c2:e2:16:7b:6d:10:1a:e8:5e:80:8f:64:2e:
         71:f4:c4:2d:a9:04:2c:4e:89:29:8e:57:54:d4:ab:b6:70:9b:
         2a:ca:fe:24:06:2f:a7:61:91:e4:54:af:6f:3c:98:3b:9a:ff:
         d7:a9:cb:1f:17:cf:96:d5:da:57:b7:dd:07:d3:e9:a3:a6:98:
         ab:c9:e8:a1:ed:9b:a5:03:67:1a:2b:a8:23:de:80:09:7d:e4:
         5c:f3:bf:e1:8c:1d:e4:6f:b8:83:69:4a:97:6f:c2:87:c4:47:
         8e:74:55:36:11:83:43:6d:37:c0:82:ff:c6:f0:90:ec:16:c0:
         e0:c5:4d:97:3f:9f:98:2e:81:49:f2:fa:ec:d1:8d:f1:54:20:
         5c:b7:c9:ef:88:a2:61:d5:e5:c7:fc:b1:ea:4a:fb:0a:16:d2:
         88:f4:48:2e:4c:48:09:5b:89:9e:e3:a2:b2:3c:04:13:01:67:
         ed:6c:5f:e5:c5:cd:ef:e5:33:ee:0b:a2:33:81:05:c8:fc:8b:
         64:ad:a9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----