Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D41A5268C2F511F196226C0ACF1D38B0.roa
File:                     D41A5268C2F511F196226C0ACF1D38B0.roa (raw, json)
Hash identifier:          VP9nHGqqLqJ1Tq8mkTLaBEqRzZknZGixr+4gCYd2tSc=
Subject key identifier:   9F:19:C8:7D:CB:DA:9C:37:56:BD:41:E5:09:FE:B7:AB:D1:EA:8E:37
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ECCD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D41A5268C2F511F196226C0ACF1D38B0.roa
Signing time:             Thu 08 Oct 2026 08:54:11 +0000
ROA not before:           Thu 08 Oct 2026 08:54:06 +0000
ROA not after:            Sat 07 Nov 2026 08:54:06 +0000
asID:                     131274
IP address blocks:        154.81.72.0/21 maxlen: 24
                          154.81.96.0/19 maxlen: 24
                          154.84.136.0/21 maxlen: 24
                          154.84.144.0/21 maxlen: 24
                          154.88.72.0/21 maxlen: 24
                          154.89.8.0/21 maxlen: 24
                          154.89.16.0/20 maxlen: 24
                          154.89.208.0/20 maxlen: 24
                          154.92.112.0/20 maxlen: 24
                          154.92.136.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 10:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126157 (0x1eccd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  8 08:54:06 2026 GMT
            Not After : Nov  7 08:54:06 2026 GMT
        Subject: CN=6ac75a33-ac2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e9:7d:1e:39:a8:e5:e8:f4:48:95:5c:0d:7b:
                    d4:7d:55:5b:9a:9f:2a:92:66:2d:c9:77:2d:4f:cf:
                    11:88:53:d6:f7:87:bf:48:61:d2:de:dc:ef:36:fb:
                    11:4a:d7:f1:ec:4b:45:ae:e4:4c:8a:e5:9e:c3:9e:
                    67:a8:14:0f:af:7f:51:75:d1:89:cb:10:08:6e:f9:
                    cb:d7:98:f1:17:de:40:17:20:e3:fc:54:5b:d4:62:
                    58:7b:66:12:01:7f:19:5b:59:1d:45:94:2e:07:f1:
                    f0:72:03:20:6d:fb:0f:38:5f:fe:0d:69:dc:5f:4a:
                    9d:3b:ba:35:2f:10:ac:3d:28:6d:6c:a2:ea:6b:1f:
                    30:f9:85:ea:1f:7c:6a:8a:b9:24:c8:79:05:10:1d:
                    ae:22:e2:70:3d:d6:2c:96:89:28:9d:bd:01:79:ca:
                    4a:ed:8e:03:44:16:ad:d5:15:4b:84:4a:85:e3:0c:
                    42:7c:cb:9f:c3:54:15:a4:9b:b2:1e:8d:4f:23:17:
                    2a:6a:3e:41:5c:1b:37:70:f4:e8:86:de:f2:74:01:
                    c0:1d:59:8b:17:f9:93:8f:b3:95:15:c2:d4:01:4c:
                    71:7e:4f:d4:42:64:ed:17:fc:c5:d7:4e:98:75:79:
                    f6:a1:fd:de:ba:41:67:de:d5:b8:93:59:6d:76:dd:
                    11:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:19:C8:7D:CB:DA:9C:37:56:BD:41:E5:09:FE:B7:AB:D1:EA:8E:37
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D41A5268C2F511F196226C0ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.72.0/21
                  154.81.96.0/19
                  154.84.136.0-154.84.151.255
                  154.88.72.0/21
                  154.89.8.0-154.89.31.255
                  154.89.208.0/20
                  154.92.112.0/20
                  154.92.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a3:90:a5:a5:11:08:ed:c7:22:39:3d:df:a8:f6:f4:7c:52:4d:
         16:d6:4c:83:c5:d2:cb:85:a9:ef:56:ce:b6:55:f2:4d:c5:ea:
         d3:93:6f:48:09:51:0c:e2:b5:e9:82:7e:be:b6:23:d9:b2:50:
         32:19:c1:5c:f9:99:99:19:dc:7d:18:37:de:ab:1a:99:eb:c2:
         2d:46:0f:64:44:40:30:3d:9b:80:30:d6:79:af:c3:ee:d8:bd:
         79:b0:0b:36:58:71:53:90:c2:82:af:5f:45:1c:dc:ba:8a:ae:
         3d:9a:43:01:33:1c:76:f2:74:d9:63:4b:ba:26:b7:97:c0:46:
         e3:cc:39:fd:9c:7b:70:7d:21:00:97:f7:a7:8e:ba:d6:f1:3f:
         52:f0:30:94:d1:b7:04:95:60:1c:4d:cd:58:a3:52:94:56:cb:
         49:b3:d7:db:86:4c:41:d6:a3:bb:6e:49:32:56:35:c3:67:85:
         8f:0c:f1:c8:6c:57:b4:c1:c8:a9:9d:1f:3b:d4:85:98:b6:7e:
         36:94:c6:00:1d:7b:c3:b3:3d:5e:40:58:91:02:b1:11:8f:d7:
         f2:38:9d:5a:7a:1e:99:8f:30:6f:b7:29:5a:fb:4a:eb:88:b2:
         eb:f7:05:06:93:45:5a:49:d6:ef:91:76:0b:53:a5:6b:21:29:
         d0:53:6f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----