Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB6DFB6CC60811F1BBC6811CCF1D38B0.roa
File:                     DB6DFB6CC60811F1BBC6811CCF1D38B0.roa (raw, json)
Hash identifier:          +xf0u6NYs/yKra0yo1Wakiooys6Aq/pQi11rDkj20Ks=
Subject key identifier:   B6:47:CE:82:CA:28:D6:FA:8C:38:A8:3C:37:C9:4F:30:9E:A8:32:19
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EDA7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB6DFB6CC60811F1BBC6811CCF1D38B0.roa
Signing time:             Mon 12 Oct 2026 06:47:57 +0000
ROA not before:           Mon 12 Oct 2026 06:47:53 +0000
ROA not after:            Thu 11 Oct 2029 06:47:53 +0000
asID:                     17561
IP address blocks:        154.86.178.0/24 maxlen: 24
                          154.86.179.0/24 maxlen: 24
                          154.86.180.0/24 maxlen: 24
                          154.86.181.0/24 maxlen: 24
                          154.86.182.0/24 maxlen: 24
                          154.86.183.0/24 maxlen: 24
                          154.86.184.0/24 maxlen: 24
                          154.86.185.0/24 maxlen: 24
                          154.86.186.0/24 maxlen: 24
                          154.86.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126375 (0x1eda7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 12 06:47:53 2026 GMT
            Not After : Oct 11 06:47:53 2029 GMT
        Subject: CN=6acc829d-7ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fb:23:fd:e8:ae:59:2d:fd:b9:0f:07:8f:75:
                    e1:d1:e1:54:36:ce:a9:40:75:ed:83:6c:29:a0:c3:
                    60:43:74:34:20:a6:5a:6d:4e:4f:73:26:4e:ce:cc:
                    70:c3:65:86:47:c9:d8:0c:8a:73:47:a3:8c:bd:66:
                    fa:8c:77:2e:b2:91:69:3e:ce:7a:03:54:4e:c8:19:
                    51:79:5f:be:f6:df:73:8f:ce:07:12:c3:aa:3b:6d:
                    86:86:f1:ba:95:45:31:de:75:5b:b0:6d:15:e5:d9:
                    a3:1a:72:d1:10:fa:84:ea:c2:2c:be:a2:ad:c0:45:
                    44:c4:17:99:09:b7:91:0e:3e:db:00:b8:e5:af:9c:
                    80:25:38:3c:3e:59:35:63:af:4f:ee:46:ef:2c:ab:
                    50:00:b6:be:0b:be:a3:4f:2b:a5:a1:51:f4:d9:1a:
                    ef:8b:6c:9f:d5:44:20:5c:58:03:bc:3d:37:ed:00:
                    c4:70:a9:0d:af:2e:cd:72:c6:a3:cb:4a:32:b7:4d:
                    03:8a:99:f1:12:94:55:4b:81:1e:81:f0:33:bb:f4:
                    f4:55:a2:74:08:22:e0:6c:e6:03:80:0e:e8:67:24:
                    54:2e:9e:ee:23:39:26:3c:18:71:9b:01:1e:b5:99:
                    f0:f3:1d:44:17:64:65:4c:ef:64:1f:10:a2:5f:1d:
                    ed:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:47:CE:82:CA:28:D6:FA:8C:38:A8:3C:37:C9:4F:30:9E:A8:32:19
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB6DFB6CC60811F1BBC6811CCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.178.0-154.86.187.255

    Signature Algorithm: sha256WithRSAEncryption
         5f:11:c0:15:99:42:71:90:d7:75:84:08:2f:61:5b:d7:51:bb:
         e0:43:73:86:61:bd:79:96:b8:5f:8c:37:51:45:69:f5:4a:cc:
         59:43:f4:1f:d3:e9:df:97:72:89:53:f0:6c:7d:1d:24:84:e5:
         9e:ec:ec:f9:a6:d9:72:a9:eb:e3:66:a0:62:b2:09:cb:1d:00:
         46:0c:11:40:56:c8:2b:34:e3:48:f5:da:a4:a0:7f:6d:d5:93:
         97:ec:49:ae:fd:39:86:95:e0:b7:d9:88:d8:8d:e4:06:25:53:
         33:f6:cc:e3:19:75:79:1e:a0:4e:44:90:40:c5:a8:d5:82:00:
         dc:ad:dc:28:66:2d:de:d1:ab:ee:c4:1f:78:b2:7e:17:08:27:
         eb:19:01:48:67:da:22:df:39:5a:6f:6f:92:d8:50:c2:fe:4e:
         5a:e9:f5:6c:dc:8c:2e:5a:65:59:b0:70:1b:dc:9d:c4:6a:8e:
         d2:27:75:f1:84:50:ed:ab:20:2a:02:f3:c2:66:18:60:19:b0:
         1d:17:d7:1a:14:77:33:2b:1c:1f:b4:fc:a8:97:f9:4e:d2:83:
         d6:e5:3e:eb:be:56:d7:d8:f5:d0:72:1e:6a:19:35:a4:55:76:
         96:ba:54:2a:ba:1e:05:f5:01:f2:fc:f4:21:d8:bf:53:d7:e9:
         1e:af:bf:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----