Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E16D26D6C56E11F1954506AACE1D38B0.roa
File:                     E16D26D6C56E11F1954506AACE1D38B0.roa (raw, json)
Hash identifier:          sh9RG2AjISlDG8zz5WPFqswyvwT/1Cvxwuund6Btr8U=
Subject key identifier:   4E:B1:06:84:60:1A:C8:73:6D:06:BA:BD:7D:DE:E9:6B:B6:4D:E9:D8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ED88
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E16D26D6C56E11F1954506AACE1D38B0.roa
Signing time:             Sun 11 Oct 2026 12:25:45 +0000
ROA not before:           Sun 11 Oct 2026 12:25:40 +0000
ROA not after:            Wed 18 Nov 2026 12:25:40 +0000
asID:                     22773
IP address blocks:        154.82.224.0/19 maxlen: 24
                          154.85.4.0/22 maxlen: 24
                          154.85.13.0/24 maxlen: 24
                          154.85.121.0/24 maxlen: 24
                          154.85.122.0/24 maxlen: 24
                          154.94.32.0/24 maxlen: 24
                          154.94.36.0/23 maxlen: 24
                          154.94.40.0/24 maxlen: 24
                          154.94.43.0/24 maxlen: 24
                          154.94.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126344 (0x1ed88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 11 12:25:40 2026 GMT
            Not After : Nov 18 12:25:40 2026 GMT
        Subject: CN=6acb8049-4bbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:20:05:06:62:24:b3:a7:90:1e:b5:f7:0f:4f:
                    c1:2b:85:0b:4c:84:d5:6a:e4:97:d2:ce:48:e6:e9:
                    20:4e:0b:2d:cb:0f:6b:33:65:d5:56:4b:6b:7b:47:
                    3b:46:ee:fa:2f:aa:1e:86:73:60:92:07:ad:83:ac:
                    46:4f:f5:1e:cf:74:9d:d4:57:a4:5a:ba:e7:c1:5e:
                    00:77:57:bf:e5:78:15:6f:7b:44:a5:a2:36:93:0d:
                    8d:96:e5:dd:05:9b:e0:b1:fd:b3:81:7a:39:da:a1:
                    72:18:3b:90:75:04:88:34:4f:94:96:bc:3e:22:88:
                    3d:c1:9d:2c:cf:5f:87:c5:e6:f1:7b:20:58:fd:7b:
                    1c:7b:55:12:99:0a:f6:6b:d2:be:bd:d5:ad:2c:09:
                    3f:22:4b:2e:bf:cd:59:dc:20:5a:21:ad:01:c7:5c:
                    bb:7b:68:8b:aa:74:91:a2:47:7a:15:b3:96:61:df:
                    a2:44:6d:51:07:fe:79:7f:88:8d:fb:74:36:50:af:
                    90:83:b6:1d:09:53:01:2f:8c:5c:2d:0a:e0:32:9d:
                    5d:11:d0:02:bb:ca:f4:e0:c4:f8:36:ac:64:e2:e9:
                    a0:50:b4:5e:50:06:f0:7a:5c:41:d7:fe:75:c7:45:
                    7f:c2:4f:0f:de:dd:22:cb:23:2d:51:e7:35:95:ea:
                    18:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B1:06:84:60:1A:C8:73:6D:06:BA:BD:7D:DE:E9:6B:B6:4D:E9:D8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E16D26D6C56E11F1954506AACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.224.0/19
                  154.85.4.0/22
                  154.85.13.0/24
                  154.85.121.0-154.85.122.255
                  154.94.32.0/24
                  154.94.36.0/23
                  154.94.40.0/24
                  154.94.43.0/24
                  154.94.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:29:8e:4d:d5:ab:12:b3:2b:7c:6d:1b:d5:05:28:48:ff:d1:
         8d:cc:e3:ee:53:35:1c:cb:80:4e:2a:48:b4:aa:8e:1f:76:1b:
         70:f3:9e:a4:44:1a:df:f8:97:2f:a6:2b:53:77:df:26:6f:39:
         eb:a3:45:52:5e:4b:f6:75:8d:b9:67:0e:02:7b:1f:02:13:77:
         52:87:c4:7e:70:80:49:56:22:b6:24:cf:5d:ff:81:a6:c3:a2:
         83:b3:99:2b:18:23:d4:38:ed:94:17:65:92:52:92:db:44:03:
         b8:ac:ae:4b:00:94:77:b2:49:32:ea:ba:31:86:69:5d:2c:bc:
         79:32:8a:41:2c:8d:6e:75:2e:56:00:04:24:bb:de:3e:86:09:
         ab:20:c8:c9:34:11:8d:0f:37:56:4e:1a:f9:c0:62:c4:f2:44:
         1b:ae:c6:22:bd:89:a6:1e:10:49:96:46:31:66:15:3c:ca:97:
         ce:6b:1c:c8:37:a5:63:26:cf:96:f4:3f:7e:e3:ce:aa:45:23:
         07:4a:03:71:d0:d2:57:30:36:00:77:f3:11:cb:d8:6b:41:a2:
         1a:99:05:fd:a4:71:99:ca:4f:c7:89:06:6b:c0:80:35:6c:1b:
         ca:55:70:12:6f:ee:fc:f0:7b:55:dc:5c:83:c7:78:ce:8a:59:
         2f:12:ca:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----