Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3C430B8B97611F19C663B02CF1D38B0.roa
File:                     E3C430B8B97611F19C663B02CF1D38B0.roa (raw, json)
Hash identifier:          PHa7lJ/vrbjEWTSSiCvHDdNx7Qwhnq0QnxvMv/Ceyeo=
Subject key identifier:   45:7C:75:97:E9:3F:1A:2F:10:0C:D1:57:3B:84:C7:D4:69:93:B4:46
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EAC5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3C430B8B97611F19C663B02CF1D38B0.roa
Signing time:             Sat 26 Sep 2026 06:52:51 +0000
ROA not before:           Sat 26 Sep 2026 06:52:47 +0000
ROA not after:            Sun 18 Oct 2026 06:52:47 +0000
asID:                     139613
IP address blocks:        154.81.61.0/24 maxlen: 24
                          154.81.140.0/24 maxlen: 24
                          154.81.161.0/24 maxlen: 24
                          154.81.164.0/24 maxlen: 24
                          154.81.178.0/24 maxlen: 24
                          154.81.181.0/24 maxlen: 24
                          154.81.191.0/24 maxlen: 24
                          154.82.18.0/24 maxlen: 24
                          154.82.20.0/24 maxlen: 24
                          154.83.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125637 (0x1eac5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 26 06:52:47 2026 GMT
            Not After : Oct 18 06:52:47 2026 GMT
        Subject: CN=6ab76bc3-fe57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8e:6c:ac:bd:a7:b8:20:d1:c8:ab:b1:bc:30:
                    6f:f5:92:b8:a6:2f:10:54:b2:f8:c8:8c:00:8e:e5:
                    f6:13:0a:89:4e:54:63:aa:b5:4b:04:e3:d9:97:33:
                    24:9e:5b:cf:17:fe:0e:44:c8:a4:e6:a4:59:f0:c3:
                    06:e6:ed:23:49:68:2a:37:b2:f6:f1:6e:41:6a:d4:
                    05:6e:57:10:ae:2a:d3:72:53:3a:81:60:0c:48:da:
                    64:1d:c6:66:59:3d:c0:d3:ab:68:57:79:54:dd:24:
                    64:5a:69:aa:37:95:0c:d0:2a:ab:1f:67:18:a7:7b:
                    49:fc:8d:d0:83:e4:00:eb:51:55:03:d9:be:63:77:
                    26:40:f7:47:ad:49:ce:d4:1e:cd:34:5d:39:78:db:
                    4f:15:03:13:33:12:23:86:bb:b6:6f:c1:56:50:60:
                    42:16:16:ef:d4:a4:ba:d5:d7:34:09:21:ce:f5:d6:
                    58:55:d7:c1:1c:57:7a:ea:d4:aa:f4:3b:08:36:d3:
                    7b:58:72:34:b1:97:52:0a:51:7a:44:c3:62:c8:c6:
                    fe:69:5f:ce:87:63:0a:c6:70:7d:2e:87:33:9d:e8:
                    c9:a9:f6:a1:bc:91:8b:c4:e4:08:6b:fb:c7:75:40:
                    cb:7f:7b:e0:16:df:dd:02:d4:42:f6:a3:58:07:5a:
                    b5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:7C:75:97:E9:3F:1A:2F:10:0C:D1:57:3B:84:C7:D4:69:93:B4:46
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3C430B8B97611F19C663B02CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.61.0/24
                  154.81.140.0/24
                  154.81.161.0/24
                  154.81.164.0/24
                  154.81.178.0/24
                  154.81.181.0/24
                  154.81.191.0/24
                  154.82.18.0/24
                  154.82.20.0/24
                  154.83.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:30:02:2b:fa:80:a2:08:6a:c2:e7:bf:dc:e4:6d:cc:3e:23:
         5d:14:2d:e0:d3:61:0c:06:93:e9:9d:be:b8:ef:f7:fc:5a:76:
         b3:c7:40:1c:1c:6f:b5:7c:ca:7e:f7:e1:cc:1d:be:fd:00:fa:
         da:26:a2:d2:9f:78:a3:c1:91:dd:f2:0c:f0:fa:9b:28:ed:a8:
         7b:96:5e:97:35:b8:84:75:b0:73:db:13:fd:6b:be:bb:49:bd:
         d3:30:6e:72:de:da:e0:83:31:15:e0:29:2e:68:f2:bd:a8:3a:
         ec:08:24:9c:9e:1f:18:9f:b8:55:bc:c1:b8:8b:0b:63:4f:d7:
         b7:74:51:75:f2:73:02:ee:ec:21:00:d6:5d:f4:9f:71:c0:13:
         21:fb:f4:4c:3d:97:3e:8f:b8:fb:6c:c6:82:c0:ce:99:cf:68:
         13:c2:0b:c1:1f:2f:e3:5d:12:20:bd:ab:54:e9:57:57:95:61:
         22:b5:54:63:63:58:cf:f0:34:b2:1b:1d:93:ca:3c:9c:ae:85:
         b4:8f:da:e1:85:39:ff:2e:4e:7c:ac:c0:a5:cd:4f:88:35:a1:
         7d:d4:32:75:2e:b6:1f:82:f4:07:a6:38:7d:11:8d:64:e2:40:
         53:65:61:75:39:a3:c5:63:d5:a0:5e:13:81:7a:2a:6c:7c:c3:
         2f:a0:57:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----