Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3D98BB6C15011F1A03714BDCE1D38B0.roa
File:                     E3D98BB6C15011F1A03714BDCE1D38B0.roa (raw, json)
Hash identifier:          i0wxdLRhgD1mxpqMpPgVtj8UvPmIwpJe/JXWJ1II4dw=
Subject key identifier:   88:0E:13:6C:87:3B:91:C6:9E:C9:CE:99:B5:F1:99:65:E9:A8:AD:19
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC61
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3D98BB6C15011F1A03714BDCE1D38B0.roa
Signing time:             Tue 06 Oct 2026 06:40:59 +0000
ROA not before:           Tue 06 Oct 2026 06:40:55 +0000
ROA not after:            Fri 06 Nov 2026 06:40:55 +0000
asID:                     151347
IP address blocks:        154.84.203.0/24 maxlen: 24
                          154.84.204.0/24 maxlen: 24
                          154.84.205.0/24 maxlen: 24
                          154.84.206.0/24 maxlen: 24
                          154.84.207.0/24 maxlen: 24
                          154.84.208.0/24 maxlen: 24
                          154.84.209.0/24 maxlen: 24
                          154.84.210.0/24 maxlen: 24
                          154.84.243.0/24 maxlen: 24
                          154.84.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 10:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126049 (0x1ec61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  6 06:40:55 2026 GMT
            Not After : Nov  6 06:40:55 2026 GMT
        Subject: CN=6ac497fb-fd5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:06:ef:c4:9d:23:f1:47:69:38:ef:f1:3e:88:
                    95:0f:5a:61:0a:bd:05:0b:ea:64:9a:d4:11:e7:a1:
                    9e:2c:00:5d:31:55:11:0f:77:9f:47:7e:7f:06:b3:
                    d5:6a:0f:58:d1:80:11:c7:99:02:09:84:59:2d:7e:
                    e6:bf:6b:95:30:67:a1:b4:0c:23:a3:14:d0:5c:07:
                    ef:c2:9b:11:5f:5a:01:f5:85:c0:1d:36:59:27:2c:
                    ea:34:78:81:dd:45:d1:14:58:28:1f:7e:04:80:c3:
                    e3:b4:b7:09:d8:f1:62:88:b4:6a:1a:c1:d7:bf:6a:
                    c3:90:62:33:81:b6:f6:b3:f6:23:95:0a:48:01:bd:
                    51:5a:3c:da:d5:f5:3a:79:83:e3:0c:9b:b7:7c:da:
                    3f:84:84:7f:0a:46:b6:d2:b3:51:78:3e:25:7b:46:
                    24:52:f2:35:2f:90:98:ef:73:b8:46:c1:bb:49:65:
                    39:99:03:40:3f:35:1f:5c:e3:ce:67:23:ae:4b:33:
                    48:ce:c9:ca:d9:4d:5e:fb:2b:7c:ee:18:2c:ea:5d:
                    4b:07:1b:e4:99:ed:88:24:7e:21:86:92:59:2b:41:
                    b5:46:96:4e:16:00:78:0d:9c:01:ce:09:94:2e:56:
                    99:5d:3d:67:1f:63:f6:7a:dd:01:95:d4:a1:3c:8b:
                    01:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0E:13:6C:87:3B:91:C6:9E:C9:CE:99:B5:F1:99:65:E9:A8:AD:19
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3D98BB6C15011F1A03714BDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.203.0-154.84.210.255
                  154.84.243.0/24
                  154.84.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:c1:06:5a:47:08:9a:7f:16:5d:02:68:c8:b1:0b:00:7e:d3:
         36:9c:4c:c4:f7:2c:02:68:dd:2b:8d:36:a2:75:ce:4d:63:fd:
         74:98:22:d7:35:b0:2e:51:d9:b4:85:d0:07:c4:ec:86:8e:18:
         89:44:d9:63:b6:39:0a:26:40:1d:98:53:6d:23:9b:34:ef:ed:
         d1:b8:11:37:13:b2:53:89:b1:a6:f6:81:5d:cf:82:fc:a4:0d:
         5e:6a:c8:d6:4e:d4:1c:fb:54:1b:5b:9a:35:c7:ec:a2:c0:e0:
         ad:38:78:e8:60:a3:5b:a5:98:3a:93:49:68:b7:78:f7:7f:03:
         5c:78:d9:6a:86:d7:4c:89:84:d6:aa:ed:d0:26:0e:00:4b:ae:
         64:72:27:29:79:7e:06:83:83:45:1d:12:ff:95:fe:8e:ba:03:
         f7:44:27:a9:3e:9d:a4:78:c3:64:c0:2a:cd:1b:45:ea:48:64:
         7a:e0:ac:0c:0d:97:93:12:6f:24:6a:98:05:f2:48:06:54:97:
         13:38:e8:3d:2f:5d:04:b3:da:8d:65:9b:6c:6e:9e:34:a9:f6:
         dc:e5:d2:f8:1f:d6:c4:77:21:2b:6c:f4:4a:1a:cd:8b:af:2a:
         7f:bc:9c:be:7e:9b:66:af:b5:0f:1e:cc:ac:3f:5c:38:ff:1d:
         62:43:3d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----