Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB4C7EB4BF0511F1B0E357C4CE1D38B0.roa
File:                     EB4C7EB4BF0511F1B0E357C4CE1D38B0.roa (raw, json)
Hash identifier:          zT/KA5hRDSBrErTqiPZRT5ffe4yL1keGqsKP2IWqidc=
Subject key identifier:   CD:82:CB:4C:51:7C:2D:1A:D2:15:ED:D4:D5:53:6F:33:04:00:6A:26
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EBF4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB4C7EB4BF0511F1B0E357C4CE1D38B0.roa
Signing time:             Sat 03 Oct 2026 08:39:17 +0000
ROA not before:           Sat 03 Oct 2026 08:39:13 +0000
ROA not after:            Tue 10 Nov 2026 08:39:13 +0000
asID:                     138915
IP address blocks:        154.93.50.0/24 maxlen: 24
                          154.93.51.0/24 maxlen: 24
                          154.93.60.0/24 maxlen: 24
                          154.93.61.0/24 maxlen: 24
                          154.93.63.0/24 maxlen: 24
                          154.95.64.0/24 maxlen: 24
                          154.95.65.0/24 maxlen: 24
                          154.95.66.0/23 maxlen: 24
                          154.95.66.0/24 maxlen: 24
                          154.95.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125940 (0x1ebf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  3 08:39:13 2026 GMT
            Not After : Nov 10 08:39:13 2026 GMT
        Subject: CN=6ac0bf35-dc70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:aa:6a:6c:50:18:2b:56:be:22:59:da:75:96:
                    17:d8:b8:ed:0a:b6:a5:16:22:43:cf:28:d9:e1:32:
                    07:49:9f:e3:b7:58:86:c1:a7:28:18:ac:3d:7d:c8:
                    f1:96:a4:4c:ec:39:25:e6:75:aa:71:f6:3a:67:8c:
                    95:8d:96:1d:ee:b7:ed:6f:ec:d6:63:b1:cc:79:1b:
                    49:e5:b2:bf:a4:08:40:b6:7a:21:79:ad:5c:7b:8a:
                    b7:55:8e:24:ab:5b:e9:36:f7:30:bc:98:d1:fb:e9:
                    08:a9:b2:a3:2e:41:1b:b2:b0:62:e7:9a:7e:b7:74:
                    e8:25:5c:df:02:eb:9a:55:51:d4:d5:ba:6c:b1:25:
                    fa:98:2a:8d:01:d6:2a:a2:ad:98:fd:df:bc:95:f1:
                    a4:85:cf:aa:d1:ab:4b:9c:8b:f9:d0:d7:2d:dd:51:
                    d5:98:1d:12:73:dc:0b:61:c3:90:96:a0:fd:80:5a:
                    5d:1f:ff:b3:45:d5:d4:02:7c:b1:34:c9:1e:ab:f5:
                    9b:52:fd:46:aa:07:9b:18:8f:e9:5e:31:cd:0d:d7:
                    71:00:ac:d4:df:c1:de:fa:37:a6:67:00:80:b8:b1:
                    dc:2b:2b:cd:2c:cc:a4:14:ab:4a:2d:86:77:ea:c9:
                    6e:82:48:b5:0f:8c:57:9a:18:00:2c:45:df:02:84:
                    09:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:82:CB:4C:51:7C:2D:1A:D2:15:ED:D4:D5:53:6F:33:04:00:6A:26
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB4C7EB4BF0511F1B0E357C4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.93.50.0/23
                  154.93.60.0/23
                  154.93.63.0/24
                  154.95.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:a4:17:4c:fc:0e:f5:1e:6c:08:51:7c:4b:8f:f5:1d:b1:8f:
         ae:37:4b:14:06:b9:d3:b3:0e:c6:96:b0:62:39:4b:4c:3c:74:
         e7:97:35:11:54:20:41:54:93:56:52:8b:d1:c3:81:4b:41:1b:
         b1:08:8a:8e:5a:6e:23:71:69:29:92:8c:00:59:5b:b7:ef:e5:
         a5:15:cf:86:00:74:0f:5d:b8:57:02:9e:1c:30:c6:e5:24:ff:
         ce:73:c7:f9:79:e0:72:20:06:45:95:61:53:d1:cd:d8:0a:1b:
         13:de:86:49:73:66:9e:4d:e1:89:ad:7a:61:ed:c9:42:68:ec:
         f1:8e:b9:3d:9f:9f:cd:3a:d7:64:0f:60:d6:06:c0:5e:07:15:
         b6:df:16:fc:0f:ee:fc:40:bd:ac:66:34:d5:cd:f9:47:e0:50:
         be:43:53:c7:6d:4a:09:b0:e3:93:b2:8b:6f:34:30:e6:f8:3e:
         0c:52:02:c2:f6:3f:6a:83:1a:d1:60:69:43:82:a7:99:19:98:
         ba:09:06:2e:37:65:ca:a7:72:26:3b:ab:e1:a8:0b:66:5f:2b:
         22:8b:69:00:0c:01:05:82:3c:bc:8f:42:59:15:a9:58:69:5b:
         d8:a2:01:49:21:e3:9b:ea:3c:3d:6d:b4:e6:10:f2:9c:e9:b8:
         33:5a:9b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----