Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F53335B0C56511F1B57D7DF1CE1D38B0.roa
File:                     F53335B0C56511F1B57D7DF1CE1D38B0.roa (raw, json)
Hash identifier:          MlM6XYaf0CYAE6WFTVrgvgHdB0rJBjzzl/dkfRgTF6g=
Subject key identifier:   D5:79:0D:2A:0F:68:6E:9F:C4:85:5D:85:1D:54:52:63:7E:3C:08:74
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ED7C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F53335B0C56511F1B57D7DF1CE1D38B0.roa
Signing time:             Sun 11 Oct 2026 11:21:52 +0000
ROA not before:           Sun 11 Oct 2026 11:21:48 +0000
ROA not after:            Wed 18 Nov 2026 11:21:48 +0000
asID:                     139613
IP address blocks:        154.81.61.0/24 maxlen: 24
                          154.81.140.0/24 maxlen: 24
                          154.81.161.0/24 maxlen: 24
                          154.81.164.0/24 maxlen: 24
                          154.81.178.0/24 maxlen: 24
                          154.81.181.0/24 maxlen: 24
                          154.81.191.0/24 maxlen: 24
                          154.82.18.0/24 maxlen: 24
                          154.82.20.0/24 maxlen: 24
                          154.83.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126332 (0x1ed7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 11 11:21:48 2026 GMT
            Not After : Nov 18 11:21:48 2026 GMT
        Subject: CN=6acb7150-b774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fc:27:07:de:7d:59:f1:9a:63:76:68:d3:9e:
                    1c:f2:f1:aa:cc:93:22:b1:66:5a:5f:15:a5:5e:b0:
                    cf:df:da:ff:08:71:66:bf:b2:54:e5:98:2d:6d:d3:
                    0b:95:08:66:f6:1d:89:a4:05:6b:f1:26:a4:e6:69:
                    95:0c:ec:2a:72:c5:86:ba:44:f4:63:93:50:1e:7f:
                    2e:9d:e3:bc:c6:d3:74:07:17:5c:85:ee:50:00:d4:
                    0f:8c:31:a5:a3:29:2c:60:b2:e1:7d:68:2c:9e:5d:
                    7f:d8:fe:b6:48:69:18:dc:ed:93:d8:03:4b:76:23:
                    fc:73:b2:d2:8c:a6:b3:61:60:fb:b4:ea:ae:7a:65:
                    f9:5a:2a:3c:cf:7e:d2:92:28:c6:f4:d2:73:6a:b0:
                    81:88:3b:1b:12:65:8f:45:d3:a3:8c:84:f5:c7:71:
                    b9:9c:cf:8e:4a:a1:fe:f6:57:80:e3:26:9f:81:39:
                    42:ec:5c:d3:75:dc:87:06:1c:e5:15:e3:6a:60:fb:
                    01:eb:ba:7b:90:ce:09:35:72:55:06:a3:87:5f:68:
                    1d:e4:13:0e:b5:e4:e4:a6:d9:db:63:21:84:fc:0f:
                    18:c7:ef:4a:ce:43:bc:19:c3:a5:15:71:c0:fe:48:
                    27:47:9e:8d:e8:8a:37:ba:f3:8d:6d:ea:8c:8c:30:
                    ea:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:79:0D:2A:0F:68:6E:9F:C4:85:5D:85:1D:54:52:63:7E:3C:08:74
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F53335B0C56511F1B57D7DF1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.61.0/24
                  154.81.140.0/24
                  154.81.161.0/24
                  154.81.164.0/24
                  154.81.178.0/24
                  154.81.181.0/24
                  154.81.191.0/24
                  154.82.18.0/24
                  154.82.20.0/24
                  154.83.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:81:3a:64:cc:4f:6b:7b:17:79:69:03:15:3f:7b:a7:3b:be:
         6c:5b:64:56:9f:18:22:b2:fe:a4:d4:60:b0:25:c8:41:57:30:
         f6:09:a6:dc:30:83:79:0b:1f:42:ad:e8:24:69:b4:f1:6b:17:
         d6:75:5b:1b:c2:c4:7d:8c:6b:35:ba:0f:18:91:c0:0a:fc:d0:
         39:8f:d4:c5:7f:c1:e2:75:24:1d:3f:bd:48:ee:d5:fd:d2:02:
         4a:28:21:46:66:11:19:27:18:81:2c:bc:4f:04:c0:57:25:05:
         0a:99:c5:95:4c:57:36:97:fe:3f:10:ae:eb:e2:c9:bc:16:40:
         b6:8f:5a:f8:54:5b:0a:47:f5:87:eb:5e:da:2a:d5:6c:40:8a:
         a5:86:84:7d:41:d2:05:59:c3:89:cd:33:8a:aa:9f:3e:72:c3:
         a8:95:27:e7:6f:e0:a1:9c:ef:a1:f2:5a:c1:b4:40:1c:c1:8e:
         58:42:2f:e4:80:4d:d3:ea:9a:e2:5d:22:ec:a6:fc:90:52:e8:
         6a:42:25:1a:5e:41:6a:38:9e:1b:87:1c:12:13:6e:77:71:e3:
         60:58:b8:0e:4f:d3:a9:c5:6c:53:49:b3:66:c6:b1:d5:8d:ca:
         a2:15:a3:ee:70:4c:b2:13:d1:69:0a:36:6a:38:8d:85:6b:51:
         5d:0d:47:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----