Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5E2779ABA3F11F19ACA9EA2CE1D38B0.roa
File:                     F5E2779ABA3F11F19ACA9EA2CE1D38B0.roa (raw, json)
Hash identifier:          filjcjGZTRBsaZL35BfiRFXWkk80xaZ/Kzk/YKEvWOU=
Subject key identifier:   AB:21:0B:53:F5:B7:A1:38:2E:8B:E7:2C:DB:CF:DE:27:57:2A:1A:DC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EAF6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5E2779ABA3F11F19ACA9EA2CE1D38B0.roa
Signing time:             Sun 27 Sep 2026 06:52:10 +0000
ROA not before:           Sun 27 Sep 2026 06:52:06 +0000
ROA not after:            Sun 01 Nov 2026 06:52:06 +0000
asID:                     49505
IP address blocks:        154.205.244.0/24 maxlen: 24
                          154.205.245.0/24 maxlen: 24
                          154.205.246.0/24 maxlen: 24
                          154.205.247.0/24 maxlen: 24
                          154.223.198.0/24 maxlen: 24
                          154.223.199.0/24 maxlen: 24
                          154.223.200.0/24 maxlen: 24
                          154.223.201.0/24 maxlen: 24
                          154.223.202.0/24 maxlen: 24
                          154.223.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125686 (0x1eaf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 27 06:52:06 2026 GMT
            Not After : Nov  1 06:52:06 2026 GMT
        Subject: CN=6ab8bd1a-8dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:94:d7:62:ed:07:08:9c:0f:60:2c:9b:8c:48:
                    b0:f1:8c:09:6c:12:ef:e3:ce:b9:40:c6:01:90:3b:
                    a6:b7:fa:c4:8e:b5:d5:2a:19:13:51:3f:59:60:53:
                    04:bb:35:f7:35:cb:62:96:97:80:31:ac:a5:9d:58:
                    c5:81:10:d1:ef:f1:a1:9f:6b:e5:f6:84:b1:2f:6b:
                    fa:17:ee:75:53:09:b7:82:ce:4e:7b:6a:d7:84:fb:
                    77:c2:a3:40:44:43:74:c8:46:33:09:5a:cf:2b:b1:
                    2d:a2:29:64:8f:f6:b0:99:42:3d:d7:6a:62:ee:bc:
                    88:97:e4:56:fb:8a:fd:20:89:22:eb:f9:09:4b:84:
                    7e:8a:51:0d:3e:16:da:fd:ce:09:b1:fc:9c:a8:23:
                    3a:74:15:0c:75:39:a8:80:28:65:36:68:02:39:e2:
                    4d:a8:bc:18:91:c3:c5:b8:81:d4:90:d2:9c:d0:ec:
                    5c:06:8b:f9:c2:a7:63:ee:7a:16:19:ce:2f:a6:6e:
                    d3:8b:66:31:81:aa:34:d5:37:bb:04:09:c6:90:8c:
                    65:53:d8:31:3d:f5:92:0b:41:4c:81:19:cb:cc:14:
                    4f:29:78:41:4f:b8:89:d4:51:b1:75:9a:19:b1:04:
                    5f:20:fc:dd:8a:bc:3a:83:e0:9d:fe:0f:33:7e:4f:
                    a2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:21:0B:53:F5:B7:A1:38:2E:8B:E7:2C:DB:CF:DE:27:57:2A:1A:DC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5E2779ABA3F11F19ACA9EA2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.244.0/22
                  154.223.198.0-154.223.203.255

    Signature Algorithm: sha256WithRSAEncryption
         2b:47:e2:5e:e3:8d:30:dd:ee:86:f4:7b:11:3b:31:46:69:4b:
         10:01:3e:b7:ec:95:f5:ce:14:8d:18:1c:7b:12:89:57:ce:68:
         0c:07:17:d1:d8:a5:f2:c1:d2:ec:d6:17:9a:68:f8:c1:b1:0a:
         a5:a3:1a:2b:65:74:6d:9f:bc:52:2a:1b:a8:ea:22:72:ff:68:
         3e:f5:96:63:22:d0:5b:20:e1:dd:b6:27:d1:34:56:05:75:42:
         d2:96:45:f9:9e:80:7e:86:cb:fb:16:12:28:7e:8c:99:5f:f0:
         75:f3:2c:92:e9:e2:39:02:ce:d5:a2:8e:55:93:c9:83:a1:10:
         d3:15:03:07:2d:9d:54:20:51:d5:bb:df:92:9d:bd:09:2f:d0:
         6f:e4:56:8b:1c:8d:36:7e:8b:7b:6d:e5:7d:38:d4:ce:6d:f7:
         71:80:fc:0b:4b:1c:55:8e:e0:9e:6e:23:1b:96:2b:99:60:dd:
         0f:d2:28:b5:82:16:e4:7b:10:00:33:6e:a7:03:af:c0:d1:cb:
         09:91:12:88:c9:ea:ee:25:f9:08:85:af:c5:d7:0b:11:2f:24:
         0e:6a:0d:ab:21:88:76:63:5b:65:7a:95:b0:c3:5f:41:ee:eb:
         9c:90:c6:26:41:09:0e:06:19:c4:32:4a:6d:e4:ba:a9:76:04:
         a4:c3:38:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----