Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8EB7562C6D411F18A51DECFCE1D38B0.roa
File:                     F8EB7562C6D411F18A51DECFCE1D38B0.roa (raw, json)
Hash identifier:          EZFyYPcucSREpKjCgXdajnN6RdwE3Kjj7ztdCqCZiY8=
Subject key identifier:   88:96:C7:82:0F:C6:A1:5D:D2:85:EF:9B:38:0F:DA:55:15:72:FD:E0
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EDBE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8EB7562C6D411F18A51DECFCE1D38B0.roa
Signing time:             Tue 13 Oct 2026 07:09:04 +0000
ROA not before:           Tue 13 Oct 2026 07:08:58 +0000
ROA not after:            Fri 23 Oct 2026 07:08:58 +0000
asID:                     11404
IP address blocks:        154.194.236.0/22 maxlen: 24
                          154.196.192.0/20 maxlen: 24
                          154.199.96.0/19 maxlen: 24
                          154.199.128.0/19 maxlen: 24
                          154.208.96.0/20 maxlen: 24
                          154.211.224.0/19 maxlen: 24
                          154.214.16.0/20 maxlen: 24
                          154.215.32.0/19 maxlen: 24
                          154.222.160.0/19 maxlen: 24
                          154.223.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126398 (0x1edbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 13 07:08:58 2026 GMT
            Not After : Oct 23 07:08:58 2026 GMT
        Subject: CN=6acdd910-f790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:95:7e:2a:1e:c2:ba:2e:c5:9b:10:48:8a:12:
                    a6:6a:b3:74:df:0a:e8:37:4b:fb:b9:a2:c1:96:02:
                    be:16:71:bb:99:94:97:ca:ca:3d:e7:1e:8a:25:66:
                    85:f2:72:81:a0:13:dd:d6:cf:64:07:7f:fc:95:a2:
                    40:49:21:f6:e8:db:67:f0:f6:27:05:fc:7f:74:1e:
                    df:fd:a9:68:8b:9f:21:24:3f:12:8a:b4:45:7f:87:
                    5f:c2:26:34:5b:98:4b:21:e2:00:51:9a:c0:36:13:
                    5a:e2:f1:b9:28:0d:0e:32:62:d9:1c:6c:3e:bf:14:
                    f3:aa:d1:68:d8:ef:74:d9:c6:73:cf:57:36:85:4d:
                    7d:64:b5:f4:ad:2d:35:4d:87:3c:d9:f4:3e:3f:3f:
                    34:a8:da:a0:b9:0b:3a:78:22:73:53:46:ae:1a:4a:
                    f5:1a:e4:d7:48:fe:83:78:1b:29:9d:57:e1:89:3e:
                    f6:d7:d1:65:29:75:e3:74:af:ea:b2:02:da:c8:f5:
                    5a:21:26:3f:42:e1:90:e4:60:68:19:05:6a:31:65:
                    a8:12:0d:51:04:9d:60:64:29:cf:ab:50:26:03:71:
                    5d:5d:75:4e:73:ba:55:f3:55:7e:b4:cb:02:dd:99:
                    3c:bf:61:37:bc:2d:e4:39:73:6a:45:b5:56:96:91:
                    25:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:96:C7:82:0F:C6:A1:5D:D2:85:EF:9B:38:0F:DA:55:15:72:FD:E0
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8EB7562C6D411F18A51DECFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.236.0/22
                  154.196.192.0/20
                  154.199.96.0-154.199.159.255
                  154.208.96.0/20
                  154.211.224.0/19
                  154.214.16.0/20
                  154.215.32.0/19
                  154.222.160.0/19
                  154.223.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         83:6c:ff:4b:b2:f5:04:06:b2:60:e5:9d:a9:fc:53:22:2e:f9:
         1c:78:83:f1:09:0c:05:18:82:41:6b:8d:8a:6b:f8:4e:d0:d1:
         39:a1:ea:a6:b0:3e:50:09:7c:76:16:cb:33:53:8d:30:3f:bf:
         dc:06:dd:71:b3:3c:3e:b0:fe:4c:92:ef:11:08:dc:54:d8:c1:
         24:96:0b:35:67:97:11:de:93:cb:ab:00:d2:67:26:2f:38:5b:
         65:05:7c:d9:74:0f:3b:ec:33:a2:14:d1:72:d4:8a:65:0a:ba:
         40:f2:aa:df:a5:30:ad:22:e9:f4:07:a5:f2:37:25:0d:87:bd:
         76:0c:d7:a9:ec:65:b1:85:61:26:71:4e:6f:9e:23:70:da:a4:
         57:ad:31:41:61:54:14:4b:9d:c5:5f:b3:d6:e5:44:d1:57:c0:
         a0:db:20:fe:44:ee:31:ef:28:25:26:01:cb:d1:29:b2:c1:44:
         d4:58:e4:df:a0:21:10:5f:f2:c8:ee:d3:e0:90:97:fe:61:90:
         a3:1f:45:e5:54:86:8a:ea:3a:17:ad:97:87:51:ef:8e:26:81:
         13:b4:cf:34:d2:5e:86:df:ad:f5:6e:50:78:7f:14:41:0f:21:
         68:7a:bc:89:3a:f2:a1:a1:a1:1a:0c:fa:03:95:b2:b0:36:60:
         2a:82:41:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----