Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB1866BABC9811F1ADB115F2CE1D38B0.roa
File:                     FB1866BABC9811F1ADB115F2CE1D38B0.roa (raw, json)
Hash identifier:          fhlp0tnXVeafbDFJEUja2B7HrcS8lIc5NCbhkWfZFJE=
Subject key identifier:   77:AE:44:8E:5D:1C:56:77:85:A9:70:86:C2:0C:70:A2:4E:81:FA:40
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EB69
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB1866BABC9811F1ADB115F2CE1D38B0.roa
Signing time:             Wed 30 Sep 2026 06:34:26 +0000
ROA not before:           Wed 30 Sep 2026 06:34:22 +0000
ROA not after:            Fri 06 Nov 2026 06:34:22 +0000
asID:                     44559
IP address blocks:        154.209.218.0/24 maxlen: 24
                          154.209.219.0/24 maxlen: 24
                          154.209.220.0/24 maxlen: 24
                          154.209.221.0/24 maxlen: 24
                          154.209.222.0/24 maxlen: 24
                          154.209.223.0/24 maxlen: 24
                          154.211.9.0/24 maxlen: 24
                          154.211.10.0/24 maxlen: 24
                          154.211.11.0/24 maxlen: 24
                          154.211.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125801 (0x1eb69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 30 06:34:22 2026 GMT
            Not After : Nov  6 06:34:22 2026 GMT
        Subject: CN=6abcad72-8fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0a:dd:9b:cf:fe:37:6a:f5:46:52:59:41:c2:
                    cf:ce:a2:df:94:1a:ce:d2:c7:9d:63:fb:13:33:c1:
                    d7:cc:0b:3d:97:65:47:fc:2d:80:d6:9c:3b:a3:96:
                    87:78:07:45:94:37:44:ba:32:7f:63:1c:2a:12:36:
                    8b:2f:6a:e2:98:30:18:1b:1c:27:a7:f2:b7:e5:38:
                    d9:a1:58:13:fa:28:05:4a:b5:e1:f9:9b:82:59:7b:
                    8e:21:f6:ca:f2:16:1d:06:ad:21:4a:37:c0:d6:5d:
                    be:3f:26:27:5a:66:cd:a4:0c:30:e8:04:fb:d8:e0:
                    21:7b:bf:62:e4:96:eb:38:15:71:8f:da:f6:21:12:
                    42:51:f4:d4:da:5b:c4:51:f6:e1:99:a9:03:97:25:
                    3a:04:20:a0:cf:3d:1d:da:4e:24:cb:bf:7f:b6:3a:
                    6f:51:24:1a:1e:99:b6:24:94:70:33:9c:74:31:5f:
                    df:76:a9:2f:e1:44:c8:82:f0:fe:77:1e:9c:9a:5f:
                    39:92:07:71:98:0f:2b:9d:9f:7f:be:46:c4:b3:78:
                    24:b7:e6:41:79:b5:50:32:00:58:bc:8a:75:e8:f2:
                    ec:1c:3d:ac:26:53:db:05:63:6a:64:f3:47:45:92:
                    67:f5:85:20:cd:3b:e2:27:50:af:2a:d6:b0:9c:ce:
                    9e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AE:44:8E:5D:1C:56:77:85:A9:70:86:C2:0C:70:A2:4E:81:FA:40
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB1866BABC9811F1ADB115F2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.209.218.0-154.209.223.255
                  154.211.9.0-154.211.11.255
                  154.211.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:4c:10:fa:a7:12:0f:c0:d4:af:aa:f9:15:12:ce:0b:d6:5b:
         b8:d3:52:7d:1c:96:a9:3c:0f:77:c5:e5:6e:4d:f1:5c:a4:b3:
         07:7b:47:41:23:a7:29:4c:71:66:55:ca:12:d0:42:e7:f2:9f:
         44:0a:70:e8:9b:c3:3e:7e:df:6a:16:db:49:27:19:21:c8:25:
         06:b6:72:8b:8b:ad:01:ec:49:eb:ba:f2:fe:c7:e7:87:5b:0e:
         91:16:88:df:d9:c7:10:63:08:99:bb:18:1b:79:b3:31:02:dd:
         c9:68:36:38:cf:ef:06:4c:9c:9b:66:2e:ec:ba:63:2d:7f:8b:
         34:f8:bf:b4:37:74:f6:86:00:d2:b8:94:dd:b9:63:ac:44:8e:
         ee:e2:16:10:64:0b:c7:5a:a5:a6:3a:6b:07:0c:8b:db:d3:27:
         dc:cc:90:3e:8b:43:05:f0:30:dc:89:a9:54:de:4c:db:d4:59:
         2e:2b:e4:c7:29:ad:04:b9:71:54:c2:83:11:84:0c:cd:21:a4:
         01:8d:58:ad:35:d6:87:8c:1d:6d:75:66:c8:b8:2e:03:8c:2d:
         f6:b1:0d:38:ee:5d:b1:d1:91:38:55:9d:69:0a:ec:a4:90:f5:
         08:0e:d1:3f:18:7f:40:45:63:92:40:59:46:2d:11:04:ac:c9:
         c7:60:6e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----