Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEC2749EC7A211F19063CD0ECF1D38B0.roa
File:                     FEC2749EC7A211F19063CD0ECF1D38B0.roa (raw, json)
Hash identifier:          4as1NwNFjQIc+0ZkhlJnGEMjidn+g62laqfn3dVIF7U=
Subject key identifier:   18:3C:59:B8:CA:18:F5:C5:FE:DC:00:7D:E8:83:4F:B0:00:3D:85:A7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EDF5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEC2749EC7A211F19063CD0ECF1D38B0.roa
Signing time:             Wed 14 Oct 2026 07:43:50 +0000
ROA not before:           Wed 14 Oct 2026 07:43:45 +0000
ROA not after:            Sat 21 Nov 2026 07:43:45 +0000
asID:                     214143
IP address blocks:        154.196.214.0/24 maxlen: 24
                          154.197.25.0/24 maxlen: 24
                          154.197.90.0/24 maxlen: 24
                          154.197.127.0/24 maxlen: 24
                          154.200.72.0/21 maxlen: 24
                          154.200.109.0/24 maxlen: 24
                          154.203.196.0/22 maxlen: 24
                          154.203.208.0/22 maxlen: 24
                          154.203.240.0/24 maxlen: 24
                          154.205.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126453 (0x1edf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 14 07:43:45 2026 GMT
            Not After : Nov 21 07:43:45 2026 GMT
        Subject: CN=6acf32b6-7296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:85:06:be:b5:64:c7:ac:5a:81:f2:fc:28:11:
                    6a:cc:8c:4f:38:cd:f8:93:61:cf:42:a2:f6:4a:34:
                    2d:f5:f4:b9:79:81:d6:30:79:af:ce:5b:be:65:d9:
                    e3:0e:95:f4:43:17:50:9a:9c:d8:09:c4:59:d8:a8:
                    e5:d3:91:e9:86:60:c6:e4:7a:43:35:cc:f0:ce:5d:
                    51:0a:01:05:61:67:85:ed:7a:1e:7f:99:d2:8b:7b:
                    b0:7b:ed:6d:03:b4:98:ab:c8:b0:c5:98:92:b0:8f:
                    d4:fd:e1:cc:d8:e0:08:b1:d8:2e:c5:65:64:d4:e5:
                    23:07:41:bd:06:ad:44:97:7f:67:9a:37:de:a3:04:
                    64:1c:c2:3d:53:59:e3:ae:65:fc:70:b2:7f:4a:95:
                    cc:b5:c5:85:fd:50:df:de:4c:95:95:9e:ad:5d:90:
                    5b:eb:89:4f:b2:aa:23:d5:61:fd:de:c6:95:02:90:
                    03:fd:1f:39:01:5e:b1:14:a1:30:0c:4b:a7:ee:33:
                    48:71:04:74:d2:61:70:1e:35:fc:8c:58:12:b3:a7:
                    3c:d5:62:6b:bc:52:bb:33:2b:33:96:5e:7b:f6:dd:
                    1d:e7:cd:34:2c:bf:32:f2:e8:01:49:ff:4e:72:90:
                    ce:e7:b6:1d:8d:da:ad:3a:da:70:a2:c9:67:c2:7b:
                    51:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3C:59:B8:CA:18:F5:C5:FE:DC:00:7D:E8:83:4F:B0:00:3D:85:A7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEC2749EC7A211F19063CD0ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.214.0/24
                  154.197.25.0/24
                  154.197.90.0/24
                  154.197.127.0/24
                  154.200.72.0/21
                  154.200.109.0/24
                  154.203.196.0/22
                  154.203.208.0/22
                  154.203.240.0/24
                  154.205.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:d9:a3:e1:83:ee:d9:02:42:39:4f:ea:af:62:fa:a4:b9:58:
         73:d7:fa:98:50:59:a6:34:34:1d:27:98:12:50:c2:83:3a:12:
         3a:b2:45:37:64:c5:2f:d8:33:dc:c5:d6:cc:d0:da:78:2f:41:
         8e:79:6c:c9:65:97:34:0d:e2:18:75:41:ea:d2:1c:12:68:8a:
         56:17:80:59:9b:c3:6c:b4:4d:14:0b:7e:0e:9d:88:fc:b3:42:
         c7:2f:94:41:0c:ba:52:78:66:1d:d1:ee:f8:b8:a5:76:56:5b:
         ab:29:68:28:7f:3b:8a:78:66:53:7d:f7:46:d6:a4:9f:73:3b:
         c8:a5:00:fc:5a:50:32:b9:1c:54:96:f6:6e:37:94:f9:4c:75:
         48:d0:cb:06:85:3c:91:12:ef:b0:b1:a6:0b:c4:15:7e:27:e8:
         68:71:9d:1d:66:ab:6a:64:94:b5:5a:f6:44:5f:1a:fb:7c:d3:
         7c:f8:78:b5:dd:e4:27:ae:e5:cf:5e:55:67:80:1a:3f:b0:5c:
         39:18:2f:79:59:47:c7:a6:15:d2:b4:b9:fa:c6:cb:08:89:8e:
         93:91:d2:05:0a:28:e3:7a:0d:0a:6e:b2:57:4e:59:d1:53:28:
         c2:62:50:a4:e5:91:31:d5:02:90:d3:79:50:9e:2a:0d:ab:89:
         6d:f7:72:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----