Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F11ABDAB36411F184BCB5ABCE1D38B0.roa
File:                     3F11ABDAB36411F184BCB5ABCE1D38B0.roa (raw, json)
Hash identifier:          d6TLhBe/LR/XN+0lnnSO6MrwzNc4zLf6M7y7QOmfaXc=
Subject key identifier:   E6:96:25:74:0D:82:54:D7:F8:D9:5A:91:F3:E2:ED:11:9E:27:88:27
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E8BD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F11ABDAB36411F184BCB5ABCE1D38B0.roa
Signing time:             Fri 18 Sep 2026 13:24:16 +0000
ROA not before:           Fri 18 Sep 2026 13:24:12 +0000
ROA not after:            Sun 25 Oct 2026 13:24:12 +0000
asID:                     401362
IP address blocks:        154.84.183.0/24 maxlen: 24
                          154.84.184.0/24 maxlen: 24
                          154.84.185.0/24 maxlen: 24
                          154.84.186.0/24 maxlen: 24
                          154.84.187.0/24 maxlen: 24
                          154.84.188.0/24 maxlen: 24
                          154.84.189.0/24 maxlen: 24
                          154.84.190.0/24 maxlen: 24
                          154.84.191.0/24 maxlen: 24
                          154.86.96.0/24 maxlen: 24
                          154.86.97.0/24 maxlen: 24
                          154.86.98.0/24 maxlen: 24
                          154.86.99.0/24 maxlen: 24
                          154.86.100.0/24 maxlen: 24
                          154.86.101.0/24 maxlen: 24
                          154.86.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125117 (0x1e8bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 18 13:24:12 2026 GMT
            Not After : Oct 25 13:24:12 2026 GMT
        Subject: CN=6aad3b80-1676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4e:e6:ed:f8:34:7a:5e:97:b4:03:fe:fe:d8:
                    16:ec:65:74:f5:47:0c:d0:4d:f5:f1:4a:16:90:9e:
                    af:b9:74:2f:3a:96:76:1b:2d:3a:bb:df:33:1c:2c:
                    c8:e9:56:4f:10:ee:10:c6:eb:d6:93:62:4a:f0:61:
                    87:ce:08:24:1a:de:df:6b:14:17:fe:2c:6c:8b:eb:
                    b4:e9:aa:42:92:4e:de:74:6d:7d:01:89:4d:3a:83:
                    59:92:7a:c7:8f:24:7c:92:a5:26:71:c0:09:e2:b3:
                    0b:92:90:12:66:4b:d8:77:aa:d6:62:c1:a5:11:16:
                    67:35:05:fc:62:bd:60:66:bc:1c:02:d5:62:e3:f1:
                    f7:4e:c2:f5:dc:ef:bf:a2:cf:4f:7e:82:ae:30:4c:
                    98:29:67:fb:e1:16:96:7a:5f:ff:40:55:d4:d8:c3:
                    db:21:9f:7b:c2:86:81:eb:62:c7:eb:eb:f2:21:39:
                    f6:e5:8c:87:74:a7:0d:c2:f4:c9:30:d7:40:86:69:
                    7b:59:22:97:f2:07:a0:61:1c:de:db:71:48:2b:a3:
                    81:18:71:cc:37:05:da:d8:ae:93:71:2c:1a:42:22:
                    08:f2:72:71:44:fc:41:2d:62:81:f9:1b:84:70:8f:
                    3f:d2:08:2b:08:d8:b8:ae:9e:c7:75:7d:e2:a9:29:
                    cf:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:96:25:74:0D:82:54:D7:F8:D9:5A:91:F3:E2:ED:11:9E:27:88:27
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F11ABDAB36411F184BCB5ABCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.183.0-154.84.191.255
                  154.86.96.0-154.86.102.255

    Signature Algorithm: sha256WithRSAEncryption
         a9:21:69:38:af:14:74:39:c9:17:91:9a:0a:8d:cf:56:49:ab:
         35:88:bc:b2:8a:a1:7b:42:d7:9f:e4:86:7d:60:35:dd:74:bc:
         0b:64:97:e2:e2:77:d1:82:85:03:1d:45:6c:13:f6:a1:a5:a4:
         10:44:0f:09:50:9e:8f:44:bf:a8:54:1f:d4:d2:40:ad:16:bb:
         89:d0:0b:60:83:5b:ff:e7:fb:4e:25:bd:49:69:e4:54:5f:62:
         4a:29:4f:c4:f9:67:c7:58:e7:b4:28:26:56:5a:6d:7d:69:b8:
         7f:55:40:00:18:5e:dc:c7:54:8b:3d:a9:a8:c5:09:5e:3a:fe:
         08:cd:d8:78:65:2c:1d:d9:50:8f:b8:bd:3c:a4:7a:7e:b0:96:
         bf:ae:17:8b:5f:2e:f3:e3:66:80:e9:eb:a7:3a:56:15:82:19:
         bf:13:35:5e:26:a1:ef:fc:3a:82:6b:4b:20:a4:6f:1d:d9:65:
         17:25:1a:7e:10:e3:cf:f4:a9:97:59:67:85:f4:27:00:60:db:
         cc:cf:c8:5e:5c:28:2f:47:15:11:23:36:99:1d:ba:0f:37:53:
         23:e1:b4:73:dc:d0:c0:3f:61:23:9d:f6:f9:bc:28:ec:25:c2:
         ce:82:fe:3a:bd:8b:98:56:bb:9b:3a:93:b2:46:46:4e:19:8d:
         cc:19:c3:b5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----