Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A5E603CAB9D11F18F97D00FCF1D38B0.roa
File:                     5A5E603CAB9D11F18F97D00FCF1D38B0.roa (raw, json)
Hash identifier:          ujC0Zve11DIlfFaOt6fD3p7YfwfTZ1jmWoqT5jWO9DU=
Subject key identifier:   78:40:06:CC:7B:E9:3F:9C:FA:1D:07:E8:E7:A7:3A:94:4E:9C:2B:FD
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E682
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A5E603CAB9D11F18F97D00FCF1D38B0.roa
Signing time:             Tue 08 Sep 2026 15:52:54 +0000
ROA not before:           Tue 08 Sep 2026 15:52:50 +0000
ROA not after:            Thu 12 Apr 2029 15:52:50 +0000
asID:                     17561
IP address blocks:        154.95.135.0/24 maxlen: 24
                          154.95.136.0/24 maxlen: 24
                          154.95.137.0/24 maxlen: 24
                          154.95.138.0/24 maxlen: 24
                          154.95.139.0/24 maxlen: 24
                          154.95.140.0/24 maxlen: 24
                          154.95.141.0/24 maxlen: 24
                          154.95.142.0/24 maxlen: 24
                          154.95.143.0/24 maxlen: 24
                          154.95.144.0/24 maxlen: 24
                          154.95.145.0/24 maxlen: 24
                          154.95.146.0/24 maxlen: 24
                          154.95.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124546 (0x1e682)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  8 15:52:50 2026 GMT
            Not After : Apr 12 15:52:50 2029 GMT
        Subject: CN=6aa02f56-d6e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:47:8f:f1:63:89:ff:5f:5a:3a:38:93:05:dd:
                    18:e7:6b:41:8d:07:6b:27:54:ed:cb:ee:bf:9f:d0:
                    fd:83:3a:a4:07:3f:d5:a0:0f:18:c5:6d:c7:a4:7c:
                    b1:d3:ee:c1:fd:4a:ec:74:a2:37:bf:84:fb:8f:2f:
                    c0:19:cd:01:e5:3c:65:5e:2f:25:1b:9b:39:71:ed:
                    95:b9:ce:34:ad:d3:5f:bd:8f:fa:20:e5:b2:d3:07:
                    49:d8:32:bb:86:02:10:41:1b:29:06:a3:92:22:aa:
                    aa:29:91:f3:b8:ba:0e:af:df:7f:37:69:2d:32:fc:
                    6b:c2:fe:27:18:ff:da:9e:c7:11:d8:c8:ad:0c:16:
                    ab:47:0e:3c:40:c6:4d:b3:9c:c3:4b:47:75:55:c3:
                    52:99:d7:0e:db:d5:10:d4:9e:83:16:35:6e:90:c1:
                    b6:92:d8:c3:2a:cb:49:f6:ec:98:f6:a8:0c:10:e6:
                    10:17:1d:e9:00:74:a5:b5:98:68:08:09:9e:64:81:
                    d9:f1:af:c3:fc:2f:da:3f:d5:91:2b:1f:27:e1:93:
                    5b:33:6a:b8:7f:04:a8:16:52:1c:16:ef:ca:73:08:
                    cc:d3:05:e9:38:6b:74:5d:db:04:dc:1d:39:00:6c:
                    29:92:f0:ba:ff:16:76:74:39:42:b3:bd:df:10:68:
                    4e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:40:06:CC:7B:E9:3F:9C:FA:1D:07:E8:E7:A7:3A:94:4E:9C:2B:FD
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A5E603CAB9D11F18F97D00FCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.95.135.0-154.95.147.255

    Signature Algorithm: sha256WithRSAEncryption
         aa:0b:40:11:23:42:08:17:ad:65:c1:ee:e7:e4:7b:3c:3b:42:
         8b:26:0b:dd:6f:d1:4c:c6:8c:64:12:21:3d:8e:15:2d:d9:ff:
         ac:ea:b6:df:ec:89:ba:c7:b7:c2:d7:53:0f:e0:f2:22:24:a4:
         fe:08:a8:23:32:da:1c:d7:fc:ca:cd:9e:2c:e0:55:08:50:d1:
         6b:12:86:a3:e0:8d:2f:36:97:d3:3c:22:e2:34:5e:01:fd:bd:
         31:60:8b:e4:7b:2b:55:48:a2:9d:36:10:64:d7:7f:23:b4:c8:
         10:5d:8c:c6:02:f0:66:69:62:e1:39:d3:56:32:b5:c7:2a:8f:
         48:ff:f7:49:1e:a3:0d:81:b5:eb:96:bb:a7:85:88:bf:c5:2e:
         3b:48:b8:f8:48:da:3d:33:1f:d7:2b:d2:43:26:70:6a:3a:c1:
         9d:58:34:f5:0c:41:66:a2:be:db:21:e8:2a:00:32:78:1b:12:
         56:86:35:f4:17:f4:9d:2d:af:5c:9d:e5:52:78:b1:be:e2:92:
         74:d1:da:ca:ce:7a:4d:ff:70:3e:f2:87:0e:1e:1c:3c:bd:fc:
         91:3d:07:1f:32:2f:92:36:29:22:fb:33:ff:45:a3:88:54:fd:
         de:0a:27:db:0b:43:0c:40:34:63:46:36:30:bc:55:8a:db:28:
         9f:7e:8e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----