Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFDE8B8EB4EB11F1A97526D5CE1D38B0.roa
File:                     AFDE8B8EB4EB11F1A97526D5CE1D38B0.roa (raw, json)
Hash identifier:          leDWxffMIEvg+4DadWkyRXjubL4kw8IYH1GxcLjs1n8=
Subject key identifier:   56:1C:97:45:49:3B:99:96:1C:2E:1E:E6:73:51:50:19:E3:68:10:CE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E92D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFDE8B8EB4EB11F1A97526D5CE1D38B0.roa
Signing time:             Sun 20 Sep 2026 12:06:19 +0000
ROA not before:           Sun 20 Sep 2026 12:06:15 +0000
ROA not after:            Tue 27 Oct 2026 12:06:15 +0000
asID:                     63139
IP address blocks:        154.81.1.0/24 maxlen: 24
                          154.94.64.0/24 maxlen: 24
                          154.94.65.0/24 maxlen: 24
                          154.94.66.0/23 maxlen: 24
                          154.94.79.0/24 maxlen: 24
                          154.94.80.0/24 maxlen: 24
                          154.94.81.0/24 maxlen: 24
                          154.94.83.0/24 maxlen: 24
                          154.94.84.0/24 maxlen: 24
                          154.94.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125229 (0x1e92d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 20 12:06:15 2026 GMT
            Not After : Oct 27 12:06:15 2026 GMT
        Subject: CN=6aafcc3b-1004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:66:2e:59:9f:78:25:48:21:99:18:42:a1:50:
                    76:ab:7b:94:0a:b4:dd:0d:42:63:11:28:8b:54:25:
                    60:a2:38:d5:82:15:f7:20:a9:84:5e:0a:e3:4c:89:
                    7e:cf:b4:84:e2:60:6e:51:5d:38:ce:ec:9a:f7:e2:
                    ef:97:e0:ef:f6:91:9a:23:cf:43:93:fb:d5:c9:07:
                    2b:b4:b2:45:1d:ee:9e:ee:a7:48:b1:2b:23:6c:15:
                    3c:1e:27:d5:a4:a0:43:8e:6e:e0:60:5a:93:4b:0a:
                    24:9d:b6:0f:bd:2d:05:ea:1f:24:e5:54:14:51:11:
                    b1:7e:47:c8:95:ac:90:fc:6a:0c:ef:10:6f:1b:78:
                    6a:57:f0:44:6d:ce:63:61:dc:d0:19:17:41:1a:46:
                    07:27:75:9f:77:e5:14:a9:1b:55:1f:30:45:73:96:
                    b4:6e:62:63:07:2a:ed:e9:d2:75:9b:53:6b:40:06:
                    69:ee:99:b7:9b:dc:8c:5b:3e:e9:85:1a:51:ac:2f:
                    02:0b:b4:96:2d:87:c0:08:41:09:71:c8:21:b8:ad:
                    b3:a2:6f:e6:73:a3:f8:92:c5:d4:c7:e5:05:8e:4e:
                    0b:a5:48:e4:96:27:e2:89:1e:a6:bd:3d:ea:1f:8d:
                    93:65:3d:5a:cf:5e:b2:b5:4c:77:21:dc:5a:f7:e1:
                    95:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1C:97:45:49:3B:99:96:1C:2E:1E:E6:73:51:50:19:E3:68:10:CE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFDE8B8EB4EB11F1A97526D5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.1.0/24
                  154.94.64.0/22
                  154.94.79.0-154.94.81.255
                  154.94.83.0-154.94.85.255

    Signature Algorithm: sha256WithRSAEncryption
         79:30:73:7a:76:04:67:69:30:5d:47:26:79:25:eb:b4:0c:58:
         84:bd:d8:e1:bc:a8:e3:07:93:6b:ae:ce:db:47:90:77:e5:d1:
         13:40:7b:e6:15:5c:bc:a9:56:1f:49:68:f3:6c:88:ca:b5:ee:
         d1:e3:c9:35:d4:53:d6:27:4e:c7:49:07:93:75:7f:7b:f3:f1:
         0f:04:61:61:f1:54:48:d3:45:3c:74:41:b7:c0:f5:94:d7:4e:
         a8:36:3b:1f:d6:53:32:2b:8b:08:16:d6:52:94:17:40:50:c2:
         80:59:8a:9f:d1:fb:92:a6:80:67:f4:18:e2:70:84:97:4a:67:
         9d:e2:b2:31:b1:86:b0:53:e6:de:cf:ed:b9:db:2b:ae:d3:87:
         5e:4b:b0:84:a2:73:95:bc:9e:63:c9:a7:e0:f5:6f:6a:55:ea:
         93:6d:ad:8d:50:27:27:d4:7e:c9:27:ea:da:9d:02:9d:bf:5d:
         1e:3f:ed:80:f3:c0:94:1d:80:30:92:12:3c:bc:ab:88:46:93:
         8c:b5:ab:3f:c1:64:20:47:68:7a:80:dc:7b:b7:4a:cf:5f:13:
         fb:23:62:df:c4:eb:cc:5e:24:d0:f4:cb:34:8f:6c:46:87:57:
         3d:f0:42:f3:a3:52:6c:b0:71:37:c5:5b:5e:fa:78:24:a3:7e:
         e6:be:dc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----