Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3183E02A9CC11F1A2CB3D1DCF1D38B0.roa
File:                     E3183E02A9CC11F1A2CB3D1DCF1D38B0.roa (raw, json)
Hash identifier:          lNpks/pUrmY6HVhhDwzokcxVkFMV83/YH/UwRDUNJL8=
Subject key identifier:   49:50:E7:3E:B7:E3:FB:CC:77:62:76:FB:5D:08:D2:0A:5C:19:6E:5C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E5E1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3183E02A9CC11F1A2CB3D1DCF1D38B0.roa
Signing time:             Sun 06 Sep 2026 08:28:08 +0000
ROA not before:           Sun 06 Sep 2026 08:28:04 +0000
ROA not after:            Wed 07 Oct 2026 08:28:04 +0000
asID:                     153517
IP address blocks:        154.86.16.0/24 maxlen: 24
                          154.86.17.0/24 maxlen: 24
                          154.86.18.0/24 maxlen: 24
                          154.86.19.0/24 maxlen: 24
                          154.86.20.0/24 maxlen: 24
                          154.86.22.0/23 maxlen: 24
                          154.86.24.0/23 maxlen: 24
                          154.86.26.0/23 maxlen: 24
                          154.86.28.0/23 maxlen: 24
                          154.86.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124385 (0x1e5e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  6 08:28:04 2026 GMT
            Not After : Oct  7 08:28:04 2026 GMT
        Subject: CN=6a9d2418-25e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a7:1e:90:67:24:be:44:25:e0:48:e5:39:92:
                    c6:4e:4d:d4:99:6c:ef:dc:b0:ba:a0:59:1b:1a:86:
                    d1:d6:cc:b0:19:13:44:4b:1d:1c:fd:9e:00:66:64:
                    5e:23:b2:3b:da:48:b1:61:75:e1:8e:32:91:e7:8d:
                    f7:16:c5:9d:be:f7:33:fa:39:5c:8b:eb:af:b8:dd:
                    0e:b2:1e:a2:07:92:26:33:cb:8d:92:27:2a:7f:8e:
                    1b:0a:ef:2b:26:b3:ed:e9:15:28:75:99:2e:4a:66:
                    f1:1e:c6:88:69:19:e8:28:e2:2e:6e:42:96:30:45:
                    43:67:76:7b:67:5c:7e:10:53:fc:11:a3:39:d5:18:
                    8b:df:f3:69:6c:e8:7b:c9:83:16:b8:c8:bc:02:9f:
                    38:cb:2a:dd:76:50:ec:ed:be:34:b6:2e:83:4d:09:
                    a3:fb:37:6f:c1:22:93:b8:15:27:39:8f:70:72:fd:
                    21:69:8d:d7:9c:57:c9:0b:01:8a:22:f4:93:04:3d:
                    3f:1a:11:4a:d5:65:e9:f6:e9:32:14:a2:ed:0a:79:
                    da:b3:5e:85:53:e3:0b:85:74:30:40:67:75:aa:3f:
                    71:c3:f8:89:7a:d2:fb:b9:c5:f6:a4:c4:a6:45:f1:
                    e5:6f:2f:95:1e:d5:bd:fa:02:4d:77:d5:36:76:fb:
                    cd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:50:E7:3E:B7:E3:FB:CC:77:62:76:FB:5D:08:D2:0A:5C:19:6E:5C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3183E02A9CC11F1A2CB3D1DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.16.0-154.86.20.255
                  154.86.22.0-154.86.31.255

    Signature Algorithm: sha256WithRSAEncryption
         75:ef:19:f9:f0:23:3e:61:ab:d1:26:ea:ab:4f:74:78:13:9b:
         c7:e8:1b:f6:53:2e:e2:75:0d:d0:d4:b3:de:16:f9:81:10:77:
         bb:e3:22:ff:53:13:44:98:14:e1:86:61:4c:98:02:af:52:eb:
         ff:36:50:bd:27:a7:c5:6c:77:8b:dc:b2:6b:35:d1:f2:13:a3:
         b7:0e:f1:a9:44:d0:ec:01:db:a9:04:93:6c:a6:e5:53:90:f9:
         71:fd:2d:ef:78:a9:90:05:6d:6c:40:f8:7f:e9:37:7b:21:9f:
         9e:2b:f4:7d:db:35:4d:17:5d:ac:f8:3c:cb:60:1b:cf:92:34:
         3d:41:3b:04:a4:e8:f4:90:33:18:43:f1:17:15:0d:cb:24:25:
         83:89:5b:6e:42:11:d0:e7:f4:65:ef:4d:51:03:c9:57:bf:ca:
         61:4c:aa:a2:ed:0c:04:f0:7a:2a:2b:4b:6c:6b:1b:b9:77:72:
         a4:f0:12:fd:b7:a9:09:ca:f3:4f:6a:42:5d:87:06:1b:f5:81:
         0a:af:1b:be:70:63:e0:3a:18:66:26:1c:3c:73:99:35:55:c6:
         2e:a9:11:08:a4:d2:a0:52:1e:45:c2:fa:8f:06:18:50:ac:f5:
         dc:be:bb:a9:9e:e4:82:4a:7e:cf:f0:68:7a:4b:95:17:52:09:
         41:0c:8a:50
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----