Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E49488EEA9C711F19B93F3FFCE1D38B0.roa
File:                     E49488EEA9C711F19B93F3FFCE1D38B0.roa (raw, json)
Hash identifier:          AZjdSvLYt17WO8riTcdMph9nWCGjMmd2ntYWtObifoQ=
Subject key identifier:   34:EA:C6:83:EE:9F:C2:D2:E9:92:B8:C6:0B:13:E5:B1:53:D1:55:B0
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E5D5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E49488EEA9C711F19B93F3FFCE1D38B0.roa
Signing time:             Sun 06 Sep 2026 07:52:23 +0000
ROA not before:           Sun 06 Sep 2026 07:52:18 +0000
ROA not after:            Wed 07 Oct 2026 07:52:18 +0000
asID:                     140224
IP address blocks:        154.86.20.0/24 maxlen: 24
                          154.86.21.0/24 maxlen: 24
                          154.86.22.0/24 maxlen: 24
                          154.86.23.0/24 maxlen: 24
                          154.86.24.0/24 maxlen: 24
                          154.86.25.0/24 maxlen: 24
                          154.86.26.0/24 maxlen: 24
                          154.86.27.0/24 maxlen: 24
                          154.86.28.0/24 maxlen: 24
                          154.86.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124373 (0x1e5d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  6 07:52:18 2026 GMT
            Not After : Oct  7 07:52:18 2026 GMT
        Subject: CN=6a9d1bb7-be09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5d:8d:ef:3c:ed:22:19:cd:f6:0c:80:4d:eb:
                    c1:f5:55:f4:5c:5a:32:c2:f2:00:33:c6:1d:f1:36:
                    0b:01:73:59:27:49:0d:09:cd:8c:d5:47:7c:7c:50:
                    88:30:f3:cd:36:41:3b:8a:d2:88:18:96:d3:fc:c4:
                    c4:d2:2f:8e:ab:4d:c2:6d:0e:b7:22:b1:2b:a9:3e:
                    f5:90:37:5b:e2:5d:57:0a:5a:21:45:80:99:de:e4:
                    20:f7:31:f6:e9:e6:45:41:58:cc:8d:57:21:ad:5d:
                    bf:2a:db:b9:bb:99:84:f4:ef:ff:d1:82:d3:f2:c7:
                    f3:b8:fa:c4:2d:9b:10:cc:14:24:32:4d:20:7f:c7:
                    ec:f5:73:66:f3:f2:40:df:04:d4:20:f5:bb:7b:b1:
                    50:30:0d:83:44:7e:9a:ad:2b:c2:74:63:a3:05:03:
                    8b:db:af:b5:bf:4a:83:df:01:6b:75:b7:e5:a1:22:
                    59:7c:fa:3a:72:de:e8:ec:db:73:1e:ff:f6:9c:9e:
                    bf:62:17:9e:f5:93:62:9e:ad:33:5c:aa:fc:79:0b:
                    3e:e8:f5:72:6e:0f:95:65:8c:7d:70:42:90:0e:bc:
                    8c:f0:5f:45:08:df:a7:4c:cd:db:7b:74:59:98:51:
                    0e:d2:5c:51:cf:26:40:88:a3:ca:9b:68:3f:8f:20:
                    f6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EA:C6:83:EE:9F:C2:D2:E9:92:B8:C6:0B:13:E5:B1:53:D1:55:B0
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E49488EEA9C711F19B93F3FFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.20.0-154.86.29.255

    Signature Algorithm: sha256WithRSAEncryption
         c5:fd:cf:b7:2a:9e:19:a3:1c:36:9f:7e:42:9a:32:66:60:a3:
         a4:10:4a:b5:64:df:c4:c5:52:fd:f1:0f:62:a3:29:ee:c5:2b:
         83:f4:54:b8:e6:58:47:c7:72:fb:f4:63:c9:14:8b:81:b3:18:
         63:3c:4a:b3:9f:af:7b:55:d1:f8:64:e1:a2:50:7b:e0:7e:b3:
         e2:bc:a9:ee:9c:06:bd:78:04:ec:48:64:de:2f:36:ef:64:97:
         fb:81:29:4b:b5:cc:e7:e2:41:c6:7f:cc:b5:ad:b4:6d:b2:d1:
         db:18:f0:04:58:69:d5:2d:ef:41:ad:a2:62:4d:0e:6a:94:11:
         63:62:fa:83:69:e9:8b:2c:20:c3:79:94:1d:e5:cf:9e:49:20:
         ea:c5:54:f1:f7:ac:02:70:e9:b5:17:7e:04:52:bf:ef:fd:75:
         e5:b2:70:59:e4:e1:ea:65:1a:0e:18:5d:ea:f1:4e:47:4b:9b:
         04:f9:b8:c6:05:23:e1:a3:22:37:00:5d:42:b7:be:ed:4e:9e:
         2e:3b:70:88:e7:af:68:f7:7f:ce:18:65:68:16:89:b9:2a:f8:
         1b:4d:cf:bd:90:68:2f:f0:b9:f9:10:28:ec:9c:00:83:1c:00:
         cf:cd:c8:b6:53:a8:04:f2:ce:f1:05:01:50:17:9f:39:8a:a7:
         9d:c4:cf:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----