Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBAA2220ACEB11F18A476B03CF1D38B0.roa
File:                     EBAA2220ACEB11F18A476B03CF1D38B0.roa (raw, json)
Hash identifier:          iw5kGumWguoZhnKPmt4rrtb899KPerUNCPC5IabUEWs=
Subject key identifier:   86:84:79:AD:E0:A8:85:96:25:0E:C7:38:4A:F2:8D:3C:2B:84:58:CB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E6F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBAA2220ACEB11F18A476B03CF1D38B0.roa
Signing time:             Thu 10 Sep 2026 07:47:50 +0000
ROA not before:           Thu 10 Sep 2026 07:47:46 +0000
ROA not after:            Mon 21 Sep 2026 07:47:46 +0000
asID:                     150008
IP address blocks:        154.206.17.0/24 maxlen: 24
                          154.206.18.0/24 maxlen: 24
                          154.206.21.0/24 maxlen: 24
                          154.206.24.0/24 maxlen: 24
                          154.206.25.0/24 maxlen: 24
                          154.206.26.0/24 maxlen: 24
                          154.206.31.0/24 maxlen: 24
                          154.210.213.0/24 maxlen: 24
                          154.210.226.0/24 maxlen: 24
                          154.210.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 21 Sep 2026 07:47:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124657 (0x1e6f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 10 07:47:46 2026 GMT
            Not After : Sep 21 07:47:46 2026 GMT
        Subject: CN=6aa260a6-bf43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3d:65:a9:c9:0b:b0:8d:11:43:1e:f7:be:d5:
                    6e:8c:2b:e1:c9:bb:d9:e6:e2:d2:57:f3:51:ce:7a:
                    6c:21:cb:b1:b4:86:cd:b9:8f:cd:4b:e4:2a:52:4c:
                    50:6f:be:96:0e:85:2e:da:59:8e:03:20:a2:8f:ea:
                    cf:29:73:05:ae:d8:05:65:82:f0:00:a2:37:e7:50:
                    2e:50:26:ce:82:4f:7e:de:e7:1f:7b:da:0f:d6:2d:
                    9f:e9:23:f2:43:7f:0b:03:ae:2c:b0:59:2d:84:c1:
                    8f:53:a7:d8:64:57:43:1c:2e:b7:60:a2:a4:a5:c4:
                    24:74:17:e1:77:29:90:d8:d3:93:1d:ca:22:69:df:
                    2f:53:0a:8f:c4:63:2e:55:fc:30:15:0e:bc:c9:2c:
                    2a:16:d1:96:db:fe:b8:5a:60:22:2b:67:d9:33:9b:
                    ea:8e:fd:a9:15:58:21:f8:46:8d:58:d4:8d:3e:da:
                    e8:4c:77:c0:d7:56:59:e7:a2:fa:6b:de:f6:9d:15:
                    b8:ac:a6:de:6e:bd:a4:8d:f9:b6:6d:80:53:8b:2d:
                    be:7e:77:15:a5:ae:49:ca:70:cb:f1:98:5f:07:b8:
                    6c:20:24:57:ee:98:9d:12:58:27:8c:2c:81:d1:6d:
                    0d:86:bd:30:54:95:1b:e3:5d:54:2e:28:65:ec:62:
                    9b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:84:79:AD:E0:A8:85:96:25:0E:C7:38:4A:F2:8D:3C:2B:84:58:CB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBAA2220ACEB11F18A476B03CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.206.17.0-154.206.18.255
                  154.206.21.0/24
                  154.206.24.0-154.206.26.255
                  154.206.31.0/24
                  154.210.213.0/24
                  154.210.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:f8:bb:9f:fc:9f:e3:81:8c:86:82:ec:e2:8c:6e:13:fe:93:
         c8:5c:23:93:ba:ef:19:5e:ab:2b:3c:69:a8:1e:16:77:ce:70:
         49:1f:4b:bd:47:48:bd:37:ab:42:a2:44:23:b2:7f:ee:50:1f:
         8b:d9:2f:30:8d:41:f8:df:eb:33:5a:a3:e7:0a:90:ef:9c:7a:
         67:d3:73:1d:8d:2f:38:d8:d6:4c:aa:bc:9c:c4:41:1e:18:65:
         b2:e8:c6:09:09:5e:c7:29:35:c3:56:21:d5:6f:d4:45:56:b7:
         0f:aa:d0:fb:48:3d:b9:29:92:ef:d8:50:73:b5:a2:6b:3f:15:
         a9:88:c5:74:1f:00:a5:13:a4:13:36:2a:76:c1:d0:25:a4:6b:
         da:d8:b1:ea:22:02:aa:72:81:57:6c:02:6e:64:36:59:66:df:
         85:1b:35:8f:42:2c:6a:88:05:99:7c:16:ae:42:70:49:78:0b:
         d3:93:b5:3c:b8:44:9b:3c:e6:37:17:89:f7:3a:d3:8e:d9:f5:
         e8:0e:5a:50:e0:82:7f:0c:fb:75:b9:7a:6d:89:76:68:93:a8:
         c4:b0:50:2b:fd:b8:8d:d7:8d:08:6d:5f:9a:d4:f2:24:47:61:
         f4:96:ab:7b:65:8c:97:51:90:7c:4c:24:93:70:23:dd:d7:c0:
         a3:65:aa:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----