Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/041825BAB4E811F1970791BDCE1D38B0.roa
File:                     041825BAB4E811F1970791BDCE1D38B0.roa (raw, json)
Hash identifier:          cBedFbmIkGYjoxRCVVzfNGuSiTrSoprf/ubbF6efiD0=
Subject key identifier:   44:89:5E:FB:2C:30:A6:14:DF:18:F9:A2:60:04:38:CC:F4:2F:4A:28
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E925
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/041825BAB4E811F1970791BDCE1D38B0.roa
Signing time:             Sun 20 Sep 2026 11:40:02 +0000
ROA not before:           Sun 20 Sep 2026 11:39:58 +0000
ROA not after:            Tue 27 Oct 2026 11:39:58 +0000
asID:                     154177
IP address blocks:        154.205.128.0/24 maxlen: 24
                          154.205.129.0/24 maxlen: 24
                          154.205.130.0/24 maxlen: 24
                          154.205.133.0/24 maxlen: 24
                          154.205.134.0/24 maxlen: 24
                          154.205.139.0/24 maxlen: 24
                          154.205.144.0/24 maxlen: 24
                          154.205.145.0/24 maxlen: 24
                          154.205.146.0/24 maxlen: 24
                          154.205.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125221 (0x1e925)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 20 11:39:58 2026 GMT
            Not After : Oct 27 11:39:58 2026 GMT
        Subject: CN=6aafc612-1287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:79:90:60:20:fd:85:b3:b2:70:36:50:29:28:
                    71:ec:0e:a7:e7:82:57:fa:18:d1:21:0b:84:54:41:
                    39:33:05:7b:bb:fa:36:9f:56:16:f0:26:6b:80:7f:
                    6e:7c:2e:2c:ce:6e:84:bf:1e:09:13:9a:6a:b2:de:
                    96:d7:f0:06:d9:50:84:02:ed:6b:51:da:fd:0a:7c:
                    e5:00:82:7e:48:a8:fb:25:c0:41:ab:e2:7e:6e:e6:
                    3c:5d:16:8b:33:a2:39:03:e3:ef:df:f2:48:77:5e:
                    b5:82:a2:1c:92:55:91:09:b1:bd:b3:59:3e:79:d7:
                    36:1f:97:e7:ef:7e:a2:3d:50:da:e2:16:7d:57:8b:
                    dc:9a:d6:32:05:8f:87:5b:24:ac:23:d5:7c:4d:38:
                    30:95:e8:eb:a3:bf:41:b0:88:f0:17:10:1b:c1:80:
                    fc:a9:1a:91:b4:23:fd:42:07:31:17:cb:16:41:d2:
                    71:8e:b2:86:07:bd:7c:5c:42:7d:c6:69:30:c8:fb:
                    b8:21:93:7f:e0:76:21:74:ca:17:1c:b6:bd:bf:72:
                    22:18:52:9a:32:df:59:0b:be:69:7b:c4:a6:f2:b6:
                    d0:59:0e:0f:59:d2:3a:ce:90:b1:cd:c2:29:3e:8f:
                    a7:76:45:1c:80:b7:32:7b:b4:65:8b:98:5b:e6:f5:
                    8c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:89:5E:FB:2C:30:A6:14:DF:18:F9:A2:60:04:38:CC:F4:2F:4A:28
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/041825BAB4E811F1970791BDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.128.0-154.205.130.255
                  154.205.133.0-154.205.134.255
                  154.205.139.0/24
                  154.205.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:c9:a4:c8:02:06:0d:96:bf:13:9e:49:47:f7:29:58:83:e1:
         64:84:6b:f9:4d:46:4a:6d:0d:9b:6a:53:58:aa:3b:27:37:cc:
         3c:c9:31:04:34:41:0f:d0:42:4b:3b:f9:f3:35:e6:36:ef:04:
         b1:01:50:4d:51:d2:fc:6e:40:e6:ba:74:f1:75:24:b2:40:10:
         b3:39:85:3e:45:1b:85:45:05:e6:84:3e:2f:6d:2c:ce:54:48:
         a4:f5:fd:3d:74:8d:12:78:5b:bb:7d:51:94:34:a9:9e:1e:0b:
         ee:b8:8a:7c:62:a2:5d:d2:f0:b6:3b:e0:69:d8:1f:e1:d0:56:
         77:4b:ca:b0:3c:6d:b1:d1:6f:10:6c:32:46:15:dd:17:28:b1:
         68:82:47:46:b5:51:02:b2:8f:b7:18:40:86:0c:75:98:f8:b9:
         69:52:f0:0c:ce:70:a2:7d:12:10:e4:2d:2d:e4:80:22:80:0f:
         53:a9:e3:5f:13:72:80:50:95:7a:db:c8:09:ef:59:2d:cc:44:
         af:ce:b9:50:57:ae:d1:db:1d:c1:bd:4e:3d:d3:7c:dc:1f:aa:
         e1:5f:d4:15:3b:36:a6:31:0b:27:e4:0a:a1:84:c9:dc:45:ad:
         15:31:3b:a2:dd:57:a2:03:5c:19:52:82:48:80:78:45:88:cb:
         ca:e4:85:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----