Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09781950ADB511F18B2567C9CE1D38B0.roa
File:                     09781950ADB511F18B2567C9CE1D38B0.roa (raw, json)
Hash identifier:          1wxhP9gHPodIN5TDHOhIAluwmxipMGaHDxVx5AYtKk4=
Subject key identifier:   DA:ED:3C:C8:56:11:9C:B0:08:5A:2A:00:11:A1:E5:ED:A6:E0:7F:6D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E769
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09781950ADB511F18B2567C9CE1D38B0.roa
Signing time:             Fri 11 Sep 2026 07:47:29 +0000
ROA not before:           Fri 11 Sep 2026 07:47:25 +0000
ROA not after:            Sun 18 Oct 2026 07:47:25 +0000
asID:                     22773
IP address blocks:        154.194.3.0/24 maxlen: 24
                          154.194.6.0/24 maxlen: 24
                          154.194.63.0/24 maxlen: 24
                          154.194.66.0/24 maxlen: 24
                          154.194.240.0/23 maxlen: 24
                          154.198.6.0/23 maxlen: 24
                          154.198.14.0/23 maxlen: 24
                          154.198.17.0/24 maxlen: 24
                          154.198.18.0/23 maxlen: 24
                          154.198.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 13:46:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124777 (0x1e769)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 11 07:47:25 2026 GMT
            Not After : Oct 18 07:47:25 2026 GMT
        Subject: CN=6aa3b211-e3a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e8:25:3a:88:0d:5a:63:04:ad:ae:4a:e3:83:
                    99:70:b2:96:e2:bf:3d:4b:75:e5:f3:16:86:f2:19:
                    21:2e:4f:6c:50:06:35:7a:12:3d:d0:43:a0:13:d6:
                    05:14:87:15:f2:35:da:4f:02:63:52:4c:2d:d4:7c:
                    0d:bc:98:f4:69:15:5b:e5:57:e4:92:f4:3a:90:87:
                    bd:1b:84:4c:94:9e:2b:1f:0a:8e:f0:48:12:ad:62:
                    a8:64:56:35:68:5b:49:e9:9f:57:c5:46:32:8f:7e:
                    ce:50:26:05:0b:ae:d2:8b:e4:af:11:e7:b8:4a:a6:
                    ec:41:17:a9:2d:03:24:2e:ac:e3:78:63:0a:2c:d6:
                    bd:89:05:9f:9f:d9:2b:55:5a:5e:32:f3:8a:36:34:
                    aa:8d:4c:25:1a:c0:81:2d:69:da:67:f8:46:b9:e2:
                    65:19:16:7c:9b:91:2f:4d:5f:27:c2:e8:a0:b5:7c:
                    35:ca:72:48:53:1e:aa:87:55:c3:fb:8d:18:19:b9:
                    0b:be:5c:64:0e:64:92:42:9f:3f:b6:98:59:ac:e5:
                    6b:c5:d5:7f:52:d3:98:95:56:7e:d2:50:8b:3e:c5:
                    bf:12:aa:5c:ca:dd:7c:dc:ce:5c:59:75:2b:34:41:
                    6e:50:90:11:56:8e:70:6a:2c:50:8f:75:0c:a5:f0:
                    f9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:ED:3C:C8:56:11:9C:B0:08:5A:2A:00:11:A1:E5:ED:A6:E0:7F:6D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09781950ADB511F18B2567C9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.3.0/24
                  154.194.6.0/24
                  154.194.63.0/24
                  154.194.66.0/24
                  154.194.240.0/23
                  154.198.6.0/23
                  154.198.14.0/23
                  154.198.17.0-154.198.19.255
                  154.198.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:5a:20:af:20:e1:ff:86:4d:96:a4:ae:cc:85:9b:52:44:ad:
         90:dd:81:d0:f8:84:50:80:17:c1:1f:f7:4e:ce:31:ef:63:51:
         6c:0b:58:44:b2:52:36:b4:8f:75:d4:f6:c6:c5:76:36:f7:a4:
         b8:8a:b6:f7:ff:df:87:bb:5f:2e:9a:4a:a1:38:74:ce:d0:d9:
         93:27:27:75:6e:72:b6:28:7b:99:37:b0:ed:63:f5:44:3f:0a:
         2b:b5:36:37:55:26:dc:3c:f0:bb:c1:52:7b:13:68:f6:bc:a2:
         80:08:98:78:dc:04:4f:1f:1b:d5:fb:6e:da:b7:16:39:e0:ad:
         83:eb:f9:f7:58:a8:f0:1e:f3:7f:69:9a:82:cd:26:54:fa:75:
         54:51:01:dd:02:90:84:16:44:ce:76:bf:ae:98:f4:af:93:07:
         86:23:8d:cf:e1:d7:e9:42:9b:2c:29:37:96:19:34:9c:13:d8:
         2f:25:9b:85:5b:86:73:20:2a:e3:52:3d:19:ce:7e:81:ae:d9:
         5d:b4:14:88:bc:19:2c:a0:c2:ea:17:af:65:7c:10:4f:22:c3:
         56:20:48:b7:e6:8a:7e:c9:a0:b5:12:dd:ac:7c:9b:fb:48:a8:
         88:d3:34:36:b0:a0:05:16:f7:5c:f2:31:24:0e:db:0e:6a:14:
         25:13:d5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----