Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FE255A6A9BB11F19F6849B3CE1D38B0.roa
File:                     0FE255A6A9BB11F19F6849B3CE1D38B0.roa (raw, json)
Hash identifier:          RsDeYhld8WTGse59TzHArZCkIhjTP0t4swCccSbeXmc=
Subject key identifier:   44:8D:0E:E9:6B:99:98:64:40:F3:BC:E1:A5:BD:48:01:A1:FC:2A:94
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E5BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FE255A6A9BB11F19F6849B3CE1D38B0.roa
Signing time:             Sun 06 Sep 2026 06:20:32 +0000
ROA not before:           Sun 06 Sep 2026 06:20:28 +0000
ROA not after:            Sat 05 Dec 2026 06:20:28 +0000
asID:                     142403
IP address blocks:        154.83.12.0/24 maxlen: 24
                          154.83.13.0/24 maxlen: 24
                          154.83.14.0/24 maxlen: 24
                          154.83.15.0/24 maxlen: 24
                          154.83.16.0/24 maxlen: 24
                          154.83.17.0/24 maxlen: 24
                          154.92.14.0/24 maxlen: 24
                          154.92.15.0/24 maxlen: 24
                          154.92.16.0/24 maxlen: 24
                          154.92.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 12:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124348 (0x1e5bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  6 06:20:28 2026 GMT
            Not After : Dec  5 06:20:28 2026 GMT
        Subject: CN=6a9d0630-8f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:05:93:ec:bc:fd:a4:1a:82:e3:f8:13:cc:17:
                    f1:a9:b1:f7:6f:42:a5:06:25:6d:f1:c4:77:db:9d:
                    07:b9:4f:ce:48:cd:e7:4e:b6:fc:4e:01:29:c8:47:
                    00:04:ff:c4:81:36:af:eb:66:dd:9c:3b:64:1b:ac:
                    3d:4f:e9:5e:94:b9:78:11:10:dc:b8:04:0a:3d:45:
                    f8:ea:34:24:86:52:40:f1:88:9e:7a:ce:2a:54:3a:
                    93:6b:a2:ee:e8:cf:83:f8:2d:c6:62:9d:3c:64:75:
                    8f:47:88:43:3a:ed:36:e9:e2:09:7f:63:f3:9c:2f:
                    98:b9:6f:5c:a6:d9:3a:d7:4c:1f:c8:f8:e9:82:8e:
                    ca:de:54:35:b9:4e:79:75:9d:28:7f:d9:11:cf:00:
                    1d:3a:9c:d6:aa:54:48:b8:06:c1:d0:6a:04:72:1d:
                    e7:cb:90:36:ac:b6:b7:51:1a:42:3b:d2:56:0c:bc:
                    3c:e4:f1:79:f7:94:4b:48:7c:f1:15:6c:06:ce:59:
                    56:eb:10:38:7d:ee:e5:d2:aa:1c:4d:f9:ef:a6:78:
                    8a:bd:91:1b:c8:52:19:18:96:d1:c6:dc:82:d1:6e:
                    45:9f:5a:17:a9:76:d3:99:f5:a4:dd:dc:69:1d:9f:
                    ae:69:cf:a8:0c:97:21:d8:c0:64:d1:6b:be:5c:9e:
                    1a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8D:0E:E9:6B:99:98:64:40:F3:BC:E1:A5:BD:48:01:A1:FC:2A:94
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FE255A6A9BB11F19F6849B3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.12.0-154.83.17.255
                  154.92.14.0-154.92.17.255

    Signature Algorithm: sha256WithRSAEncryption
         bf:db:06:ce:fa:a6:f8:56:a1:b8:a7:b8:08:ff:51:18:d4:68:
         09:cc:a5:3f:d4:e3:03:84:8a:a3:e1:2f:85:ca:2a:40:9b:92:
         01:a1:9e:7a:d8:a9:16:b4:06:6f:15:a9:21:71:78:67:22:1d:
         d2:fc:39:0c:4c:f6:9d:c6:0f:77:ff:36:98:b7:41:a6:c3:35:
         c4:12:b6:5d:92:84:85:86:40:b3:cd:87:1d:6c:21:98:d5:85:
         05:05:33:e3:ff:03:42:49:8a:4d:e8:d6:9c:e6:f8:9b:bb:bb:
         36:d2:7c:56:18:bb:38:e1:66:f5:d9:cb:69:f3:5b:07:8a:e8:
         a5:b1:3f:b3:30:91:5e:d8:42:d4:2a:c8:3f:fa:a8:8c:35:92:
         f8:3b:bd:72:04:a4:97:a7:0b:c7:50:7e:28:ac:0e:67:ca:7a:
         ce:6a:32:64:d6:2d:4a:63:2c:92:b8:ea:ec:df:8d:70:6a:65:
         8b:fd:67:4a:4f:3d:27:fc:b2:78:ba:c3:93:d9:59:fa:05:ba:
         90:6d:5a:1b:32:de:3e:a3:9e:7c:42:9f:b7:67:bc:a7:b9:cb:
         cd:bd:30:e2:c4:b7:cb:c9:21:87:13:61:4f:89:2b:a9:0c:82:
         b6:33:b6:2b:89:20:8c:17:8b:da:d0:cc:4a:bd:c6:48:93:3a:
         84:ca:cf:52
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----