Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1073E392B5B711F1ADC04A07CF1D38B0.roa
File:                     1073E392B5B711F1ADC04A07CF1D38B0.roa (raw, json)
Hash identifier:          rbz78HSE7SLonTi3DUkuRwcxRho4LmKNe/Sh5826syU=
Subject key identifier:   DD:98:8D:D2:8D:6B:7A:64:3C:CA:0F:21:9A:DB:6B:ED:3E:C1:96:37
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E9C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1073E392B5B711F1ADC04A07CF1D38B0.roa
Signing time:             Mon 21 Sep 2026 12:22:09 +0000
ROA not before:           Mon 21 Sep 2026 12:22:05 +0000
ROA not after:            Thu 20 Sep 2029 12:22:05 +0000
asID:                     17561
IP address blocks:        154.196.192.0/24 maxlen: 24
                          154.196.193.0/24 maxlen: 24
                          154.196.194.0/24 maxlen: 24
                          154.196.195.0/24 maxlen: 24
                          154.196.196.0/24 maxlen: 24
                          154.196.197.0/24 maxlen: 24
                          154.196.198.0/24 maxlen: 24
                          154.196.199.0/24 maxlen: 24
                          154.196.200.0/24 maxlen: 24
                          154.196.201.0/24 maxlen: 24
                          154.196.202.0/24 maxlen: 24
                          154.196.203.0/24 maxlen: 24
                          154.196.204.0/24 maxlen: 24
                          154.196.205.0/24 maxlen: 24
                          154.196.206.0/24 maxlen: 24
                          154.196.207.0/24 maxlen: 24
                          154.211.192.0/24 maxlen: 24
                          154.211.193.0/24 maxlen: 24
                          154.211.194.0/24 maxlen: 24
                          154.216.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125382 (0x1e9c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 21 12:22:05 2026 GMT
            Not After : Sep 20 12:22:05 2029 GMT
        Subject: CN=6ab12171-0e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:95:1b:7c:b5:0a:2a:04:57:b9:47:3a:39:e3:
                    4b:7f:6a:ae:f0:89:b2:33:b8:fc:03:3d:82:db:e4:
                    d2:c1:76:35:89:d5:b4:76:bd:37:81:b7:86:a4:bc:
                    22:6b:54:bf:a0:71:3d:b9:37:fe:5c:4e:46:40:24:
                    b4:ff:06:f2:ce:a6:0f:cf:30:af:0f:ad:a5:5b:8d:
                    36:8b:78:06:b8:88:a3:ac:cd:eb:65:28:66:de:66:
                    07:f8:1a:10:a0:1a:f1:71:38:83:b9:62:2c:dc:2a:
                    4d:1b:a4:7c:85:50:9b:5e:8f:aa:ec:21:01:fd:d1:
                    f2:bc:c8:f8:78:d9:54:aa:29:f0:c1:ab:fe:2e:57:
                    d3:5d:b8:53:1e:17:64:e3:4e:5c:f9:9e:d4:0b:8c:
                    3f:14:02:a3:a8:30:6a:ad:56:42:e2:35:dc:4d:e4:
                    0c:83:e9:d6:4c:69:47:81:01:13:12:55:76:f7:bd:
                    55:3e:41:ee:9e:fe:1b:e9:ff:58:45:d8:91:a2:4e:
                    9e:9e:70:3c:eb:78:00:84:eb:00:1e:a9:02:e8:e5:
                    aa:aa:0d:bc:36:2c:90:75:c0:5a:65:62:b3:93:c4:
                    56:aa:b8:db:5e:5e:79:82:cb:41:0b:80:c0:e1:b3:
                    5b:76:1b:3a:ba:dd:64:75:37:2c:bb:23:2d:8e:5d:
                    a0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:98:8D:D2:8D:6B:7A:64:3C:CA:0F:21:9A:DB:6B:ED:3E:C1:96:37
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1073E392B5B711F1ADC04A07CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.192.0/20
                  154.211.192.0-154.211.194.255
                  154.216.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:b9:c3:dc:62:00:cf:3e:5a:2a:d2:1e:4d:dd:ee:92:cd:0d:
         66:80:4b:9b:5f:00:2c:00:c8:16:ae:fb:31:58:ee:92:a8:a1:
         f1:06:26:99:eb:31:fa:51:31:36:2b:46:e6:ee:4f:d4:8d:58:
         2c:6f:87:6e:cc:36:c6:88:4d:2e:72:83:df:2a:7c:5c:57:47:
         23:d8:27:db:bc:0b:1a:68:e4:76:7a:c0:94:3d:09:15:82:c0:
         06:ed:f2:d7:dc:1e:bb:16:7a:8c:b5:a5:1b:4d:ef:b2:3e:8e:
         f0:27:47:dc:bf:99:37:07:f4:ae:5d:b8:62:34:27:e5:5e:6c:
         44:83:1e:e5:08:86:d1:d2:56:53:c1:11:ae:4f:bb:f6:64:32:
         8e:4c:01:14:b0:7b:b4:ef:5d:16:77:a7:30:91:b0:59:25:d0:
         00:fa:df:6a:94:d9:4c:5e:23:77:b4:17:c3:04:79:1a:fa:2a:
         d3:0e:6b:4d:56:bf:e5:c8:77:e4:29:95:6d:a6:35:9f:94:f9:
         cb:5b:47:e0:9d:13:b5:28:71:78:0d:86:53:3c:42:29:b4:02:
         de:9e:c8:0a:2d:d0:25:c9:d4:b6:98:8a:17:1d:35:d7:f3:0b:
         1e:3a:b2:29:46:f7:4a:b5:16:8d:cd:1f:21:9f:a6:07:86:9d:
         3f:5b:4b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----