Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/260EBAB8B4E711F1A8A434B9CE1D38B0.roa
File:                     260EBAB8B4E711F1A8A434B9CE1D38B0.roa (raw, json)
Hash identifier:          Xotb5hZOwlq2CmMx+zYZ1Pcd/QO2OWEYwLq9o1VlZk0=
Subject key identifier:   97:AD:1C:20:6E:C1:60:44:17:A3:4B:83:4B:36:78:E1:4E:88:7C:58
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E923
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/260EBAB8B4E711F1A8A434B9CE1D38B0.roa
Signing time:             Sun 20 Sep 2026 11:33:50 +0000
ROA not before:           Sun 20 Sep 2026 11:33:46 +0000
ROA not after:            Tue 27 Oct 2026 11:33:46 +0000
asID:                     154177
IP address blocks:        154.205.136.0/23 maxlen: 24
                          154.205.138.0/24 maxlen: 24
                          154.205.140.0/24 maxlen: 24
                          154.205.141.0/24 maxlen: 24
                          154.205.142.0/23 maxlen: 24
                          154.205.148.0/24 maxlen: 24
                          154.205.149.0/24 maxlen: 24
                          154.205.150.0/24 maxlen: 24
                          154.205.155.0/24 maxlen: 24
                          154.205.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 10:05:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125219 (0x1e923)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 20 11:33:46 2026 GMT
            Not After : Oct 27 11:33:46 2026 GMT
        Subject: CN=6aafc49e-5b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:13:6e:11:51:c4:d5:24:77:5c:08:23:0d:01:
                    79:c9:51:cf:49:4c:cb:69:98:1c:50:75:14:3b:0e:
                    06:96:36:6f:1d:a0:56:eb:09:45:ed:06:7c:50:cb:
                    75:1a:25:56:8b:26:4b:75:7b:21:d5:1b:9b:6c:aa:
                    80:bb:17:47:36:83:c5:55:17:a4:89:56:a9:95:24:
                    1c:71:62:66:4e:10:de:4e:ea:fc:39:2d:e9:72:f9:
                    7a:ab:e4:b3:0b:bf:35:46:51:a1:1e:57:9e:22:66:
                    01:dc:96:aa:56:a9:ab:d8:8f:ed:dd:7b:c0:03:61:
                    de:be:05:3b:5a:92:a0:e4:f1:cf:eb:cc:97:85:d3:
                    be:cf:5a:a6:91:39:50:69:16:62:d6:e4:77:93:56:
                    33:2c:d0:f5:e0:f1:29:ff:3b:36:b6:6e:f8:9c:f2:
                    25:9a:b4:f3:dc:82:d3:25:af:f8:65:ef:d4:83:e3:
                    4a:15:68:92:3c:a4:9f:85:95:2c:62:ae:5b:9d:6b:
                    b2:cf:d3:ba:76:c9:32:96:f3:88:1e:84:7c:2c:86:
                    11:68:24:95:fc:13:13:6e:87:b1:af:fc:13:8b:3b:
                    e0:45:b1:e9:5c:4e:f3:08:d2:cf:83:16:86:db:65:
                    47:b4:77:b5:ab:5f:0c:e3:6c:90:1c:0f:d4:d6:78:
                    f4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AD:1C:20:6E:C1:60:44:17:A3:4B:83:4B:36:78:E1:4E:88:7C:58
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/260EBAB8B4E711F1A8A434B9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.136.0-154.205.138.255
                  154.205.140.0/22
                  154.205.148.0-154.205.150.255
                  154.205.155.0/24
                  154.205.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:ba:8f:1b:0f:ab:1e:38:bf:60:ca:63:f7:34:03:17:53:9b:
         88:de:21:06:d0:87:2c:6d:47:24:0c:0f:ad:63:5a:9d:84:a8:
         91:4c:29:58:f9:10:06:ed:6f:07:32:cd:e4:5b:3e:a7:b0:60:
         13:51:b4:6b:2f:99:68:ae:d9:d4:9c:b8:c5:cd:86:79:7c:ef:
         6d:83:c1:93:a9:aa:c3:ae:8a:2a:b1:24:fd:f1:e6:fb:c4:46:
         dc:d7:3e:ec:58:47:06:5a:4f:31:49:cd:1f:74:24:d8:7b:62:
         f9:59:89:7e:46:39:9b:f6:9b:fd:cb:bc:67:90:7c:a8:31:48:
         3f:b4:2c:7d:b1:c0:3f:16:1d:4e:ff:6e:ee:05:db:a7:aa:0e:
         7b:f4:94:89:ab:e0:ea:86:c2:55:a1:cf:de:f3:ec:b8:f9:c2:
         87:05:4f:59:63:a1:ed:ad:c6:0a:dc:0f:79:3f:58:9e:2f:8c:
         f9:b0:f7:fe:71:92:1a:f4:a5:b2:f1:37:99:24:85:2f:9f:55:
         93:db:0b:a6:6b:46:92:be:b5:79:d0:98:92:1e:0c:16:0a:12:
         f8:ed:ca:df:c9:8a:06:da:d3:87:1a:2f:3b:46:2c:e0:00:d3:
         43:32:d0:68:c0:7d:5c:58:82:2e:f7:48:c9:4b:5d:67:2d:a4:
         56:df:e3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----