Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EB2F39CD50611F1BEDDF5ADCE1D38B0.roa
File:                     3EB2F39CD50611F1BEDDF5ADCE1D38B0.roa (raw, json)
Hash identifier:          gN9dCmKvIgTtZ2BCWuW+8HpxdX+daBOVmHQogJS8ql4=
Subject key identifier:   34:16:70:04:D7:97:64:B2:24:DB:88:2B:30:8E:13:9E:D7:14:57:FB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01F1BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EB2F39CD50611F1BEDDF5ADCE1D38B0.roa
Signing time:             Sat 31 Oct 2026 08:37:03 +0000
ROA not before:           Sat 31 Oct 2026 08:36:58 +0000
ROA not after:            Mon 07 Dec 2026 08:36:58 +0000
asID:                     44559
IP address blocks:        154.209.208.0/24 maxlen: 24 (superfluous maxlen)
                          154.209.209.0/24 maxlen: 24 (superfluous maxlen)
                          154.209.210.0/24 maxlen: 24 (superfluous maxlen)
                          154.209.211.0/24 maxlen: 24 (superfluous maxlen)
                          154.209.212.0/24 maxlen: 24 (superfluous maxlen)
                          154.209.213.0/24 maxlen: 24 (superfluous maxlen)
                          154.209.214.0/24 maxlen: 24 (superfluous maxlen)
                          154.209.215.0/24 maxlen: 24 (superfluous maxlen)
                          154.209.216.0/24 maxlen: 24 (superfluous maxlen)
                          154.209.217.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127422 (0x1f1be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 31 08:36:58 2026 GMT
            Not After : Dec  7 08:36:58 2026 GMT
        Subject: CN=6ae5a8af-9237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:46:d9:fe:58:73:88:58:7d:80:76:27:3a:83:
                    c7:a0:21:42:ba:d2:54:1d:13:83:8b:2c:0e:25:6b:
                    44:38:6f:8c:9b:70:9a:cd:be:de:23:81:c4:db:ed:
                    8a:2d:26:1b:d1:dc:44:b2:37:3d:21:20:67:c0:1a:
                    59:ab:a9:ba:26:4e:e8:e6:73:15:f8:95:79:b6:e8:
                    09:b7:86:6e:f3:7b:d8:3a:d4:24:f0:c5:0b:b0:34:
                    4c:ba:fa:01:45:2f:5e:31:c4:d6:59:b0:fd:0c:7b:
                    ac:5e:35:73:a2:bd:a0:a4:8f:4c:5a:3e:c8:c4:af:
                    7d:b5:a0:12:da:18:7f:5e:1e:b2:92:4e:ae:db:33:
                    17:61:9e:14:74:79:95:61:f5:2c:a8:fc:c2:54:39:
                    c9:e7:0a:d7:be:6f:81:66:21:63:56:1d:87:6c:d0:
                    ea:fd:5d:74:28:31:6d:fc:dc:1a:c2:da:1a:9b:4c:
                    88:72:fe:d6:a4:dc:be:3f:e9:0a:40:4c:c1:4a:e3:
                    56:1c:a8:0b:5d:5b:a7:a4:74:22:52:5a:7b:6f:02:
                    5a:36:6f:11:95:2d:3f:7a:3b:8e:76:25:fe:8d:02:
                    90:d5:e7:45:24:18:4f:e3:c7:a1:fe:67:1a:99:2b:
                    28:fd:2e:50:7c:0a:7f:cf:70:00:83:d9:73:a3:15:
                    e0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:16:70:04:D7:97:64:B2:24:DB:88:2B:30:8E:13:9E:D7:14:57:FB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EB2F39CD50611F1BEDDF5ADCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.209.208.0-154.209.217.255

    Signature Algorithm: sha256WithRSAEncryption
         68:f5:db:ce:17:f9:d5:00:70:45:dc:80:fd:c7:ed:80:20:cd:
         42:ab:36:a8:b3:5f:fd:df:6f:38:09:78:ed:a9:c3:3f:46:b1:
         45:cf:96:ba:02:04:4a:95:22:42:7c:fa:9c:ab:48:3e:72:43:
         c1:32:34:a4:cf:99:c6:2a:6b:66:cd:f6:ce:c2:15:dd:c2:c3:
         39:2a:e8:6d:19:65:d4:a4:cb:a0:f6:76:66:07:36:cf:dd:84:
         a1:7b:35:f2:fe:02:42:f7:39:bb:79:81:b7:64:89:5c:1f:b8:
         f4:20:59:fc:8a:af:0a:b9:d6:0b:c7:c1:a7:8b:59:eb:a4:dd:
         f0:3d:4e:9e:99:d3:0a:7c:ea:34:35:5e:ba:d6:a0:3b:5f:3c:
         c7:3c:eb:61:12:0e:9d:b5:29:80:1c:18:16:96:1a:92:a2:23:
         ef:de:72:bf:47:f4:ca:68:dc:df:65:c9:e9:7a:b9:d6:a9:ab:
         8a:60:cf:b7:fd:ba:01:da:81:d0:b5:6a:21:40:0a:d0:c0:57:
         80:0a:b4:f0:1d:36:a1:1c:4f:2f:d1:08:d0:21:52:5f:99:f6:
         12:56:18:95:e9:da:b2:43:ed:93:1e:8b:1d:3e:9a:2a:9b:f0:
         a9:65:ae:ac:0e:44:00:d4:90:5d:61:2c:eb:51:e8:86:71:35:
         3d:1c:1e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----