Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E5D8C96B5BA11F19E61FE18CF1D38B0.roa
File:                     4E5D8C96B5BA11F19E61FE18CF1D38B0.roa (raw, json)
Hash identifier:          yWjTeU50HCeuHbU3RmUBvLTlunWM2Fmy9KI7q5ldXWE=
Subject key identifier:   7D:00:7F:56:C4:70:6E:A3:C4:1E:CC:77:39:FA:1D:0D:43:62:F0:32
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E9CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E5D8C96B5BA11F19E61FE18CF1D38B0.roa
Signing time:             Mon 21 Sep 2026 12:45:21 +0000
ROA not before:           Mon 21 Sep 2026 12:45:17 +0000
ROA not after:            Thu 20 Sep 2029 12:45:17 +0000
asID:                     17561
IP address blocks:        154.199.83.0/24 maxlen: 24
                          154.199.84.0/24 maxlen: 24
                          154.199.85.0/24 maxlen: 24
                          154.199.86.0/24 maxlen: 24
                          154.199.87.0/24 maxlen: 24
                          154.199.88.0/24 maxlen: 24
                          154.199.89.0/24 maxlen: 24
                          154.199.90.0/24 maxlen: 24
                          154.199.91.0/24 maxlen: 24
                          154.199.92.0/24 maxlen: 24
                          154.199.93.0/24 maxlen: 24
                          154.199.94.0/24 maxlen: 24
                          154.199.95.0/24 maxlen: 24
                          154.207.145.0/24 maxlen: 24
                          154.207.146.0/24 maxlen: 24
                          154.207.148.0/24 maxlen: 24
                          154.207.149.0/24 maxlen: 24
                          154.207.150.0/24 maxlen: 24
                          154.207.152.0/24 maxlen: 24
                          154.207.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125388 (0x1e9cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 21 12:45:17 2026 GMT
            Not After : Sep 20 12:45:17 2029 GMT
        Subject: CN=6ab126e1-6c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c6:d7:56:ef:e1:cd:40:90:ac:a6:86:bf:13:
                    b6:1d:e7:ed:9d:fc:c8:61:17:13:f3:60:37:3f:0f:
                    ed:0a:09:16:5d:5f:bf:5b:a2:c8:48:9e:8c:c8:d1:
                    96:18:e0:31:cf:32:84:23:75:97:44:ac:d7:19:f4:
                    d0:12:6e:53:76:83:81:83:b0:60:3e:b7:3f:52:e4:
                    4e:fb:ca:1b:24:71:6f:1b:4e:94:2e:2a:17:ea:57:
                    6b:e2:2b:db:6c:b1:78:27:6c:dd:c0:34:53:ec:15:
                    37:18:0b:0e:e9:f3:27:8b:cd:0c:75:9a:d0:18:c4:
                    8e:c8:2f:6e:0d:fd:bb:6e:0b:7e:83:4b:40:11:de:
                    67:a6:73:5a:b9:a7:a3:7e:18:3c:fd:e6:8c:d2:91:
                    26:57:5c:53:18:2d:16:b2:ef:22:6e:bb:ac:73:b2:
                    25:49:35:0f:ee:62:09:8b:fa:15:9a:73:37:e4:36:
                    db:6f:80:79:31:eb:98:91:30:a1:cd:6c:7a:56:0e:
                    96:43:af:0a:89:10:34:57:6d:0b:8d:f2:57:45:3d:
                    6b:34:2f:51:fc:f3:85:27:46:34:74:26:cb:16:0e:
                    dd:60:73:06:c3:b4:0b:e4:7a:7c:b1:94:d7:84:92:
                    fe:eb:a3:95:77:a3:5d:b9:50:a8:f6:51:90:27:ab:
                    65:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:00:7F:56:C4:70:6E:A3:C4:1E:CC:77:39:FA:1D:0D:43:62:F0:32
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E5D8C96B5BA11F19E61FE18CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.199.83.0-154.199.95.255
                  154.207.145.0-154.207.146.255
                  154.207.148.0-154.207.150.255
                  154.207.152.0/24
                  154.207.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:74:59:14:db:52:e8:2d:4d:cf:f3:ef:3b:df:b6:b1:c2:f7:
         06:76:47:18:18:43:a5:7e:2b:2d:27:fb:cb:65:0d:63:f5:c7:
         23:8b:81:82:b3:8f:28:af:90:be:27:50:a9:c1:65:a2:04:11:
         f4:94:03:d9:99:a7:b5:e0:be:ed:b5:eb:8d:8b:61:18:62:2d:
         42:7d:b0:d8:a6:fc:45:88:48:1b:97:f3:87:22:a2:6c:f9:57:
         3e:1d:c5:96:e5:e1:ca:f3:30:bc:8a:ba:b1:72:bd:23:87:f2:
         3a:54:f3:37:94:ec:c3:e1:81:54:cc:be:dc:13:ae:36:f4:a5:
         7c:7a:d1:da:c0:d8:58:0c:6a:3f:1b:6d:d8:75:a4:71:21:ea:
         b3:ca:eb:89:38:81:e7:4a:77:c5:a3:9e:7b:fe:ce:22:5e:31:
         e0:60:51:48:b1:b8:03:5f:64:19:4a:14:2a:41:a6:a6:0f:c1:
         d2:9a:84:be:6d:d3:1e:b5:21:aa:52:0c:d2:b9:9f:60:42:2b:
         ff:44:db:03:04:63:c6:4e:f6:de:e0:f6:27:de:10:f0:bc:13:
         fc:cd:e1:6c:ce:d9:a4:79:b2:77:da:cd:77:eb:db:93:9a:44:
         2a:26:0c:52:e3:24:ec:22:3c:72:44:59:0a:7a:80:25:81:47:
         53:36:7a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----