Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52F2D01ECC6611F18CC3FBA1CE1D38B0.roa
File:                     52F2D01ECC6611F18CC3FBA1CE1D38B0.roa (raw, json)
Hash identifier:          6tM1Se/KQj8YksfbNPHMCQJPQuAGRu7KdYekQ+SnrEc=
Subject key identifier:   82:B0:C3:23:F3:A2:A5:29:92:4D:FE:0F:FC:89:58:06:B6:4D:65:6F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EF33
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52F2D01ECC6611F18CC3FBA1CE1D38B0.roa
Signing time:             Tue 20 Oct 2026 09:12:08 +0000
ROA not before:           Tue 20 Oct 2026 09:12:03 +0000
ROA not after:            Thu 26 Nov 2026 09:12:03 +0000
asID:                     138915
IP address blocks:        154.203.128.0/23 maxlen: 24
                          154.203.130.0/23 maxlen: 24
                          154.203.132.0/24 maxlen: 24 (superfluous maxlen)
                          154.203.133.0/24 maxlen: 24 (superfluous maxlen)
                          154.203.134.0/24 maxlen: 24 (superfluous maxlen)
                          154.203.136.0/24 maxlen: 24 (superfluous maxlen)
                          154.203.165.0/24 maxlen: 24 (superfluous maxlen)
                          154.203.178.0/24 maxlen: 24 (superfluous maxlen)
                          154.203.181.0/24 maxlen: 24 (superfluous maxlen)
                          154.206.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126771 (0x1ef33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 20 09:12:03 2026 GMT
            Not After : Nov 26 09:12:03 2026 GMT
        Subject: CN=6ad73068-e715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cb:9b:d9:b8:4a:94:05:b4:73:ca:a8:10:5d:
                    b6:d4:57:76:8c:7f:a2:ec:53:ad:e0:46:f0:1d:1a:
                    9e:9f:c0:f3:8e:55:55:b5:f6:4b:c1:3f:f4:22:fd:
                    75:1a:35:00:6e:0a:4d:5b:5c:42:a7:66:6d:3d:39:
                    6d:a5:a1:93:ec:9a:8f:11:40:05:1c:1f:73:4e:1b:
                    a7:3a:bb:72:c4:ed:ec:99:42:f8:d5:0f:a1:be:16:
                    30:09:f9:2e:b0:dc:95:cd:2e:14:ad:bd:22:b6:cb:
                    b8:f3:67:a6:1a:f3:40:2c:ca:a1:cd:a5:94:e5:14:
                    cb:9c:27:b7:e3:35:53:af:34:6e:24:42:6c:ee:c7:
                    45:6c:ec:6b:95:7e:10:be:21:72:ee:47:28:72:c7:
                    7a:8c:70:84:20:60:c9:3f:a5:d6:b4:64:5f:f4:d2:
                    4f:c0:0c:45:06:bc:04:0c:01:bd:e7:b6:9e:06:6d:
                    7a:57:37:49:ff:95:de:40:e8:7b:8d:33:3e:31:65:
                    0f:07:30:47:2c:19:c8:ba:f3:53:ff:55:8f:1d:8e:
                    ed:a4:de:5e:5b:79:34:3c:7d:36:91:a2:48:c7:e1:
                    28:99:73:78:e0:bf:f5:8a:26:78:85:21:fe:df:66:
                    e5:14:e2:77:50:32:25:25:2c:1b:38:71:93:b2:43:
                    bf:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B0:C3:23:F3:A2:A5:29:92:4D:FE:0F:FC:89:58:06:B6:4D:65:6F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52F2D01ECC6611F18CC3FBA1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.128.0-154.203.134.255
                  154.203.136.0/24
                  154.203.165.0/24
                  154.203.178.0/24
                  154.203.181.0/24
                  154.206.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:0a:39:b1:12:50:97:ea:ba:59:77:dc:89:5c:18:37:9b:2d:
         22:90:41:d9:d0:73:5c:d3:3a:ff:70:5c:06:16:d5:27:d2:a7:
         c3:1d:25:73:92:03:0a:74:05:fb:93:9e:e6:86:59:f8:a3:85:
         87:be:83:d2:c9:a4:02:35:08:bd:a1:38:bd:ca:ea:e5:e4:db:
         44:e5:6a:0a:72:88:d1:a5:31:28:db:12:93:00:a0:c0:7a:4e:
         a6:98:12:57:d8:2c:5d:eb:dc:35:92:46:dc:59:d3:28:b7:37:
         07:0e:77:d7:8f:c0:fd:eb:78:8c:34:15:f8:38:bd:3b:e1:f3:
         ed:69:67:37:38:c9:c2:93:a7:5e:00:08:2f:3d:a9:8b:23:56:
         a3:70:2a:f7:ed:89:43:3d:f2:e0:3c:7c:bb:8a:c0:33:c8:91:
         82:f4:77:e9:3d:50:65:15:dc:15:bf:a1:9b:3d:ac:a0:b9:5a:
         2d:df:15:b9:0b:d7:7f:e5:26:d0:f5:21:8c:7a:9a:cc:3c:1d:
         fd:9a:6a:b1:fe:e7:62:37:33:59:b0:ed:1b:78:53:ca:91:44:
         6f:58:a8:c7:de:a6:37:fd:b9:bd:e0:87:af:d0:01:af:df:d1:
         c8:a9:72:f5:12:27:37:f4:6a:62:e1:b7:67:69:45:12:3a:0f:
         be:ee:76:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----