Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/875DCD6CB68211F19EC2C0B6CE1D38B0.roa
File:                     875DCD6CB68211F19EC2C0B6CE1D38B0.roa (raw, json)
Hash identifier:          pmOwYeP+IcpjnrrkNMgITcI+C54jwaur90pJthUV9rk=
Subject key identifier:   59:13:A0:7D:F5:8A:E5:45:14:08:B4:AE:33:A9:A7:0F:7C:1B:B8:C5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EA2C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/875DCD6CB68211F19EC2C0B6CE1D38B0.roa
Signing time:             Tue 22 Sep 2026 12:38:36 +0000
ROA not before:           Tue 22 Sep 2026 12:38:32 +0000
ROA not after:            Sat 07 Nov 2026 12:38:32 +0000
asID:                     9304
IP address blocks:        154.89.132.0/24 maxlen: 24
                          154.90.65.0/24 maxlen: 24
                          154.90.67.0/24 maxlen: 24
                          154.90.128.0/24 maxlen: 24
                          154.90.134.0/24 maxlen: 24
                          154.90.136.0/24 maxlen: 24
                          154.90.137.0/24 maxlen: 24
                          154.90.140.0/24 maxlen: 24
                          154.90.189.0/24 maxlen: 24
                          154.92.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 11:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125484 (0x1ea2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 22 12:38:32 2026 GMT
            Not After : Nov  7 12:38:32 2026 GMT
        Subject: CN=6ab276cc-07b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a8:c2:3c:8d:f8:1f:b3:d0:0e:d5:49:38:76:
                    77:f7:2b:b5:8a:9e:5e:07:c0:89:0d:76:d9:30:bc:
                    f6:e8:f8:a4:76:ba:c2:ab:65:03:e4:3d:4f:75:95:
                    53:c7:4c:6b:79:37:9d:86:48:c1:d4:4d:91:4f:64:
                    2f:cf:ea:ea:b9:d1:3e:6a:f5:7d:6e:cc:47:05:5e:
                    7f:04:b5:ac:4d:b0:f6:11:36:5f:70:fa:a5:e0:29:
                    c8:f8:f4:b9:5b:51:ba:37:a7:14:3e:d1:f5:3a:eb:
                    60:21:fe:e0:55:e3:85:f7:87:f2:43:1f:8e:49:44:
                    e7:85:79:40:3a:21:f7:72:28:6b:6a:47:4b:ca:04:
                    74:d5:55:69:f8:0c:b6:39:fa:c7:37:4c:9a:dc:b2:
                    59:54:3b:3f:30:46:bf:62:b2:47:fc:76:4e:de:d9:
                    30:da:49:95:2d:33:5c:11:42:ee:0e:23:ae:e8:30:
                    e7:77:75:83:2f:ac:49:b0:5f:2d:89:1a:d0:99:0f:
                    1d:53:f9:e6:b7:9f:3c:32:bc:55:59:69:ae:76:06:
                    db:5f:c8:8b:35:2a:ee:ae:f5:c9:96:80:05:23:c7:
                    2c:51:8d:24:a2:0d:d6:99:1f:4e:88:1e:d7:c8:f1:
                    7a:ab:47:2c:e0:3d:a8:5a:d4:f4:a6:bd:18:14:55:
                    8e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:13:A0:7D:F5:8A:E5:45:14:08:B4:AE:33:A9:A7:0F:7C:1B:B8:C5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/875DCD6CB68211F19EC2C0B6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.132.0/24
                  154.90.65.0/24
                  154.90.67.0/24
                  154.90.128.0/24
                  154.90.134.0/24
                  154.90.136.0/23
                  154.90.140.0/24
                  154.90.189.0/24
                  154.92.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d1:c3:92:fb:0a:cb:d8:d4:35:42:e2:44:48:2c:8a:ec:bb:5f:
         67:cf:09:03:b3:59:a7:f5:d2:33:3d:6f:4b:2b:6a:50:7d:7e:
         6d:1f:5f:c6:c2:fc:2e:5c:14:e5:d4:90:ff:48:3d:43:76:c0:
         9b:ef:38:d0:26:78:68:ba:40:5b:96:af:90:be:01:77:5f:73:
         20:4f:02:48:84:17:18:be:d1:4a:35:d7:79:d4:8d:4a:f1:a2:
         12:d0:e2:9b:b1:99:ff:3f:7b:75:aa:db:a6:4d:21:c1:ad:3c:
         ce:2d:56:68:98:f2:78:89:20:b4:ad:5a:51:a1:92:b6:43:d7:
         0f:0d:46:8f:73:0a:48:b6:fc:c2:98:f6:2d:03:bb:e8:42:56:
         99:88:27:42:08:94:80:10:e2:30:07:cf:64:af:d9:9a:be:b8:
         5a:af:8b:3a:b5:2f:bd:90:f8:7a:f0:66:96:69:ee:98:01:1c:
         c2:9b:13:8f:7a:05:08:77:aa:54:b7:e9:f3:36:ed:5d:dd:91:
         6f:33:01:af:c6:5c:fa:f9:bc:29:b3:fa:67:4f:ea:66:c4:be:
         4c:25:0c:55:12:57:88:ca:9d:24:2d:32:8f:39:44:93:21:3c:
         b0:a3:ba:33:25:ec:a6:0e:a5:9b:c0:b9:ab:4a:ff:e7:af:fd:
         bb:ac:3f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----