Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89502884B5A311F1BC4E0809CF1D38B0.roa
File:                     89502884B5A311F1BC4E0809CF1D38B0.roa (raw, json)
Hash identifier:          jT3xmLkzfkmVFuxNZdoaAkre+7o8hpZXZNjqKaelgk0=
Subject key identifier:   0A:97:DF:A8:83:D7:2A:E1:B5:D7:40:19:6B:1D:FE:52:F4:9B:D0:08
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E990
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89502884B5A311F1BC4E0809CF1D38B0.roa
Signing time:             Mon 21 Sep 2026 10:02:22 +0000
ROA not before:           Mon 21 Sep 2026 10:02:18 +0000
ROA not after:            Tue 05 Jan 2027 10:02:18 +0000
asID:                     18229
IP address blocks:        154.210.186.0/24 maxlen: 24
                          154.210.187.0/24 maxlen: 24
                          154.210.188.0/24 maxlen: 24
                          154.210.189.0/24 maxlen: 24
                          154.210.190.0/24 maxlen: 24
                          154.210.191.0/24 maxlen: 24
                          154.210.192.0/24 maxlen: 24
                          154.210.193.0/24 maxlen: 24
                          154.210.194.0/24 maxlen: 24
                          154.210.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125328 (0x1e990)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 21 10:02:18 2026 GMT
            Not After : Jan  5 10:02:18 2027 GMT
        Subject: CN=6ab100ad-9868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:61:38:24:e7:fe:ab:5c:02:fb:17:0b:6e:e7:
                    ae:bc:61:b6:a0:b3:a3:27:55:a0:43:de:a9:a3:dd:
                    84:af:c4:7e:2b:bd:1e:a6:5c:d2:f7:8c:10:53:dc:
                    a3:98:c6:46:e8:ba:3b:8b:77:4d:3f:69:be:86:76:
                    53:75:6a:33:bd:7d:86:7a:65:96:ea:00:5f:44:94:
                    78:11:b2:aa:ce:6c:b9:03:65:20:0d:17:77:63:2f:
                    11:b2:63:79:58:84:cc:a4:92:f5:35:6a:9b:f5:4d:
                    bc:40:6b:58:5c:8a:62:f3:6d:62:c2:31:2f:3f:0f:
                    3f:00:6f:82:1d:d1:d5:ae:99:d7:c1:d5:60:b4:09:
                    94:40:11:26:4b:ad:69:e7:06:44:79:77:9f:ef:a7:
                    c2:1c:54:79:f6:24:4d:f3:bd:ec:4b:ba:d7:c7:3d:
                    12:f8:f7:ec:f5:e0:6d:0a:95:86:96:c2:41:56:21:
                    b1:38:9b:7e:f0:e1:f8:ea:76:15:89:ee:32:06:f8:
                    b9:e1:1e:30:6e:a0:b7:1a:90:ef:96:6f:5f:77:0a:
                    d9:40:81:98:a6:6d:8d:77:19:ca:0c:2f:c9:b3:d0:
                    5e:73:36:95:9a:57:b8:8a:87:67:ce:55:83:14:1a:
                    21:61:46:87:d3:b2:8c:87:9d:38:13:b5:4e:ea:9b:
                    cf:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:97:DF:A8:83:D7:2A:E1:B5:D7:40:19:6B:1D:FE:52:F4:9B:D0:08
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89502884B5A311F1BC4E0809CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.186.0-154.210.195.255

    Signature Algorithm: sha256WithRSAEncryption
         54:2c:77:dc:e1:1a:77:26:b5:37:46:61:a7:81:ca:7b:07:90:
         5e:8e:f2:3d:c1:5d:c9:ca:3f:ea:a6:af:10:03:f2:aa:20:52:
         dd:a4:2d:b8:dc:79:1f:5d:2c:af:41:8f:5c:64:40:ef:51:68:
         55:10:04:fc:66:45:62:f7:9f:e6:51:b1:5a:e6:9f:d4:ae:dd:
         70:70:0b:87:78:80:65:22:32:88:64:3f:5c:c5:41:06:15:e0:
         49:eb:5a:b0:ed:95:a5:0e:3c:8a:48:25:eb:1c:a6:2a:84:e5:
         20:3a:c2:e6:96:ce:26:3d:aa:00:b5:f6:f0:a2:d6:b6:15:8d:
         df:9d:76:01:47:fe:e5:dd:f4:cc:7c:43:dd:0b:d4:11:bd:f4:
         e5:9c:c5:af:02:3d:1b:0e:52:ac:b3:00:88:2b:7a:c6:71:52:
         89:aa:0c:75:f7:59:d4:49:61:2e:db:16:72:0e:61:eb:50:9a:
         a8:c6:fb:c9:f0:29:ca:3d:44:e8:4e:a6:b7:e3:98:48:2b:ff:
         ff:9d:ba:63:ca:a1:e5:13:e3:18:57:2e:d6:29:c9:45:c3:32:
         c6:e2:81:c8:85:dc:2f:50:35:f3:71:e9:47:dd:fa:31:ef:d9:
         16:e5:b1:de:e1:96:1a:e4:59:bb:af:60:35:6a:c4:40:d7:13:
         dd:b7:7d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----