Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89828DCEDDA811F1AD0DBB11CF1D38B0.roa
File:                     89828DCEDDA811F1AD0DBB11CF1D38B0.roa (raw, json)
Hash identifier:          bj2mgfkveeRhmpvym03uu7A8K42NfE7FJp6O7vHqtaE=
Subject key identifier:   17:90:81:5D:C2:D8:2C:D7:B3:C0:62:7D:DE:D6:03:62:63:FC:AD:EB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01F4C1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89828DCEDDA811F1AD0DBB11CF1D38B0.roa
Signing time:             Wed 11 Nov 2026 08:18:56 +0000
ROA not before:           Wed 11 Nov 2026 08:18:51 +0000
ROA not after:            Sun 11 Nov 2029 08:18:51 +0000
asID:                     17561
IP address blocks:        154.198.247.0/24 maxlen: 24 (superfluous maxlen)
                          154.198.248.0/24 maxlen: 24 (superfluous maxlen)
                          154.198.249.0/24 maxlen: 24 (superfluous maxlen)
                          154.198.250.0/24 maxlen: 24 (superfluous maxlen)
                          154.198.251.0/24 maxlen: 24 (superfluous maxlen)
                          154.198.252.0/24 maxlen: 24 (superfluous maxlen)
                          154.198.253.0/24 maxlen: 24 (superfluous maxlen)
                          154.198.254.0/24 maxlen: 24 (superfluous maxlen)
                          154.198.255.0/24 maxlen: 24 (superfluous maxlen)
                          154.199.0.0/24 maxlen: 24 (superfluous maxlen)
                          154.199.5.0/24 maxlen: 24 (superfluous maxlen)
                          154.200.0.0/24 maxlen: 24 (superfluous maxlen)
                          154.200.18.0/24 maxlen: 24 (superfluous maxlen)
                          154.200.23.0/24 maxlen: 24 (superfluous maxlen)
                          154.200.34.0/24 maxlen: 24 (superfluous maxlen)
                          154.200.35.0/24 maxlen: 24 (superfluous maxlen)
                          154.200.36.0/24 maxlen: 24 (superfluous maxlen)
                          154.200.41.0/24 maxlen: 24 (superfluous maxlen)
                          154.200.42.0/24 maxlen: 24 (superfluous maxlen)
                          154.200.49.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128193 (0x1f4c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 11 08:18:51 2026 GMT
            Not After : Nov 11 08:18:51 2029 GMT
        Subject: CN=6af424f0-d2cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3f:3d:97:d7:b7:a6:86:34:de:12:c3:af:78:
                    d9:9b:b1:9c:4d:66:d4:35:b8:0b:64:86:e1:19:84:
                    a4:0a:29:7a:4f:c6:b6:6f:18:6d:3f:35:67:9e:e8:
                    5d:32:a5:c9:7e:3f:01:21:d4:44:7b:65:b4:c4:a0:
                    77:6f:ca:b1:2f:cd:8d:64:c4:37:3b:c8:b3:29:d1:
                    c2:83:05:18:83:c9:79:8d:f2:a6:05:11:1e:09:69:
                    d0:2d:d7:b4:37:0c:6c:35:8c:4c:c5:3b:14:cc:b5:
                    8c:66:56:b4:f3:f8:f7:80:1e:d8:2c:c5:cf:39:2f:
                    49:ea:8f:b7:7b:26:db:ae:ae:1d:08:be:d6:53:7f:
                    2a:4b:a7:4a:2b:66:39:11:0b:8f:9d:75:2f:3a:51:
                    1c:d2:34:41:1a:81:58:0c:dc:9d:72:47:aa:45:6c:
                    b0:79:c9:01:22:bf:03:83:9c:9d:a1:75:b9:0c:4a:
                    1d:5b:14:00:25:a3:a9:ff:71:28:97:4a:c1:b1:93:
                    2a:a7:6d:d6:0f:c1:8e:ca:b7:df:52:55:ac:8e:74:
                    98:b4:05:9c:97:ec:d1:0c:c5:d0:5b:1e:fe:31:75:
                    91:41:02:8a:70:32:21:2d:bd:23:7b:93:bc:4e:38:
                    32:4f:85:0b:d7:ef:c2:f7:f6:e3:d9:25:4b:93:86:
                    73:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:90:81:5D:C2:D8:2C:D7:B3:C0:62:7D:DE:D6:03:62:63:FC:AD:EB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89828DCEDDA811F1AD0DBB11CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.198.247.0-154.199.0.255
                  154.199.5.0/24
                  154.200.0.0/24
                  154.200.18.0/24
                  154.200.23.0/24
                  154.200.34.0-154.200.36.255
                  154.200.41.0-154.200.42.255
                  154.200.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:39:a2:eb:b4:65:1c:3a:8c:9e:56:dc:1d:8e:41:3f:71:7d:
         09:ad:3e:77:3a:59:db:3f:33:e1:35:65:1c:62:28:16:3e:4c:
         2b:f8:86:5b:2e:64:51:5b:20:03:ba:25:3d:68:1f:46:ce:70:
         e0:7d:34:59:96:f0:5a:54:d7:8c:ab:c8:97:a5:92:c2:37:2c:
         84:9d:3f:4c:b6:cb:03:39:0a:36:86:f9:89:b4:18:5c:d9:96:
         93:1d:d9:25:95:59:35:a8:d4:99:8c:f3:af:9e:81:23:21:a9:
         95:85:3a:d5:38:f5:85:95:bc:8b:07:19:92:42:53:b3:3a:38:
         98:b5:ec:90:20:84:e4:3f:1f:d4:7c:b6:bc:bb:a0:6e:c7:7b:
         c5:f3:07:df:99:da:a1:2a:0b:aa:30:f7:35:8f:33:0e:b3:48:
         b8:ff:d7:1f:4f:29:c2:ad:58:62:35:b7:87:90:24:54:26:6e:
         22:01:54:4a:6a:9b:08:bf:3d:2b:94:46:46:cc:7c:cc:ad:eb:
         dc:f9:07:4c:36:0c:bf:36:23:ab:67:32:74:f1:1e:c4:a5:fc:
         0d:e8:0b:80:5a:4f:69:08:ca:72:36:29:77:8d:24:39:f8:89:
         e4:86:c0:6e:03:1c:e0:5f:1c:1a:3a:b4:48:cf:b3:89:1e:7f:
         fb:47:e3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----