Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F5C7DECB4F211F1A723A001CF1D38B0.roa
File:                     8F5C7DECB4F211F1A723A001CF1D38B0.roa (raw, json)
Hash identifier:          E9wOaXN8+hymLt+LXX2i2JlXYvGFPUFi0noVrKIg6lg=
Subject key identifier:   CF:0C:E1:DC:5B:E5:E3:CF:87:6B:18:47:B4:5C:09:73:5A:49:EB:70
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E93D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F5C7DECB4F211F1A723A001CF1D38B0.roa
Signing time:             Sun 20 Sep 2026 12:55:31 +0000
ROA not before:           Sun 20 Sep 2026 12:55:27 +0000
ROA not after:            Tue 27 Oct 2026 12:55:27 +0000
asID:                     63139
IP address blocks:        154.203.182.0/24 maxlen: 24
                          154.203.183.0/24 maxlen: 24
                          154.203.184.0/24 maxlen: 24
                          154.203.185.0/24 maxlen: 24
                          154.203.186.0/24 maxlen: 24
                          154.203.187.0/24 maxlen: 24
                          154.203.188.0/24 maxlen: 24
                          154.203.189.0/24 maxlen: 24
                          154.203.190.0/24 maxlen: 24
                          154.203.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125245 (0x1e93d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 20 12:55:27 2026 GMT
            Not After : Oct 27 12:55:27 2026 GMT
        Subject: CN=6aafd7c3-29ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:58:ab:a0:a5:a2:b6:85:42:57:e1:e6:97:ac:
                    8f:36:f5:04:87:ad:e3:1b:c6:6f:11:6b:be:41:ee:
                    c7:d4:af:37:e0:1d:2f:cd:5b:66:4b:75:22:48:82:
                    df:13:81:b9:dc:00:e0:75:6d:cb:58:16:1e:5d:d2:
                    04:4b:36:79:3a:07:d0:40:6a:4e:3f:8a:c2:c9:af:
                    19:f0:c1:ff:86:25:1b:c7:1c:7e:cc:98:e2:c1:a6:
                    68:9c:70:02:b6:53:6a:22:54:2b:1e:e9:a6:dd:48:
                    3b:ce:de:11:55:27:0a:f4:a9:de:b8:87:9b:b5:e0:
                    7c:50:03:5e:d3:a3:5b:e9:d9:bc:a6:5c:86:11:5e:
                    88:c2:22:06:51:f1:94:b3:80:83:f0:bd:1a:08:89:
                    da:06:98:20:4f:aa:23:1d:85:a3:ad:6d:dd:71:ca:
                    74:b8:24:fb:d0:a6:f7:b3:6d:96:2f:cc:e8:35:fc:
                    4d:94:79:e9:b8:78:36:12:52:f2:6e:f0:f8:12:cb:
                    a9:a2:38:7d:4b:7c:7b:2c:d4:57:dd:e3:3c:6e:83:
                    4e:f1:bd:e8:3e:83:b3:14:4e:d2:30:a5:f8:7a:b5:
                    46:7e:ec:df:6a:15:b7:c8:5c:9c:bb:d9:6a:f7:bf:
                    f6:36:3a:69:fb:99:cb:a0:24:09:6d:7c:a2:31:ee:
                    99:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0C:E1:DC:5B:E5:E3:CF:87:6B:18:47:B4:5C:09:73:5A:49:EB:70
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F5C7DECB4F211F1A723A001CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.182.0-154.203.191.255

    Signature Algorithm: sha256WithRSAEncryption
         83:a6:00:85:a3:8d:ac:f9:58:4a:18:76:5b:80:94:83:03:38:
         96:78:40:f0:29:95:b9:33:c4:75:16:1d:9d:64:79:5b:65:73:
         a5:44:38:d6:c5:73:7a:3f:b4:1e:3c:91:b5:d5:10:23:11:56:
         e2:a0:43:ec:8b:90:ca:3e:51:bc:5f:c3:1b:1a:d8:77:2f:38:
         b7:4b:e6:fa:99:4c:ad:41:07:27:e3:e6:a0:85:1a:f9:c7:4c:
         6a:e3:29:b8:e8:59:60:ef:38:b4:29:84:3a:ae:96:31:ce:0a:
         e7:85:09:66:6e:6c:d4:57:e3:3e:5a:4e:c6:25:b5:2f:25:ca:
         60:f2:b5:1d:0d:b9:0d:8c:df:65:de:0f:41:26:22:6d:37:9a:
         fc:81:b3:3c:7d:6f:5a:dc:46:92:42:97:d8:c6:0d:05:1a:67:
         55:29:f1:c0:3e:54:47:9e:6b:f2:4c:96:8b:d3:44:4a:ff:ec:
         a5:d8:1c:6b:e0:f1:fc:59:b2:ae:de:d8:cd:a8:11:e2:6c:7c:
         08:33:c3:4e:8b:ef:6e:8b:1b:d1:f4:47:c1:72:80:6b:d8:57:
         7d:52:aa:2f:53:9e:a2:c5:d9:e2:5a:b8:13:d9:b4:b4:ca:92:
         8a:c1:74:54:69:55:50:39:8a:bd:94:df:b9:0e:a9:f1:c1:de:
         0a:68:a4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----