Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A463808C9EF11F1AED97E11CF1D38B0.roa
File:                     9A463808C9EF11F1AED97E11CF1D38B0.roa (raw, json)
Hash identifier:          Fx3yWej0bA9+GqTQLxv6ZygJ8vct7mmP4dL5zfdwAPQ=
Subject key identifier:   58:DF:6D:1A:81:E6:07:60:D3:5F:87:F2:C1:BD:C6:18:B6:73:08:48
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE75
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A463808C9EF11F1AED97E11CF1D38B0.roa
Signing time:             Sat 17 Oct 2026 05:57:15 +0000
ROA not before:           Sat 17 Oct 2026 05:57:10 +0000
ROA not after:            Mon 16 Nov 2026 05:57:10 +0000
asID:                     17497
IP address blocks:        154.196.135.0/24 maxlen: 24
                          154.196.140.0/23 maxlen: 24
                          154.196.140.0/24 maxlen: 24
                          154.196.141.0/24 maxlen: 24
                          154.196.164.0/22 maxlen: 24
                          154.196.164.0/24 maxlen: 24
                          154.196.165.0/24 maxlen: 24
                          154.196.166.0/24 maxlen: 24
                          154.196.167.0/24 maxlen: 24
                          154.196.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126581 (0x1ee75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 17 05:57:10 2026 GMT
            Not After : Nov 16 05:57:10 2026 GMT
        Subject: CN=6ad30e3b-f312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fe:43:6f:eb:b1:3b:0f:77:91:de:8f:45:b6:
                    42:db:f2:b9:18:d3:68:b2:54:a7:bd:43:05:4a:df:
                    3b:6a:9b:11:8f:77:cc:2c:4e:2e:64:5b:9e:56:34:
                    81:1c:f7:2d:2c:ac:ea:52:a5:c7:35:b0:b6:05:d1:
                    42:a6:45:9a:e5:81:09:2a:dc:75:e8:cd:62:ed:ed:
                    18:68:df:40:0e:46:b7:9b:6e:21:4c:19:3f:30:57:
                    f4:51:8c:15:d2:d2:3c:2c:5d:3b:b2:2b:c1:e6:ef:
                    cb:ff:01:01:7a:3c:11:6c:44:20:d7:81:cf:b1:75:
                    75:2d:52:2f:7e:4f:83:dd:a5:02:f7:c4:8f:53:0f:
                    20:b9:0c:98:fc:41:6e:72:33:66:93:95:6d:79:00:
                    23:b5:11:9f:e6:f8:73:2a:b0:c3:72:85:ad:3a:fd:
                    62:18:9f:8c:6b:89:8e:50:97:d3:03:7f:60:cc:d3:
                    bc:b6:fe:3f:59:bb:43:1b:47:6f:dd:b4:72:b1:14:
                    7d:33:53:1e:9e:84:57:eb:7b:38:47:48:00:74:7d:
                    d3:2f:74:ed:83:97:8b:e0:f6:6a:b6:a5:2d:e1:ce:
                    1c:6a:4c:55:f6:d4:dd:52:57:7e:06:cd:92:d6:00:
                    11:b2:f8:10:2c:13:3e:20:b3:92:7b:0e:20:51:59:
                    20:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DF:6D:1A:81:E6:07:60:D3:5F:87:F2:C1:BD:C6:18:B6:73:08:48
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A463808C9EF11F1AED97E11CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.135.0/24
                  154.196.140.0/23
                  154.196.164.0/22
                  154.196.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:ae:b9:df:8b:89:43:7f:76:a4:6e:90:b0:26:be:0a:4a:0d:
         a3:c5:5c:31:22:1d:2b:1c:de:ca:95:23:d7:59:e6:23:ea:91:
         59:d2:c5:2c:55:25:d8:28:4c:2d:32:2f:50:1c:b8:e3:28:ec:
         33:13:b1:13:ba:d1:cd:54:05:88:63:f1:c6:50:53:52:47:8f:
         f1:ff:0c:a6:72:53:a2:5a:2b:40:53:e0:af:59:fc:fb:3d:ce:
         99:09:4b:cb:c7:a9:0e:6c:e3:bf:8c:ab:ba:a8:0c:dd:cd:4a:
         2f:a1:50:98:99:58:ab:00:af:e3:3c:20:f4:7d:94:c2:9d:0c:
         8b:2c:63:7e:7a:cb:1a:11:28:da:89:d9:0e:3b:b1:5c:8e:42:
         2c:75:98:cc:fc:b8:05:2c:4e:d5:7a:bb:b6:71:e7:a5:08:76:
         8d:3a:e0:c2:cf:a6:7f:d1:41:4a:7f:5d:bb:84:3c:86:91:fe:
         d9:6f:5f:e9:70:02:69:cc:9d:ba:68:59:e3:45:d1:68:bb:5d:
         ce:36:fd:88:cb:c0:8c:6b:ca:fd:14:92:d3:66:05:67:24:ca:
         c0:cf:0a:13:aa:83:e1:2d:3f:f4:1b:45:69:dd:5a:76:14:17:
         90:39:36:72:5b:97:19:fb:5b:34:6f:56:fd:95:e9:02:f4:84:
         47:67:5b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----