Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1E15350B67911F1ABF864FBCE1D38B0.roa
File:                     B1E15350B67911F1ABF864FBCE1D38B0.roa (raw, json)
Hash identifier:          vFsexJwqk1njpg3tbsK0x5paoit52Rh9jBa+cidUiHg=
Subject key identifier:   4D:CD:26:E0:82:A7:16:AF:25:CC:06:0E:C0:D5:1C:37:92:B4:D6:05
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EA24
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1E15350B67911F1ABF864FBCE1D38B0.roa
Signing time:             Tue 22 Sep 2026 11:35:22 +0000
ROA not before:           Tue 22 Sep 2026 11:35:18 +0000
ROA not after:            Sat 07 Nov 2026 11:35:18 +0000
asID:                     63099
IP address blocks:        154.193.35.0/24 maxlen: 24
                          154.196.179.0/24 maxlen: 24
                          154.196.180.0/24 maxlen: 24
                          154.200.26.0/24 maxlen: 24
                          154.200.43.0/24 maxlen: 24
                          154.200.51.0/24 maxlen: 24
                          154.200.52.0/24 maxlen: 24
                          154.200.140.0/24 maxlen: 24
                          154.200.142.0/24 maxlen: 24
                          154.200.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125476 (0x1ea24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 22 11:35:18 2026 GMT
            Not After : Nov  7 11:35:18 2026 GMT
        Subject: CN=6ab267fa-c3a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a1:cb:d0:4c:4b:a1:de:3c:7b:8b:2f:fa:06:
                    bd:82:62:c1:43:38:e8:f2:00:fd:ff:92:02:c5:43:
                    02:7f:ba:a0:e2:c8:50:a4:e7:dc:3d:4c:6e:c0:a7:
                    22:f8:e8:0a:87:68:06:e3:08:6d:b1:54:c5:48:ba:
                    f5:6c:38:75:71:23:3e:54:a9:9d:d5:aa:4f:67:c8:
                    6c:34:8c:c3:ff:8a:f3:49:aa:09:46:0c:cb:db:bf:
                    85:20:c8:0c:c0:ff:db:48:58:d0:59:7d:64:91:58:
                    1a:c8:05:a7:f3:f3:f4:c9:36:25:1d:d2:00:9a:63:
                    56:f8:93:aa:95:4b:5d:f8:49:50:6a:71:17:d7:93:
                    5a:81:35:c3:3a:7b:6e:30:52:60:c0:00:a5:27:cb:
                    10:13:96:35:53:12:75:90:b9:e4:81:a9:6b:42:87:
                    14:4c:4a:28:66:d8:2c:e1:18:44:be:14:38:18:79:
                    a5:37:b4:2f:e9:7c:f6:e7:d4:91:33:4b:de:16:40:
                    0b:17:57:b6:d1:f9:d7:00:59:fe:35:d7:b6:f0:3d:
                    e2:79:73:30:28:cb:4b:51:17:ec:79:e6:5a:f2:0e:
                    39:8e:dc:9a:46:b7:77:58:92:e9:8c:ac:48:1b:6e:
                    1f:8e:bf:b7:3d:99:9b:9e:e3:59:a2:d7:35:a0:1d:
                    23:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CD:26:E0:82:A7:16:AF:25:CC:06:0E:C0:D5:1C:37:92:B4:D6:05
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1E15350B67911F1ABF864FBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.35.0/24
                  154.196.179.0-154.196.180.255
                  154.200.26.0/24
                  154.200.43.0/24
                  154.200.51.0-154.200.52.255
                  154.200.140.0/24
                  154.200.142.0/24
                  154.200.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:0a:fe:38:6b:50:10:59:56:a5:33:ae:b3:c6:6d:8b:b9:94:
         ac:29:f2:a7:ee:02:da:90:8f:bd:16:69:1e:fe:5c:21:a3:fc:
         0e:5a:66:2c:a5:d6:49:7a:e4:ec:64:9e:0c:eb:c5:85:17:62:
         9d:9a:7c:4a:e6:ec:6d:f8:15:37:8a:3e:eb:13:bc:c1:d4:0c:
         1e:1c:8b:ef:3c:4d:3b:ef:ad:c1:c2:9e:46:e0:28:4b:43:27:
         fd:43:f6:3a:e2:99:ca:a6:7e:9b:ed:8b:9a:9c:cd:f8:fb:bc:
         58:c8:48:d8:46:cb:2e:0f:a4:09:31:5d:61:3c:8e:1e:9e:08:
         3e:a0:bc:7c:71:18:88:21:e5:ad:e9:eb:cd:79:99:16:bd:1c:
         be:9a:d2:dd:8a:f2:d7:6e:fa:54:26:28:75:84:d3:7b:39:c4:
         13:8d:44:e2:93:74:65:86:a5:19:d7:86:34:02:a8:2b:34:f4:
         13:22:28:60:c5:49:72:a6:20:4c:46:ba:30:26:d0:61:52:9a:
         6c:bc:6e:2c:a1:b9:46:5f:27:da:c1:db:b3:6b:cf:0d:db:6c:
         8c:80:2e:a9:03:c4:bd:fd:21:2e:ae:de:8d:c2:5c:93:53:f8:
         3c:ab:e1:65:be:6e:cb:48:7c:37:9b:2c:cd:80:bf:02:b6:16:
         1f:08:80:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----