Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE7F17FCD4F811F189206FD6CE1D38B0.roa
File:                     CE7F17FCD4F811F189206FD6CE1D38B0.roa (raw, json)
Hash identifier:          w0LhhuWWk38vjF5Y2x+bSgHDnzIKgD8CKRv6Pu0fLHY=
Subject key identifier:   90:27:27:F2:B0:FC:65:B9:6F:51:77:B1:34:B1:7B:AB:61:9E:E2:2F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01F1A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE7F17FCD4F811F189206FD6CE1D38B0.roa
Signing time:             Sat 31 Oct 2026 07:00:51 +0000
ROA not before:           Sat 31 Oct 2026 07:00:46 +0000
ROA not after:            Mon 07 Dec 2026 07:00:46 +0000
asID:                     202656
IP address blocks:        154.222.1.0/24 maxlen: 24 (superfluous maxlen)
                          154.222.12.0/24 maxlen: 24 (superfluous maxlen)
                          154.222.13.0/24 maxlen: 24 (superfluous maxlen)
                          154.222.14.0/24 maxlen: 24 (superfluous maxlen)
                          154.222.15.0/24 maxlen: 24 (superfluous maxlen)
                          154.222.43.0/24 maxlen: 24 (superfluous maxlen)
                          154.222.44.0/24 maxlen: 24 (superfluous maxlen)
                          154.222.45.0/24 maxlen: 24 (superfluous maxlen)
                          154.222.198.0/24 maxlen: 24 (superfluous maxlen)
                          154.222.206.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127392 (0x1f1a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 31 07:00:46 2026 GMT
            Not After : Dec  7 07:00:46 2026 GMT
        Subject: CN=6ae59223-f26a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:09:d8:09:77:52:93:69:78:77:e4:99:a3:02:
                    c3:fe:ff:b5:bb:46:b4:13:19:7d:7c:18:82:ed:81:
                    ed:09:ad:d5:08:3b:e2:4e:20:d0:f4:14:a3:a6:f4:
                    e6:3f:ca:b8:cb:b2:3d:56:f7:79:89:a2:37:7e:fc:
                    41:e4:c4:ea:92:5d:0c:c1:9a:c5:63:32:fd:ce:e5:
                    21:e0:dd:44:21:44:1a:34:cb:1b:32:3d:60:f3:07:
                    91:8b:df:86:ab:2f:92:ab:5b:ae:60:e8:2e:3e:84:
                    d2:64:4e:d7:13:f6:53:36:c6:f4:b9:2f:8d:c1:2e:
                    56:aa:6d:58:df:5a:0d:21:da:eb:6d:d4:e0:a8:34:
                    7a:09:66:4a:35:ca:b0:fd:e3:4a:41:99:4a:0f:13:
                    e2:0c:7c:2d:1f:96:51:3e:64:84:d9:1c:83:ac:51:
                    f2:26:7c:de:7b:1a:91:52:bd:dd:46:9d:8d:a1:a9:
                    3a:4c:eb:a3:37:28:e3:93:ea:a2:99:ba:6e:9e:34:
                    09:8e:e3:5a:24:f6:53:a1:38:e7:d3:fc:0b:cd:63:
                    d8:15:ff:e4:a7:67:b0:7a:53:68:fe:69:ae:b0:cd:
                    ee:04:f6:9e:12:a7:71:01:45:26:7a:a4:f6:0d:b2:
                    21:58:52:49:0d:26:eb:49:eb:a1:23:2f:40:4b:e3:
                    e0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:27:27:F2:B0:FC:65:B9:6F:51:77:B1:34:B1:7B:AB:61:9E:E2:2F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE7F17FCD4F811F189206FD6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.1.0/24
                  154.222.12.0/22
                  154.222.43.0-154.222.45.255
                  154.222.198.0/24
                  154.222.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:46:d4:6b:43:6d:29:92:c1:98:4f:79:36:03:9f:c6:66:70:
         f1:ce:34:d7:43:e0:a8:e5:97:a7:71:b2:22:c2:9a:9e:4a:bb:
         0b:ba:b6:06:00:ea:8a:7b:7e:a2:ab:5e:b7:33:68:54:1c:94:
         e0:96:4a:68:1b:b3:2c:7c:5f:19:6f:eb:f1:82:56:6b:2a:6b:
         52:46:32:b3:39:df:38:fe:53:56:39:26:9a:cd:1c:6a:02:d7:
         e7:e6:99:9f:c9:fa:a0:9f:f4:4d:bf:bb:0e:e0:33:ac:e1:6c:
         ee:eb:9d:48:da:fb:f8:9d:5f:15:18:5b:5d:47:7c:2c:91:39:
         96:20:63:65:3d:31:ce:64:6b:fd:10:2d:bf:db:ed:75:1d:0f:
         e6:5e:dd:0f:5d:e3:00:d8:75:46:8e:58:e9:93:d2:ca:12:90:
         84:ba:67:fd:14:98:63:a9:82:08:57:31:cb:67:9d:45:34:00:
         0e:6d:06:f1:fb:0a:f5:1e:f8:c7:b6:81:25:f0:86:c1:e0:8c:
         ce:89:5e:d4:49:7e:2e:bd:fe:53:2f:4a:c5:38:ba:0b:6f:96:
         b2:1e:f1:29:34:4f:e5:b4:3e:14:51:46:98:15:c2:1e:3c:5e:
         7a:88:9e:53:30:4d:d1:06:b3:cc:b6:11:8f:c5:7c:08:31:fd:
         bc:d4:10:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----