Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFD970CEB5A511F1BE2A8E16CF1D38B0.roa
File:                     CFD970CEB5A511F1BE2A8E16CF1D38B0.roa (raw, json)
Hash identifier:          CfQq9zD7qLAKhyaVzS+YHGK2rug7ODu1sDjvrMxlL60=
Subject key identifier:   0C:59:98:CD:D7:E2:C7:CD:28:65:FA:9F:6E:D9:A5:0C:F9:49:86:B9
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E99A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFD970CEB5A511F1BE2A8E16CF1D38B0.roa
Signing time:             Mon 21 Sep 2026 10:18:39 +0000
ROA not before:           Mon 21 Sep 2026 10:18:35 +0000
ROA not after:            Tue 05 Jan 2027 10:18:35 +0000
asID:                     18229
IP address blocks:        154.210.147.0/24 maxlen: 24
                          154.210.148.0/24 maxlen: 24
                          154.210.149.0/24 maxlen: 24
                          154.210.150.0/24 maxlen: 24
                          154.210.151.0/24 maxlen: 24
                          154.210.152.0/24 maxlen: 24
                          154.210.153.0/24 maxlen: 24
                          154.210.154.0/24 maxlen: 24
                          154.210.204.0/24 maxlen: 24
                          154.210.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 14:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125338 (0x1e99a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 21 10:18:35 2026 GMT
            Not After : Jan  5 10:18:35 2027 GMT
        Subject: CN=6ab1047f-e4db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c1:f4:c8:55:42:62:0d:ce:d7:63:21:dc:5a:
                    20:d0:48:6f:32:ba:29:fd:3d:4d:57:69:cc:29:41:
                    e1:22:4f:6c:19:9a:75:c0:40:dd:fc:05:b0:25:6a:
                    44:af:a1:92:c7:f8:8b:64:32:e3:54:34:3a:80:96:
                    08:19:d7:f3:d8:07:58:8e:6b:a1:8d:4f:c0:13:ad:
                    16:af:ab:11:8f:6d:5b:5f:3e:30:b5:b1:cb:9f:a7:
                    60:c2:26:42:78:4f:a6:b1:e2:c6:c4:67:51:6b:fa:
                    f9:c8:01:dc:11:eb:f2:ae:fa:9b:5d:c9:9e:09:74:
                    c4:e0:10:31:67:b4:66:d0:5f:06:57:9a:11:dc:1a:
                    c0:17:7e:5a:45:48:63:6c:f1:11:2f:4f:c8:b5:15:
                    44:c9:55:55:ee:c0:c3:bc:dd:a7:8e:f4:ee:f0:d9:
                    51:f4:81:bb:37:27:4b:70:5f:4d:6e:a8:6e:20:84:
                    88:11:3d:00:48:b1:f6:51:1e:24:d7:d2:56:9d:9e:
                    cc:b4:50:88:af:5f:0c:27:15:61:17:ab:e6:9e:85:
                    de:04:00:94:78:45:d1:11:d4:60:80:b4:04:57:71:
                    f0:13:41:02:5a:77:ba:13:84:77:d1:36:2a:e7:88:
                    09:41:4f:27:d4:b5:66:95:c8:02:ec:a0:42:d9:61:
                    1b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:59:98:CD:D7:E2:C7:CD:28:65:FA:9F:6E:D9:A5:0C:F9:49:86:B9
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFD970CEB5A511F1BE2A8E16CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.147.0-154.210.154.255
                  154.210.204.0/24
                  154.210.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:5c:aa:a8:3a:2e:fb:1e:d2:fb:a7:db:07:63:2a:35:94:fc:
         c2:e7:0c:32:66:93:76:fe:aa:86:ec:d7:d6:0f:88:3e:cc:d5:
         4b:6f:c1:fb:39:be:74:9a:e6:31:ae:dc:0e:e6:ca:67:ad:65:
         9b:39:a5:1d:b9:e6:6c:e7:f6:d6:d7:6a:a3:0b:d2:19:0e:b0:
         39:9c:1f:02:e8:66:2d:ef:b6:3e:ec:43:3a:61:fb:15:d4:e0:
         86:21:8a:94:03:46:ff:3a:4f:b2:71:b4:26:79:ee:4e:cf:f1:
         bd:53:19:16:06:c2:be:cc:12:dd:6d:a8:38:0d:15:78:a3:83:
         4d:d9:73:cd:6d:cf:a5:1b:13:18:f0:df:b6:81:9e:cf:b3:5b:
         8f:b7:0b:51:51:54:d7:db:2c:2b:08:ab:5f:20:ed:40:79:46:
         bb:ba:4b:02:d6:ac:59:10:61:ad:ae:d4:8e:5e:db:34:26:6f:
         82:59:61:ff:f3:59:77:aa:d0:c4:32:cd:34:6f:a2:2b:9a:86:
         6a:29:62:68:5e:06:91:36:a8:2f:db:0f:80:db:44:ba:90:28:
         89:10:3f:5c:81:c8:8e:9c:8b:b6:a8:f2:00:23:47:d4:db:20:
         f3:df:25:31:c1:34:4f:b4:c9:a5:a7:92:f4:b2:03:2f:ab:70:
         d7:2e:9a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----