Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D566410AC87611F185ECDEF4CE1D38B0.roa
File:                     D566410AC87611F185ECDEF4CE1D38B0.roa (raw, json)
Hash identifier:          r6r0fttElRtdG0iJAbvV9tB2gax0rfUz/9I63GRwPAE=
Subject key identifier:   63:69:22:52:BF:D9:C5:44:53:46:97:FC:3C:2E:D1:DA:19:33:C7:67
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE3D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D566410AC87611F185ECDEF4CE1D38B0.roa
Signing time:             Thu 15 Oct 2026 09:00:14 +0000
ROA not before:           Thu 15 Oct 2026 09:00:10 +0000
ROA not after:            Fri 20 Nov 2026 09:00:10 +0000
asID:                     11404
IP address blocks:        154.193.36.0/22 maxlen: 24
                          154.193.40.0/21 maxlen: 24
                          154.193.56.0/22 maxlen: 24
                          154.193.64.0/20 maxlen: 24
                          154.193.80.0/22 maxlen: 24
                          154.193.88.0/21 maxlen: 24
                          154.194.200.0/22 maxlen: 24
                          154.194.228.0/22 maxlen: 24
                          154.196.192.0/20 maxlen: 24
                          154.208.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126525 (0x1ee3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 15 09:00:10 2026 GMT
            Not After : Nov 20 09:00:10 2026 GMT
        Subject: CN=6ad0961e-7c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c8:3f:df:0d:ed:a6:1f:ad:fd:04:7c:78:58:
                    22:e4:92:9d:7b:12:15:c8:ee:b0:f3:c2:7a:c7:c3:
                    5c:0e:63:97:66:9f:81:51:9d:a2:3f:2b:03:43:26:
                    22:4a:e5:db:bd:a5:8c:67:7d:27:18:40:60:fc:1c:
                    f3:da:bb:25:4c:5f:83:a9:bd:79:75:42:b1:9e:30:
                    7e:ff:1c:b1:23:47:c7:84:06:04:14:bb:f0:8c:02:
                    c7:26:09:1e:96:93:ef:4f:1e:b3:e5:b4:b2:fc:56:
                    03:f0:19:d6:d4:d1:c9:70:38:5e:6a:e7:40:f9:f9:
                    ba:8a:bc:c5:aa:e8:9a:de:4a:41:96:15:c1:db:4f:
                    22:54:a1:f8:26:88:b6:01:86:03:78:22:0c:7c:6f:
                    70:a5:08:b6:c6:b3:de:f3:00:73:7f:11:a4:64:87:
                    ea:97:b9:5b:43:72:32:f7:a1:9f:b5:34:b1:74:4f:
                    b7:e8:ee:71:bc:63:27:5c:32:f3:48:aa:53:47:26:
                    18:05:67:3f:0b:e0:88:23:31:84:e8:e2:74:47:11:
                    82:ba:85:2c:72:38:c2:13:6b:d0:0a:00:77:3e:44:
                    7b:c9:9d:3e:fc:90:3c:2b:2e:f3:6f:fe:32:d3:fd:
                    79:48:4a:bb:88:31:a1:c2:64:b6:4f:41:4c:de:56:
                    25:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:69:22:52:BF:D9:C5:44:53:46:97:FC:3C:2E:D1:DA:19:33:C7:67
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D566410AC87611F185ECDEF4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.36.0-154.193.47.255
                  154.193.56.0/22
                  154.193.64.0-154.193.83.255
                  154.193.88.0/21
                  154.194.200.0/22
                  154.194.228.0/22
                  154.196.192.0/20
                  154.208.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2c:12:54:4e:06:13:0a:65:88:23:86:64:4e:51:eb:b2:fe:87:
         2f:96:79:3e:93:a8:e8:87:bc:ec:3f:76:24:8c:55:6b:9d:6c:
         85:97:60:fb:1b:7d:2b:d4:e2:b8:d4:c8:f7:ae:89:3f:5d:2d:
         0d:6d:af:5e:12:55:2c:0c:f7:ac:5f:8b:55:5a:da:f9:15:09:
         7c:a5:33:dc:e2:4d:e7:85:38:92:46:c6:d0:f4:31:2f:94:cc:
         a6:63:9b:75:d1:d9:dc:65:9f:8e:fc:55:10:37:69:d3:f4:0c:
         47:5b:ca:56:ce:1e:83:01:c3:7a:ed:96:db:a6:ba:a4:29:4b:
         57:f3:51:8e:6d:ec:e1:fa:b5:c7:16:40:a5:f3:02:26:a4:a1:
         bb:39:a6:83:93:0d:c4:db:c6:9c:3e:c0:53:37:83:ae:d6:2a:
         b6:9a:09:a7:05:62:cc:82:38:c2:af:ad:d7:73:1d:ad:11:ae:
         92:17:1d:dc:6a:2d:f3:05:ba:48:4e:de:8a:e9:f8:91:b7:05:
         54:fa:80:e4:28:99:ab:77:52:60:59:6b:f6:1f:64:2e:db:7a:
         3f:c8:a2:cb:cf:4f:50:46:96:39:01:5d:a3:cf:c4:78:e2:a7:
         df:2e:cd:c7:82:64:69:13:a0:80:be:82:ca:59:53:ae:a0:40:
         04:63:8c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----