Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB5AFECEDCD111F1A7B9DD18CF1D38B0.roa
File:                     DB5AFECEDCD111F1A7B9DD18CF1D38B0.roa (raw, json)
Hash identifier:          0cfa5F8MulY9aQTd6AV5djZXg34CR3UAp7x3ezwCHIk=
Subject key identifier:   D5:F9:61:07:B2:D4:99:BF:0F:53:F9:19:09:03:5E:2B:10:FB:E7:20
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01F476
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB5AFECEDCD111F1A7B9DD18CF1D38B0.roa
Signing time:             Tue 10 Nov 2026 06:42:12 +0000
ROA not before:           Tue 10 Nov 2026 06:42:07 +0000
ROA not after:            Thu 19 Nov 2026 06:42:07 +0000
asID:                     17497
IP address blocks:        154.193.8.0/21 maxlen: 24
                          154.193.8.0/24 maxlen: 24 (superfluous maxlen)
                          154.193.9.0/24 maxlen: 24 (superfluous maxlen)
                          154.193.10.0/24 maxlen: 24 (superfluous maxlen)
                          154.193.11.0/24 maxlen: 24 (superfluous maxlen)
                          154.193.12.0/24 maxlen: 24 (superfluous maxlen)
                          154.193.13.0/24 maxlen: 24 (superfluous maxlen)
                          154.193.14.0/24 maxlen: 24 (superfluous maxlen)
                          154.193.15.0/24 maxlen: 24 (superfluous maxlen)
                          154.222.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128118 (0x1f476)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 10 06:42:07 2026 GMT
            Not After : Nov 19 06:42:07 2026 GMT
        Subject: CN=6af2bcc3-91ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0d:c4:c9:5a:01:22:d9:d2:ba:f6:a7:2e:8f:
                    45:8f:66:01:51:3a:ce:77:88:ae:ed:73:fa:9f:cc:
                    31:d7:8c:16:c2:35:9e:a3:d7:aa:4e:21:f2:13:66:
                    73:63:b4:5e:2c:c9:d9:8e:4e:54:af:c6:d1:f1:6c:
                    93:08:be:d8:40:ac:9f:43:bb:cf:73:0e:3e:b2:f0:
                    18:dc:5f:0e:49:04:ed:43:29:3a:3a:05:8a:81:6f:
                    64:6a:c0:50:5e:e3:75:7c:8d:51:c1:1c:22:2b:ea:
                    d3:91:07:0c:65:cf:38:5e:be:c2:a4:f1:59:5c:7c:
                    97:14:23:f1:c1:a4:5c:20:65:de:31:d5:3a:5e:af:
                    ee:fb:5f:c7:3d:ac:d3:f0:20:09:15:e5:6d:cc:a0:
                    a4:44:a2:0e:84:a4:99:b4:f1:32:ec:fb:06:ce:b4:
                    60:aa:e0:96:2f:1e:8a:c3:eb:6f:97:08:7a:58:3d:
                    d4:60:e1:79:c5:19:ca:5d:70:1a:92:7b:c3:1c:e0:
                    4b:24:61:c8:31:60:6a:80:40:78:de:72:b7:66:5c:
                    79:f5:26:30:15:26:55:57:dd:a8:d1:7a:55:d0:76:
                    bc:20:72:4e:ab:b8:7f:ec:9f:7a:cf:62:f2:bc:3d:
                    cb:6b:93:65:3e:09:22:7f:88:0e:6f:b2:87:3f:ad:
                    b3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F9:61:07:B2:D4:99:BF:0F:53:F9:19:09:03:5E:2B:10:FB:E7:20
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB5AFECEDCD111F1A7B9DD18CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.8.0/21
                  154.222.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:34:6f:d3:22:84:70:88:f0:ab:7d:cc:e2:55:66:1f:5a:c9:
         a0:00:44:e1:77:da:d2:c8:01:05:00:f5:f9:79:50:a7:b0:b9:
         35:ae:ff:6c:5f:68:b5:90:5a:bb:0e:d2:31:97:3a:2e:9b:10:
         d6:90:7e:e7:c2:ad:7c:99:3b:e9:39:3f:7b:94:f2:c8:c5:5f:
         4b:82:91:73:b5:06:f3:47:e0:6d:2b:d1:8c:4f:11:a6:06:f9:
         af:ec:31:a8:e4:29:f1:6a:5f:60:ac:3f:11:29:5d:c6:20:21:
         f1:31:be:a5:44:2d:d9:41:4c:13:95:56:0c:19:86:af:8e:4d:
         a8:aa:26:3d:63:c9:b9:7c:33:0a:25:af:e9:65:2e:1b:bd:bb:
         e9:5d:28:77:52:2c:a3:19:2b:d3:7f:d0:2e:04:fa:77:c6:2d:
         f2:fb:b3:f4:12:82:d7:ff:a5:db:bc:23:0a:02:39:37:cc:b5:
         e8:21:ba:f1:44:8b:64:33:a9:0f:f7:f5:84:39:a5:32:c5:d5:
         6f:c9:b8:9c:52:ba:85:4b:6d:a0:be:2d:5e:ec:3c:29:86:c3:
         06:f2:de:da:12:3f:6a:39:ee:b0:ac:22:39:fc:4f:1f:f0:b7:
         64:74:4b:ed:e6:7f:db:fb:bc:39:6d:d9:8b:42:1d:7c:b9:5e:
         0b:73:f3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----