Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC4FEAC0C9ED11F190E3B203CF1D38B0.roa
File:                     DC4FEAC0C9ED11F190E3B203CF1D38B0.roa (raw, json)
Hash identifier:          odoe7aBCnPTdcbm5a+Z7Fc0wgYvfw+sYz0K7EQwhpAk=
Subject key identifier:   42:36:13:52:10:46:8A:6E:E3:06:25:94:57:9D:B2:7A:5F:F0:BE:6C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE71
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC4FEAC0C9ED11F190E3B203CF1D38B0.roa
Signing time:             Sat 17 Oct 2026 05:44:47 +0000
ROA not before:           Sat 17 Oct 2026 05:44:42 +0000
ROA not after:            Mon 16 Nov 2026 05:44:42 +0000
asID:                     17497
IP address blocks:        154.197.16.0/21 maxlen: 24
                          154.197.16.0/24 maxlen: 24
                          154.197.17.0/24 maxlen: 24
                          154.197.18.0/24 maxlen: 24
                          154.197.19.0/24 maxlen: 24
                          154.197.20.0/24 maxlen: 24
                          154.197.21.0/24 maxlen: 24
                          154.197.22.0/24 maxlen: 24
                          154.197.23.0/24 maxlen: 24
                          154.197.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 09:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126577 (0x1ee71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 17 05:44:42 2026 GMT
            Not After : Nov 16 05:44:42 2026 GMT
        Subject: CN=6ad30b4f-0dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3c:23:62:8f:8c:bd:1b:f4:26:7b:4c:22:b6:
                    46:00:54:a1:b6:4b:ec:8c:d3:f0:e2:72:dd:56:10:
                    de:a2:3d:4e:d1:6b:92:1c:dd:5b:b3:da:2e:c2:2d:
                    0f:0a:bf:ce:45:6a:fd:a1:07:08:c1:91:28:99:4f:
                    02:54:27:3a:4e:d7:16:2f:5f:9f:62:47:b6:3e:ec:
                    1c:cb:a3:2a:86:a3:11:ca:ef:a1:02:47:db:95:21:
                    36:62:5b:39:c4:2f:90:09:52:f4:ad:e4:38:0a:15:
                    66:a5:1f:28:87:0b:80:c0:08:76:42:09:c1:05:29:
                    88:f7:2e:36:1c:b3:c4:7e:be:1c:21:05:7c:18:30:
                    fe:b4:7f:7e:84:f5:2f:df:3c:80:05:41:26:f0:d8:
                    01:c9:8f:95:c8:d1:46:8a:cd:32:ed:02:9c:27:48:
                    84:52:d9:0b:1a:37:84:28:cc:4b:92:6f:b4:18:78:
                    35:a6:e0:1e:37:3a:82:df:22:76:1a:de:44:bd:56:
                    d3:8e:a9:6d:7d:f3:9d:0e:14:9a:33:45:0b:1e:6e:
                    b4:d8:13:32:91:ad:1b:d6:53:81:bd:ff:9c:65:38:
                    09:50:85:62:a0:34:66:fd:84:1b:ba:2b:9d:ba:4c:
                    95:03:34:8b:cd:2e:31:5e:2d:51:a6:f8:da:14:dd:
                    59:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:36:13:52:10:46:8A:6E:E3:06:25:94:57:9D:B2:7A:5F:F0:BE:6C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC4FEAC0C9ED11F190E3B203CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.16.0/21
                  154.197.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:84:21:8a:3d:29:b2:d7:3b:31:a8:39:df:c4:4a:04:dc:22:
         ca:69:c1:15:b9:3a:da:df:96:b9:73:e4:cf:97:9e:a7:bd:82:
         ee:34:3c:18:55:e4:c8:77:ad:1f:c9:29:33:07:99:f7:bc:e9:
         84:39:f4:ff:0d:ee:c6:df:89:a7:61:b5:03:2c:84:2b:0e:2b:
         b5:70:1f:3a:30:20:62:4d:97:fa:8d:79:17:03:43:da:c4:e3:
         8d:f2:c7:7a:be:16:8d:bc:c8:81:16:23:f9:ae:cb:cc:8b:2c:
         97:98:02:c0:02:b9:a7:cf:66:ce:32:b6:70:7e:ad:cc:8e:c5:
         01:60:10:51:57:2d:cb:0a:a3:16:b2:f3:e2:99:3a:33:a6:8a:
         ec:04:f3:04:44:7e:c8:68:9b:43:75:d6:36:ac:6b:b3:d9:a8:
         2d:99:61:4e:5f:ca:f4:c7:f1:c6:cb:1e:ee:01:a1:95:8d:00:
         50:b5:38:4c:b0:f2:b9:5f:f1:35:9b:3d:43:b9:9d:14:9d:95:
         e8:dc:fa:f0:2e:c0:fd:02:11:11:1a:66:79:43:7c:8f:52:d8:
         5c:0b:b6:14:68:d9:c7:ee:3d:a3:d6:90:67:72:d8:2f:98:bf:
         f7:5c:b7:0c:03:02:a7:dc:53:37:7a:81:ca:39:5f:13:2c:8a:
         b2:df:ea:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----