Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20A17DF29CA711F194FE04B5CE1D38B0.roa
File:                     20A17DF29CA711F194FE04B5CE1D38B0.roa (raw, json)
Hash identifier:          tQJSpVWeKrqtyGR8TAg8YCp35YNUlGoOMvh2lCsPvNc=
Subject key identifier:   AA:BB:1C:7A:F1:F3:69:1D:4C:77:49:9D:59:C6:6D:1A:07:CD:F0:A4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E0D4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20A17DF29CA711F194FE04B5CE1D38B0.roa
Signing time:             Thu 20 Aug 2026 14:55:05 +0000
ROA not before:           Thu 20 Aug 2026 14:55:01 +0000
ROA not after:            Tue 29 Sep 2026 14:55:01 +0000
asID:                     204770
IP address blocks:        154.193.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123092 (0x1e0d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 14:55:01 2026 GMT
            Not After : Sep 29 14:55:01 2026 GMT
        Subject: CN=6a871549-74f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:69:16:a2:14:a4:91:fa:fb:3b:6f:bb:9e:8a:
                    ee:b5:38:77:3c:25:7e:6a:21:6f:22:1d:d0:e5:06:
                    be:77:c0:80:b2:c2:4c:69:56:e4:80:13:86:83:3e:
                    5b:d6:5a:ea:70:ad:86:c0:f5:09:71:3d:c1:b0:51:
                    47:26:eb:cf:eb:3b:25:c3:d4:14:54:cf:7e:38:0e:
                    84:95:7b:16:63:d5:38:28:26:38:e0:e4:a1:3a:a9:
                    39:b8:8d:7e:3e:6b:6c:68:b9:dc:f9:c1:7e:9b:2e:
                    d5:3b:cc:c6:65:c4:fe:67:1c:5f:7c:dc:df:4e:60:
                    a4:b1:0f:dc:7e:06:a1:49:93:56:4b:47:2e:69:5f:
                    05:19:eb:44:3c:c9:c0:58:4e:ca:b6:ce:d1:3b:b3:
                    99:5e:6f:56:eb:f3:27:9a:cf:c5:02:95:c0:ab:bd:
                    f5:f6:f9:1a:a6:cc:a9:5e:c2:33:b7:91:5b:d0:f4:
                    e4:43:3e:4f:f9:76:ea:9e:7d:a3:3f:75:ba:7b:ed:
                    e2:d8:07:f5:44:22:26:22:02:f6:bd:16:16:2a:40:
                    15:73:10:0d:c4:cb:6d:c9:ee:da:e5:ef:09:18:8f:
                    e7:65:4d:3c:d9:90:9a:78:74:c7:32:62:42:40:7e:
                    da:1d:f1:c4:e1:34:0f:88:e8:64:aa:18:64:bc:7b:
                    df:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BB:1C:7A:F1:F3:69:1D:4C:77:49:9D:59:C6:6D:1A:07:CD:F0:A4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20A17DF29CA711F194FE04B5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:dd:96:7f:ba:b9:20:36:eb:b2:c5:94:db:72:5f:24:5b:0e:
         b3:0a:a7:76:65:af:84:65:f9:ce:e3:a4:86:33:27:58:33:90:
         48:8e:b0:68:3d:ae:34:72:88:00:07:91:c2:a8:34:81:99:5a:
         ba:15:51:af:7a:ef:67:61:51:cc:a0:ae:5f:5a:68:5b:47:a3:
         57:5a:2a:fb:04:0d:ea:59:e0:54:e5:e3:6e:60:43:5b:c5:42:
         5d:75:99:bd:18:32:03:6c:aa:5f:e3:d5:d1:79:f9:59:2d:79:
         03:ef:ee:d7:c8:82:a3:86:59:99:86:42:4e:03:bb:c0:a3:19:
         f2:19:bb:c5:00:10:2a:57:08:af:5d:bf:ae:3c:4e:bd:6d:28:
         e8:d0:ae:9a:55:cf:92:4a:e5:72:39:76:cb:9c:74:5e:11:02:
         c7:14:cc:d0:e9:85:63:fa:01:10:1c:b9:31:05:27:bc:32:66:
         84:d3:5a:fb:ff:89:9a:5f:56:a4:0c:ed:97:2f:b2:45:9d:28:
         79:7c:60:71:11:91:88:f4:ee:b8:ac:eb:fc:d6:0a:f6:17:81:
         c5:23:7e:87:c4:94:94:f5:f6:fc:09:f8:b8:d6:eb:e6:49:f5:
         5a:ef:51:83:b0:99:28:82:e1:93:dd:8e:4a:0e:1c:29:84:28:
         39:99:58:7d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAeDUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODIwMTQ1NTAxWhcNMjYwOTI5MTQ1NTAxWjAYMRYw
FAYDVQQDEw02YTg3MTU0OS03NGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw2kWohSkkfr7O2+7norutTh3PCV+aiFvIh3Q5Qa+d8CAssJMaVbkgBOG
gz5b1lrqcK2GwPUJcT3BsFFHJuvP6zslw9QUVM9+OA6ElXsWY9U4KCY44OShOqk5
uI1+PmtsaLnc+cF+my7VO8zGZcT+ZxxffNzfTmCksQ/cfgahSZNWS0cuaV8FGetE
PMnAWE7Kts7RO7OZXm9W6/Mnms/FApXAq7319vkapsypXsIzt5Fb0PTkQz5P+Xbq
nn2jP3W6e+3i2Af1RCImIgL2vRYWKkAVcxANxMttye7a5e8JGI/nZU082ZCaeHTH
MmJCQH7aHfHE4TQPiOhkqhhkvHvf7wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKq7
HHrx82kdTHdJnVnGbRoHzfCkMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMEExN0RGMjlDQTcxMUYxOTRGRTA0QjVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsE3MA0GCSqGSIb3DQEB
CwUAA4IBAQB33ZZ/urkgNuuyxZTbcl8kWw6zCqd2Za+EZfnO46SGMydYM5BIjrBo
Pa40cogAB5HCqDSBmVq6FVGveu9nYVHMoK5fWmhbR6NXWir7BA3qWeBU5eNuYENb
xUJddZm9GDIDbKpf49XReflZLXkD7+7XyIKjhlmZhkJOA7vAoxnyGbvFABAqVwiv
Xb+uPE69bSjo0K6aVc+SSuVyOXbLnHReEQLHFMzQ6YVj+gEQHLkxBSe8MmaE01r7
/4maX1akDO2XL7JFnSh5fGBxEZGI9O64rOv81gr2F4HFI36HxJSU9fb8Cfi41uvm
SfVa71GDsJkoguGT3Y5KDhwphCg5mVh9
-----END CERTIFICATE-----