Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F2DC8CEACFD11F1A448F7E9CE1D38B0.roa
File:                     2F2DC8CEACFD11F1A448F7E9CE1D38B0.roa (raw, json)
Hash identifier:          HKAwKg5cvX1Qjh7QTn7k6mnMqEXkzcSlpGKR0ONNuGM=
Subject key identifier:   30:43:01:C6:52:42:BE:82:4B:5F:12:0D:26:76:48:B9:29:4C:2D:7A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E720
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F2DC8CEACFD11F1A448F7E9CE1D38B0.roa
Signing time:             Thu 10 Sep 2026 09:51:25 +0000
ROA not before:           Thu 10 Sep 2026 09:51:21 +0000
ROA not after:            Sat 10 Oct 2026 09:51:21 +0000
asID:                     141883
IP address blocks:        154.204.0.0/24 maxlen: 24
                          154.208.12.0/22 maxlen: 24
                          154.208.16.0/20 maxlen: 24
                          154.212.128.0/24 maxlen: 24
                          154.215.0.0/24 maxlen: 24
                          154.218.0.0/24 maxlen: 24
                          154.221.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124704 (0x1e720)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 10 09:51:21 2026 GMT
            Not After : Oct 10 09:51:21 2026 GMT
        Subject: CN=6aa27d9c-0e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:56:d4:58:ce:8c:76:83:70:db:bf:00:c5:8e:
                    ea:ba:ea:33:fb:80:4a:2e:a5:6a:3f:35:56:f6:04:
                    31:8a:e2:5d:42:7e:89:82:ea:70:11:06:ab:f6:f8:
                    0c:41:1a:dc:00:da:0d:ff:75:45:bc:4b:7c:2a:28:
                    94:fd:28:6a:97:1a:ba:4f:59:45:2e:e9:df:c6:49:
                    e4:c0:45:92:f3:f6:07:24:89:73:c6:62:ad:26:62:
                    5d:a3:47:54:ff:f2:29:3d:e9:9d:76:35:1d:c4:f9:
                    1a:e5:a7:bb:ab:29:c4:7e:02:49:64:f0:d2:1d:00:
                    ce:a6:35:bd:17:88:70:3d:af:dd:70:6c:5f:7d:98:
                    de:2b:1b:eb:48:33:cf:c0:2c:4e:34:a9:af:39:66:
                    75:55:2e:56:46:84:38:76:2e:fe:55:3d:a4:3f:a7:
                    ff:10:ad:41:4b:3d:a2:79:57:5a:b7:d2:12:ca:e8:
                    08:27:bb:1b:57:b3:ef:92:a3:e7:16:42:09:15:da:
                    24:4a:74:cb:18:74:99:37:25:6e:50:7b:02:63:e9:
                    2d:c1:33:3a:b8:1f:d0:92:7f:5e:d8:f8:96:39:a5:
                    22:95:ab:de:ba:4e:d8:dd:f4:97:f6:01:d9:2c:38:
                    42:c7:a3:86:81:e6:0b:53:33:a6:aa:ce:38:f1:07:
                    b7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:43:01:C6:52:42:BE:82:4B:5F:12:0D:26:76:48:B9:29:4C:2D:7A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F2DC8CEACFD11F1A448F7E9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.204.0.0/24
                  154.208.12.0-154.208.31.255
                  154.212.128.0/24
                  154.215.0.0/24
                  154.218.0.0/24
                  154.221.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:af:af:d2:c4:c2:39:c9:55:d5:a5:61:cf:62:4e:10:e4:f3:
         36:ed:0d:d6:f2:28:cd:34:f7:b0:d5:33:df:3f:3f:a9:a7:e7:
         49:db:b2:6a:dc:a6:59:ac:26:53:1e:a8:71:66:2d:fd:70:b5:
         d1:ce:b6:df:f3:2d:a7:93:a7:1b:8c:84:fd:26:f7:e0:9e:ba:
         47:2b:72:62:7b:77:61:80:0c:7c:dd:7a:17:03:ce:5f:79:d2:
         e3:f2:51:91:de:d1:53:ca:1e:b5:a4:b0:38:ef:2f:7c:41:8f:
         21:e0:01:51:f2:e8:7a:1e:d4:d6:ec:88:0a:69:1c:b6:ff:ff:
         a5:85:70:7b:60:eb:0a:d5:f6:67:a2:bf:e2:e2:6f:6f:f5:0f:
         67:bc:e5:e3:ae:25:09:a7:45:f3:d3:b7:58:bf:3c:c2:58:bf:
         f6:59:f7:4d:97:4b:46:3e:c6:36:13:c2:24:d6:b7:0a:87:33:
         50:a7:80:60:aa:bf:f1:84:bf:d3:c6:b3:92:c2:42:b0:6e:72:
         01:b0:69:2f:fb:a7:95:ea:3d:c8:54:24:09:fb:7a:33:63:9c:
         74:a7:97:d6:b0:35:99:11:b6:36:80:8e:84:d5:00:49:4b:5a:
         49:fc:c8:fa:d3:cd:9e:6b:e1:6d:91:e2:f3:f5:4d:18:5f:6b:
         a3:56:8e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----