Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48775376B4D811F1BAFAE1DACE1D38B0.roa
File:                     48775376B4D811F1BAFAE1DACE1D38B0.roa (raw, json)
Hash identifier:          SjcLIKWhbPMPNbOf4JM9HegBZ4XK4dsE30kcsdAhT94=
Subject key identifier:   E2:61:30:70:5F:2C:8D:78:55:97:4F:28:D1:E4:B9:F4:59:9B:32:55
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E909
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48775376B4D811F1BAFAE1DACE1D38B0.roa
Signing time:             Sun 20 Sep 2026 09:47:25 +0000
ROA not before:           Sun 20 Sep 2026 09:47:21 +0000
ROA not after:            Tue 27 Oct 2026 09:47:21 +0000
asID:                     138915
IP address blocks:        154.206.68.0/24 maxlen: 24
                          154.206.69.0/24 maxlen: 24
                          154.206.70.0/24 maxlen: 24
                          154.206.71.0/24 maxlen: 24
                          154.206.72.0/24 maxlen: 24
                          154.206.86.0/23 maxlen: 24
                          154.206.88.0/23 maxlen: 24
                          154.206.90.0/23 maxlen: 24
                          154.206.96.0/23 maxlen: 24
                          154.206.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125193 (0x1e909)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 20 09:47:21 2026 GMT
            Not After : Oct 27 09:47:21 2026 GMT
        Subject: CN=6aafabad-73c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9f:29:5e:f3:4b:67:f1:db:3f:db:98:07:98:
                    f0:ed:f7:a2:df:1d:92:f1:34:f3:d0:f9:15:6e:66:
                    80:03:a7:1e:54:9d:0a:a3:e2:32:85:b2:0c:4d:25:
                    2d:0a:71:2a:33:c4:94:b6:6f:2c:d4:b8:c7:38:76:
                    f1:df:a1:7c:f1:bb:fe:2b:26:17:85:1c:cd:4a:05:
                    c7:86:90:44:0d:06:c9:cc:b8:39:dc:1d:bb:58:1c:
                    c0:39:59:bf:36:36:67:2d:24:b3:f5:47:0f:98:58:
                    83:1d:fb:fc:6a:ca:9f:24:ae:e4:32:86:14:97:dc:
                    79:f3:26:7e:40:64:10:20:68:6c:5c:20:7b:cb:9a:
                    db:6f:2f:c1:ec:31:a0:67:fe:87:c7:17:42:61:67:
                    09:26:20:d3:e0:cb:3c:46:98:49:60:59:7a:2c:67:
                    ad:20:7a:66:97:5e:88:f2:77:2b:32:21:3f:3d:f5:
                    8c:8f:a3:8c:98:a8:7f:24:72:db:07:33:f1:0f:3b:
                    3f:b5:4b:cb:39:b4:f4:1a:a5:56:7e:9b:07:a4:45:
                    58:95:9b:3d:9d:7d:67:ce:d9:3b:2e:b9:c0:c6:71:
                    cd:b2:02:7d:71:ba:e9:eb:79:d4:e6:41:09:d7:44:
                    ac:09:79:50:71:4b:b4:12:48:2c:54:63:81:74:7a:
                    ee:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:61:30:70:5F:2C:8D:78:55:97:4F:28:D1:E4:B9:F4:59:9B:32:55
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48775376B4D811F1BAFAE1DACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.206.68.0-154.206.72.255
                  154.206.86.0-154.206.91.255
                  154.206.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:25:dc:cc:f8:81:24:8d:25:c1:0d:9a:3b:c5:74:2f:b9:96:
         87:8b:88:93:0f:e7:43:2a:22:52:b7:13:0a:e0:d3:31:ad:47:
         a0:20:ac:0c:d7:1b:37:44:14:60:06:36:30:f4:ac:9e:48:fc:
         b0:61:b9:ca:09:09:75:63:5d:fc:74:b3:ee:84:87:57:68:16:
         e0:82:0b:7d:e0:0e:90:df:a4:a0:08:51:2a:96:d2:c4:14:f8:
         33:73:f9:d2:26:76:a2:43:fd:6f:dd:08:4a:3c:f3:b4:e1:39:
         a1:7c:09:61:b9:2c:39:1e:b6:e8:36:99:24:98:97:94:0a:56:
         30:65:b8:2c:27:81:d5:92:e5:6d:e8:5d:0f:12:c9:0d:eb:af:
         59:40:b5:2c:70:72:de:81:5f:1b:78:c8:a9:c7:47:11:fe:36:
         11:fa:be:2d:47:f1:95:b5:85:5f:3d:e8:16:01:01:c2:e6:70:
         de:ce:92:a6:62:ef:35:d7:0d:10:ff:a0:54:5a:b6:13:4e:d0:
         a8:f1:ca:b7:d2:5d:31:3c:62:31:55:f7:b0:f4:91:a8:85:8e:
         4f:3e:2c:d8:50:a3:b1:3d:a4:9b:c1:f7:1e:ac:cb:7f:10:ee:
         27:66:08:10:da:c9:4c:a4:34:d9:fc:32:ed:26:48:64:b4:d3:
         7c:7c:54:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----