Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57A4511EA6AA11F1B6CB76A2CE1D38B0.roa
File:                     57A4511EA6AA11F1B6CB76A2CE1D38B0.roa (raw, json)
Hash identifier:          SQBIOL692SlXewfmW4kadZPlBxCsLm0OzizNwI6gIBE=
Subject key identifier:   A6:6F:C0:71:4A:98:C1:58:43:0F:07:20:94:79:C3:58:F2:96:87:C6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E499
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57A4511EA6AA11F1B6CB76A2CE1D38B0.roa
Signing time:             Wed 02 Sep 2026 08:43:17 +0000
ROA not before:           Wed 02 Sep 2026 08:43:13 +0000
ROA not after:            Sat 01 Sep 2029 08:43:13 +0000
asID:                     17561
IP address blocks:        154.211.74.0/24 maxlen: 24
                          154.211.75.0/24 maxlen: 24
                          154.211.76.0/24 maxlen: 24
                          154.211.77.0/24 maxlen: 24
                          154.211.78.0/24 maxlen: 24
                          154.211.79.0/24 maxlen: 24
                          154.211.80.0/24 maxlen: 24
                          154.211.81.0/24 maxlen: 24
                          154.211.82.0/24 maxlen: 24
                          154.211.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124057 (0x1e499)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  2 08:43:13 2026 GMT
            Not After : Sep  1 08:43:13 2029 GMT
        Subject: CN=6a97e1a5-d55c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3f:b0:fb:6a:0e:fa:05:be:9a:01:d3:8b:ae:
                    7f:56:86:44:4f:af:63:cb:e2:7b:09:bb:64:33:52:
                    7b:c8:93:0b:df:cd:48:98:a4:9c:4b:f6:56:64:9d:
                    0c:bf:93:78:e3:ce:66:b4:94:10:d4:7e:80:df:33:
                    12:15:be:91:6f:dd:5e:15:cc:45:70:8e:d7:49:8b:
                    37:60:2a:28:44:b2:1f:04:cf:84:b2:bb:d1:de:06:
                    b2:c9:c8:48:a9:93:68:f9:b6:45:28:be:29:dc:89:
                    aa:5c:9f:69:c1:9f:fe:4a:14:e0:2c:29:1f:68:12:
                    f6:ea:d3:cf:c3:f3:92:a4:5f:05:cf:10:4e:33:40:
                    36:8e:36:6c:c5:e1:1b:0d:fd:d6:60:63:71:bd:2d:
                    7d:bc:b1:84:48:f2:39:7e:bd:19:a5:8d:68:97:34:
                    a2:78:ed:ed:55:c8:33:ef:49:b7:00:1d:08:93:03:
                    e2:fa:85:47:b5:80:d9:db:af:c7:b9:9f:b7:38:0d:
                    10:b9:ff:e8:fb:b9:c7:fc:e3:9d:a0:24:cc:fd:3a:
                    3f:53:d7:96:d9:46:1a:49:61:95:88:13:39:94:bf:
                    a5:9d:8e:cc:e1:28:99:1e:8b:8a:4f:59:5f:eb:7a:
                    25:81:5e:57:83:81:30:8f:07:15:6d:b1:db:cc:89:
                    49:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6F:C0:71:4A:98:C1:58:43:0F:07:20:94:79:C3:58:F2:96:87:C6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57A4511EA6AA11F1B6CB76A2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.211.74.0-154.211.83.255

    Signature Algorithm: sha256WithRSAEncryption
         95:b7:57:94:13:86:e3:19:93:ae:4f:ce:00:33:25:4c:42:e0:
         3a:61:90:4e:f1:16:bb:88:49:79:10:53:4c:7e:1a:b8:85:2b:
         96:f1:44:92:ff:db:5d:d2:93:db:49:12:0c:9c:3e:31:2a:ee:
         18:2b:68:0f:29:6f:a3:f8:4e:bf:23:a9:3a:bd:4c:0f:a6:b0:
         7f:06:1f:50:9f:5a:8d:e2:f7:90:c5:26:6f:26:6b:9b:8b:ba:
         ef:41:86:00:68:99:1f:60:a7:96:8d:43:e0:13:18:a1:f3:48:
         e0:38:04:40:ab:6e:5c:93:3a:aa:6f:dd:c8:96:e3:8a:7b:ba:
         4a:e0:b3:30:01:89:b2:5f:8a:1a:67:1e:bd:21:1a:c2:bb:ef:
         4f:ba:93:24:7f:78:c5:7b:76:5a:5e:a4:3f:fb:dd:c6:25:44:
         ba:9f:b8:46:f7:12:af:12:04:40:56:32:bd:4d:72:17:b3:71:
         b2:bf:b3:dd:09:81:45:37:a2:68:c0:5a:bd:bd:ac:47:82:65:
         c7:f0:e9:6d:c6:07:99:e1:8d:2a:14:d1:72:9e:60:62:21:d7:
         33:33:b4:24:bf:90:7c:6c:cc:69:71:c7:ed:01:76:73:54:97:
         f4:58:d0:40:57:19:07:bb:93:77:72:07:dc:6f:eb:eb:d1:d8:
         87:0c:64:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----