Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59FB1A42BAE111F1821136ACCE1D38B0.roa
File:                     59FB1A42BAE111F1821136ACCE1D38B0.roa (raw, json)
Hash identifier:          I2Z8UqAJvgNEqPtv0x373BlFHBONxw8vVfwOGBeS0zo=
Subject key identifier:   12:2A:1B:19:94:7C:7E:7B:0B:70:78:0C:C2:4A:0D:E9:0D:FB:C9:73
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EB07
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59FB1A42BAE111F1821136ACCE1D38B0.roa
Signing time:             Mon 28 Sep 2026 02:07:27 +0000
ROA not before:           Mon 28 Sep 2026 02:07:21 +0000
ROA not after:            Tue 06 Oct 2026 02:07:21 +0000
asID:                     45194
IP address blocks:        154.84.223.0/24 maxlen: 24
                          154.84.233.0/24 maxlen: 24
                          154.84.242.0/24 maxlen: 24
                          154.84.244.0/24 maxlen: 24
                          154.84.245.0/24 maxlen: 24
                          154.84.246.0/24 maxlen: 24
                          154.84.247.0/24 maxlen: 24
                          154.84.248.0/24 maxlen: 24
                          154.84.249.0/24 maxlen: 24
                          154.84.251.0/24 maxlen: 24
                          154.84.252.0/24 maxlen: 24
                          154.84.253.0/24 maxlen: 24
                          154.84.254.0/24 maxlen: 24
                          154.84.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125703 (0x1eb07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 28 02:07:21 2026 GMT
            Not After : Oct  6 02:07:21 2026 GMT
        Subject: CN=6ab9cbdf-cc42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6b:19:cd:7f:52:68:49:3f:ac:5e:ac:c5:21:
                    e9:6e:56:4f:3c:b3:c6:eb:e4:71:5b:11:4b:b9:ec:
                    75:80:2e:88:dc:31:6c:d2:75:bf:c5:79:f2:33:7c:
                    d2:2c:ad:fb:15:34:8d:a5:36:e1:48:5a:a6:e0:0a:
                    07:6b:f8:07:18:15:b5:5c:95:8a:05:d2:13:37:39:
                    5f:b4:a4:d3:e0:ae:9c:6a:07:35:7b:7c:36:20:d1:
                    5c:c4:38:d7:ef:26:04:89:30:f6:8f:65:18:ae:d7:
                    f2:63:e2:dc:f3:f4:60:23:6b:dd:ad:81:dd:2e:db:
                    64:e2:e5:e1:e3:38:d4:0b:0f:f3:3d:7f:23:82:71:
                    2a:d2:77:a2:f4:7f:e9:c8:b0:be:7f:5f:b3:ad:73:
                    ef:f0:cd:20:2d:c3:be:c1:4d:79:31:9f:33:14:2e:
                    3f:fe:18:5c:05:81:6f:90:ea:6e:9e:e1:3f:51:e8:
                    62:a9:6c:d3:49:7e:4e:6e:bd:f4:1a:74:be:26:86:
                    26:92:d3:82:91:e1:99:be:08:95:90:a2:12:62:f8:
                    a5:8a:25:54:1d:b4:eb:07:a0:97:7b:44:d3:ab:99:
                    e1:65:00:15:45:d2:4e:23:0d:8c:05:36:b5:26:92:
                    82:16:ad:ba:e6:ac:0a:40:e5:19:a7:ab:9a:66:69:
                    cd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2A:1B:19:94:7C:7E:7B:0B:70:78:0C:C2:4A:0D:E9:0D:FB:C9:73
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59FB1A42BAE111F1821136ACCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.223.0/24
                  154.84.233.0/24
                  154.84.242.0/24
                  154.84.244.0-154.84.249.255
                  154.84.251.0-154.84.255.255

    Signature Algorithm: sha256WithRSAEncryption
         13:82:7f:d1:8d:a0:1a:b1:d0:b1:3e:a7:97:85:cc:a7:75:e1:
         82:7e:29:ca:94:c3:c5:54:07:bb:c8:5a:41:bf:f9:ec:d3:87:
         0a:18:be:50:e8:ba:e7:c0:b2:67:34:36:93:5e:50:35:fb:2e:
         4e:f0:13:0e:7d:fa:d4:66:0c:01:78:43:de:77:b5:a5:7e:fc:
         fc:76:80:d9:58:76:21:19:f5:cd:cd:8a:70:ea:48:a4:1e:e9:
         39:89:b2:9d:d1:97:05:ed:80:b7:2e:62:b9:1c:ff:2d:30:c0:
         c9:3a:0c:48:0b:eb:d6:44:0b:a7:bf:1a:34:e4:70:74:4d:d0:
         bb:66:ba:ee:2a:80:c3:f1:45:08:f8:e0:b5:da:0e:51:04:43:
         de:5f:c9:cd:32:19:f3:0f:4e:20:b9:bc:97:bc:5a:f5:dd:8a:
         ec:8b:f9:fe:e8:ba:da:61:2f:21:e8:d6:27:e3:4e:7f:05:9d:
         53:fe:ab:07:0c:d7:26:2c:91:b0:e6:ed:11:15:3d:b0:22:a2:
         1c:46:ca:23:6f:19:fc:80:fb:a5:31:11:1a:37:6e:a0:40:04:
         a1:14:a0:bf:53:b3:8a:1d:5d:db:9f:45:22:07:c0:2e:53:ac:
         4e:20:55:c1:c9:f2:e5:5c:e7:55:bf:96:d5:79:07:75:16:9b:
         a2:ee:30:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----