Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76E158F8ACF211F1AD359AACCE1D38B0.roa
File:                     76E158F8ACF211F1AD359AACCE1D38B0.roa (raw, json)
Hash identifier:          O2kKQJCuZ9KpTJXlbQZroonB4i8A/T10NctA0mcHlkY=
Subject key identifier:   89:85:E9:B8:6C:92:6D:4E:8E:92:43:C3:56:9A:01:EA:F3:71:C0:EE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E70E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76E158F8ACF211F1AD359AACCE1D38B0.roa
Signing time:             Thu 10 Sep 2026 08:34:40 +0000
ROA not before:           Thu 10 Sep 2026 08:34:36 +0000
ROA not after:            Sat 17 Oct 2026 08:34:36 +0000
asID:                     22773
IP address blocks:        154.213.207.0/24 maxlen: 24
                          154.213.208.0/24 maxlen: 24
                          154.213.209.0/24 maxlen: 24
                          154.213.210.0/24 maxlen: 24
                          154.213.213.0/24 maxlen: 24
                          154.213.214.0/24 maxlen: 24
                          154.213.215.0/24 maxlen: 24
                          154.213.216.0/24 maxlen: 24
                          154.213.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124686 (0x1e70e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 10 08:34:36 2026 GMT
            Not After : Oct 17 08:34:36 2026 GMT
        Subject: CN=6aa26ba0-ba7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:27:76:ed:ec:89:b7:cb:28:e7:94:99:06:08:
                    07:af:e6:86:99:85:08:b4:27:cd:92:07:f2:c3:ab:
                    82:34:76:9f:5e:5c:18:13:0f:d9:bd:c1:74:b3:5e:
                    27:35:74:71:6b:86:6e:b8:9b:f7:5c:b7:6f:06:a3:
                    72:42:25:bd:de:2f:93:73:8f:58:32:08:e3:38:db:
                    9f:b0:5e:e5:9a:ee:df:6f:54:04:bf:1f:12:2f:78:
                    be:5d:43:1e:dc:8a:29:1e:79:25:60:9e:07:b4:5e:
                    54:f8:5e:62:0f:de:0e:c3:28:b1:0b:79:97:51:fc:
                    bc:f0:78:1f:d1:80:57:48:9e:7f:f8:41:e7:af:5a:
                    d4:5e:5b:48:c1:d4:e8:f4:ca:5f:21:1e:36:ce:ce:
                    b1:ef:2d:59:d0:cf:50:c2:4c:2e:d9:0e:cf:5b:ce:
                    d3:7b:ca:4b:0a:07:8f:dd:a2:17:70:02:ee:1d:d3:
                    99:0a:22:39:cb:b2:9c:af:47:91:36:32:cb:b7:81:
                    7f:e9:ee:8c:c3:02:f7:ae:4d:d4:95:37:a4:41:19:
                    94:df:84:d8:0a:83:42:cb:aa:89:f3:03:21:b5:ec:
                    e6:9f:0d:fe:41:81:29:55:61:a1:53:eb:7c:61:1f:
                    32:ca:02:81:63:29:b6:61:7e:f3:e0:7a:04:e1:05:
                    3b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:85:E9:B8:6C:92:6D:4E:8E:92:43:C3:56:9A:01:EA:F3:71:C0:EE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76E158F8ACF211F1AD359AACCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.213.207.0-154.213.210.255
                  154.213.213.0-154.213.217.255

    Signature Algorithm: sha256WithRSAEncryption
         a2:ee:43:cf:03:49:79:0a:76:93:42:df:a9:e3:d2:0e:e7:96:
         4b:01:0f:eb:46:91:47:2f:24:f2:70:59:1e:ac:07:80:21:1d:
         e7:7d:c9:ac:76:49:6e:37:7f:88:94:37:9f:a5:dc:89:f2:13:
         e8:d2:4d:87:9c:d2:49:0b:37:fc:45:26:85:21:2f:98:ba:28:
         57:f9:6f:e9:4e:69:35:d3:8d:28:0b:65:e3:a6:b4:32:d6:0d:
         44:93:c7:28:f6:13:29:3f:e1:3f:d8:04:11:83:f9:e1:e5:46:
         46:b9:7f:5c:bf:28:a7:22:27:1f:10:5c:47:a3:d4:7c:dd:6d:
         e4:a6:31:21:ee:db:4e:ca:9b:cf:45:b6:b6:ad:c0:b2:81:35:
         af:70:f2:54:83:0b:8a:d5:ac:da:c1:16:b7:b2:55:d6:52:fd:
         48:09:60:e4:a7:48:6c:4c:07:fb:86:b5:37:75:f7:74:4d:e0:
         36:12:c0:c4:ff:86:ac:18:11:36:db:56:ec:d2:34:76:f9:df:
         77:71:ea:88:b7:1e:8d:10:0e:91:c6:23:af:db:09:79:42:e0:
         8c:f1:de:06:7f:3e:ae:35:eb:b0:41:fc:5e:79:10:2d:90:55:
         30:29:8c:31:ce:f8:00:3e:19:fa:89:bb:71:1b:e1:43:40:ec:
         9f:87:2a:88
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----