Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C0EA4E2B4D611F1AA2FD6CDCE1D38B0.roa
File:                     8C0EA4E2B4D611F1AA2FD6CDCE1D38B0.roa (raw, json)
Hash identifier:          j1JEAyunQEiZrhkzg/G/SiYIC4y3p4unoTdtwtFcfcw=
Subject key identifier:   52:88:0E:91:9F:FC:8C:83:55:F9:1C:3A:06:59:3F:99:1B:20:98:B4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E905
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C0EA4E2B4D611F1AA2FD6CDCE1D38B0.roa
Signing time:             Sun 20 Sep 2026 09:34:59 +0000
ROA not before:           Sun 20 Sep 2026 09:34:55 +0000
ROA not after:            Tue 27 Oct 2026 09:34:55 +0000
asID:                     138915
IP address blocks:        154.203.149.0/24 maxlen: 24
                          154.203.150.0/24 maxlen: 24
                          154.203.151.0/24 maxlen: 24
                          154.203.152.0/24 maxlen: 24
                          154.203.153.0/24 maxlen: 24
                          154.203.154.0/23 maxlen: 24
                          154.203.156.0/24 maxlen: 24
                          154.203.157.0/24 maxlen: 24
                          154.203.158.0/24 maxlen: 24
                          154.203.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125189 (0x1e905)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 20 09:34:55 2026 GMT
            Not After : Oct 27 09:34:55 2026 GMT
        Subject: CN=6aafa8c3-f660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:77:68:53:e6:5a:bb:7b:e2:b1:97:dc:54:ec:
                    6d:12:18:de:f8:eb:52:07:2c:b4:3f:0f:ee:02:b1:
                    17:16:97:fa:34:48:05:76:36:5b:12:d1:73:8c:32:
                    6a:67:2a:a2:eb:dc:f9:8c:75:c0:33:10:fb:da:52:
                    16:3f:f5:7a:ba:fc:19:8a:83:21:36:ed:58:86:41:
                    27:9b:c5:7c:a4:f4:4f:8a:bd:d2:38:ed:1e:a4:a0:
                    16:56:36:ae:10:b9:58:02:0a:e9:7f:3d:61:11:d2:
                    4d:77:60:c1:cd:49:e6:aa:79:ee:8f:e0:96:84:8e:
                    b1:1f:18:a0:c7:ee:08:fc:7e:e7:8b:9a:1b:c6:c6:
                    81:24:fc:99:52:0a:de:69:60:07:c4:4b:2e:51:06:
                    d2:94:8c:59:ab:1f:b3:75:39:09:05:1a:4d:9e:d1:
                    d6:e6:da:41:d5:23:10:96:30:16:8d:25:4f:7f:ed:
                    39:ee:4f:97:5e:97:47:79:a8:a9:85:39:5d:57:b7:
                    ed:f1:58:50:05:23:b1:d5:bf:31:af:b9:64:82:1b:
                    f3:8c:7d:05:5b:55:0e:0f:58:7a:54:3a:df:e4:fa:
                    63:3d:93:aa:ea:06:87:2a:3c:11:a7:4d:06:c6:a3:
                    5e:2a:e4:47:1c:b7:11:40:ea:e0:6c:27:63:61:de:
                    6f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:88:0E:91:9F:FC:8C:83:55:F9:1C:3A:06:59:3F:99:1B:20:98:B4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C0EA4E2B4D611F1AA2FD6CDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.149.0-154.203.159.255

    Signature Algorithm: sha256WithRSAEncryption
         27:5b:83:a5:04:63:93:43:8c:67:b7:8e:64:db:7f:18:e3:19:
         3b:3b:72:08:1a:76:9a:e2:4f:47:c5:36:b7:49:1d:f0:e0:0d:
         5b:04:00:bc:13:8b:28:ab:25:37:6f:db:15:68:df:88:cf:e3:
         d9:e4:53:a9:a3:8c:84:37:74:98:7e:64:bb:7f:c6:9f:79:df:
         1b:ed:30:98:f4:fa:50:80:c9:7d:36:ba:f1:b6:b5:54:ca:65:
         fe:bf:4f:a2:dd:ac:43:4e:f3:17:d9:87:89:cc:53:9a:f7:10:
         59:a2:00:6f:d7:27:29:d4:24:2f:66:62:d3:77:6d:3e:9d:e2:
         52:48:5a:eb:fd:69:1e:c3:36:0f:ea:61:e2:d9:eb:ad:c3:bc:
         c4:06:1d:72:b8:28:a0:a5:6b:f9:63:7c:46:47:1d:23:b9:92:
         e9:be:b1:fc:d0:41:17:ab:69:49:65:5a:32:75:6f:1c:7e:df:
         d1:3b:8a:cb:1d:e7:6f:a2:99:4f:b2:cd:21:39:00:83:11:5e:
         88:01:2b:39:18:81:9f:19:96:33:26:3c:c4:66:17:95:bf:5a:
         0f:f7:56:a7:59:13:3b:ff:1e:39:60:4e:65:ca:8c:ec:ca:c9:
         b3:8a:0a:d5:91:7f:61:4c:04:98:fb:ca:f1:1d:3f:b3:c5:cd:
         e7:2f:36:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----