Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9133E7F0AD0311F1A74C9D11CF1D38B0.roa
File:                     9133E7F0AD0311F1A74C9D11CF1D38B0.roa (raw, json)
Hash identifier:          e+hCNSbxRWd8hLhUW2Z7XlwphP/eHmOPZbeXUvrw7r8=
Subject key identifier:   5A:9C:DD:65:87:48:60:9B:5E:57:A6:80:84:69:91:B6:D6:76:3D:59
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E72D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9133E7F0AD0311F1A74C9D11CF1D38B0.roa
Signing time:             Thu 10 Sep 2026 10:37:06 +0000
ROA not before:           Thu 10 Sep 2026 10:37:02 +0000
ROA not after:            Sat 10 Oct 2026 10:37:02 +0000
asID:                     139646
IP address blocks:        154.204.0.0/24 maxlen: 24
                          154.208.12.0/22 maxlen: 24
                          154.208.16.0/20 maxlen: 24
                          154.212.128.0/24 maxlen: 24
                          154.215.0.0/24 maxlen: 24
                          154.218.0.0/24 maxlen: 24
                          154.221.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124717 (0x1e72d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 10 10:37:02 2026 GMT
            Not After : Oct 10 10:37:02 2026 GMT
        Subject: CN=6aa28852-354a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e9:43:1f:3b:7c:3a:2c:ea:a6:4a:50:34:76:
                    09:53:19:4b:b1:1f:15:3c:42:41:a6:bb:34:00:6d:
                    28:fd:29:94:4d:7e:eb:24:d8:36:f6:08:8e:dd:32:
                    c5:56:94:6b:b3:19:1c:50:1c:a6:56:12:3b:6e:18:
                    91:eb:9a:54:e4:3b:23:42:45:42:8e:1f:1a:4c:f8:
                    31:4f:d2:6b:70:b8:fd:ac:9d:20:fd:b6:a7:e0:51:
                    02:96:98:23:0a:bb:c1:f9:b0:9b:ae:4d:a1:06:f7:
                    5d:26:ae:ea:12:e6:f7:61:c1:93:b5:03:68:68:75:
                    46:5c:fa:a6:76:70:17:a1:a5:f1:7a:bb:2a:9b:b4:
                    5b:be:ae:15:6f:6d:5b:6b:cc:8e:c7:60:f2:d8:81:
                    8b:8d:a2:2d:5c:fd:a4:2a:ff:af:8f:ac:0e:48:c0:
                    6f:7b:82:c9:0d:3d:ba:6b:f4:e4:aa:4f:af:f1:8b:
                    87:c7:04:35:8b:9f:7d:a6:b0:1b:92:a9:5f:a7:76:
                    51:7b:25:d3:25:c3:1e:99:4f:83:f4:59:30:c1:93:
                    a4:b5:09:14:03:75:5f:3a:61:d0:18:24:53:7d:50:
                    da:36:b5:80:ca:9a:6c:1c:6f:4f:31:9e:68:61:c8:
                    4f:51:12:9f:fe:8d:7b:f2:38:b4:54:fd:77:d2:5d:
                    9e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9C:DD:65:87:48:60:9B:5E:57:A6:80:84:69:91:B6:D6:76:3D:59
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9133E7F0AD0311F1A74C9D11CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.204.0.0/24
                  154.208.12.0-154.208.31.255
                  154.212.128.0/24
                  154.215.0.0/24
                  154.218.0.0/24
                  154.221.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:86:e1:2d:fb:db:7a:ab:0e:03:cb:e6:70:f5:0c:51:2c:92:
         a9:e6:dd:05:4a:77:eb:ce:15:30:af:77:87:27:13:b5:3a:23:
         12:14:d8:04:ed:ca:46:01:78:ce:74:fb:c7:1e:7a:d3:93:76:
         87:fb:5c:5d:52:79:e8:83:f7:46:0f:98:aa:ad:19:c1:59:3a:
         b1:ec:69:2c:6d:a8:2b:8e:57:e3:33:df:1d:4b:20:31:0c:81:
         26:95:c9:2b:a3:d6:f3:f3:c8:b5:a4:e1:ca:b1:6a:00:47:6e:
         2e:4d:c1:07:0c:2d:4b:0b:f1:b6:05:ab:06:ee:f3:e8:ef:e9:
         4d:d4:37:f4:d9:bc:3e:04:e9:f3:43:4a:01:52:56:93:7a:a1:
         51:40:40:82:58:dd:d6:1d:46:fb:8e:25:67:ba:ca:55:b9:b6:
         7a:f4:38:9b:12:38:01:52:2b:a6:16:84:fc:6c:4a:52:6c:9f:
         37:19:58:26:c2:77:c9:9e:66:85:80:9c:ed:71:bb:42:33:cc:
         f6:fa:32:58:8d:51:06:3b:ec:0c:a7:fc:bc:e4:8e:db:9d:fb:
         bc:4e:5a:a5:98:b9:7c:8f:dc:c7:af:00:a1:88:9a:b6:6b:5c:
         67:66:80:fd:86:7f:2d:0c:f5:b7:b0:5c:06:da:8e:fe:f5:12:
         9b:3c:99:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----