Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B45C32B29F8611F1867918E4CE1D38B0.roa
File:                     B45C32B29F8611F1867918E4CE1D38B0.roa (raw, json)
Hash identifier:          RvJPVqe2rFBBedjh6Sf2pffcKcEXBbXbLuPheeL9g6c=
Subject key identifier:   E9:97:75:64:DC:36:58:4C:00:C7:F5:D2:7E:04:87:FB:E9:88:35:E7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E1E8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B45C32B29F8611F1867918E4CE1D38B0.roa
Signing time:             Mon 24 Aug 2026 06:40:33 +0000
ROA not before:           Mon 24 Aug 2026 06:40:29 +0000
ROA not after:            Thu 01 Oct 2026 06:40:29 +0000
asID:                     62240
IP address blocks:        154.194.114.0/24 maxlen: 24
                          154.194.115.0/24 maxlen: 24
                          154.194.116.0/24 maxlen: 24
                          154.195.2.0/24 maxlen: 24
                          154.195.176.0/24 maxlen: 24
                          154.195.177.0/24 maxlen: 24
                          154.196.70.0/24 maxlen: 24
                          154.196.76.0/24 maxlen: 24
                          154.196.77.0/24 maxlen: 24
                          154.196.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123368 (0x1e1e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 24 06:40:29 2026 GMT
            Not After : Oct  1 06:40:29 2026 GMT
        Subject: CN=6a8be761-2c66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e9:9a:b8:fc:65:39:b4:74:74:60:c2:86:72:
                    ea:97:c0:20:71:05:bb:9c:47:fb:3a:97:2d:e8:1f:
                    6c:bb:4d:12:a9:04:e7:ca:ca:a8:63:e0:ef:45:34:
                    02:46:b8:18:f8:a4:a3:d4:84:61:e5:49:f4:2f:ea:
                    a5:d7:65:90:1d:38:dc:f3:d4:0e:bc:ce:01:f2:fe:
                    9d:2c:32:19:ee:d7:91:c0:3b:50:8e:5e:6e:25:be:
                    e6:d0:ae:42:d8:8a:d6:66:ea:e8:5e:ff:de:e8:42:
                    6e:6b:c8:ff:de:e1:0e:29:91:24:b1:87:c9:07:c6:
                    fe:76:fd:79:59:a3:5c:67:6d:26:54:15:a4:a9:ff:
                    5e:b4:75:9b:a6:a3:e9:a8:2c:3c:9c:b9:19:bd:7f:
                    fb:01:ac:3c:c7:08:45:d1:bf:e8:0e:f2:c1:76:ab:
                    63:3c:2a:a1:65:c5:32:ce:0e:b5:3c:ba:3f:36:78:
                    76:34:a4:4e:b7:71:82:ef:e2:9a:04:a3:cc:a7:65:
                    c2:9a:13:a5:1b:ce:11:d9:ad:94:cc:0c:71:f4:40:
                    38:f5:96:da:25:bc:9e:0d:7a:ac:d8:07:8c:5a:17:
                    c0:9e:f2:aa:cf:e8:98:42:e8:ad:60:3f:d0:d8:7c:
                    2c:8d:54:3b:5b:f4:28:36:f3:2c:09:05:b0:da:53:
                    00:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:97:75:64:DC:36:58:4C:00:C7:F5:D2:7E:04:87:FB:E9:88:35:E7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B45C32B29F8611F1867918E4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.114.0-154.194.116.255
                  154.195.2.0/24
                  154.195.176.0/23
                  154.196.70.0/24
                  154.196.76.0-154.196.78.255

    Signature Algorithm: sha256WithRSAEncryption
         29:32:be:76:ec:ad:8a:9e:22:d4:08:25:00:2f:a0:c0:2b:33:
         e7:9a:1f:6b:dd:7b:98:f6:f3:18:32:0c:96:c0:93:94:1f:81:
         ef:6d:c5:b6:b1:11:48:f0:2c:c7:ed:a2:1c:30:c4:94:72:3f:
         d6:76:ea:39:51:dc:2d:0a:5d:7e:f9:cc:39:2b:20:53:bd:20:
         2a:0a:e7:f2:0c:1f:cb:d4:e1:af:6b:e1:53:69:3e:2b:bb:ed:
         f9:4b:6c:db:78:da:48:53:df:7e:2f:1f:18:1f:2d:8c:39:a5:
         dc:65:b4:c0:cd:d5:ee:2c:6d:c4:8f:82:0a:7e:9b:59:f7:21:
         ae:1c:87:07:e7:13:55:d0:ae:46:f8:90:2a:f9:c0:31:81:f5:
         79:f0:96:db:6d:10:2c:d1:e4:66:5f:c5:05:74:43:7c:a7:c3:
         e4:d6:e9:8c:75:36:3d:30:53:f4:9f:c2:8e:f9:20:43:ab:d5:
         11:38:b0:04:9f:18:8a:93:3f:19:7d:ec:13:f9:88:1d:1c:a0:
         07:19:28:fb:f2:9b:d8:e8:28:8c:70:93:f1:e5:e1:4f:69:14:
         24:35:d8:ce:bd:f7:db:c9:92:cd:67:19:72:f8:0a:26:f8:3a:
         f1:92:06:95:d5:f8:04:8f:39:3b:d7:f8:ff:f0:21:11:60:93:
         73:87:80:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----