Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4AEA918ACE511F1AF45A9E0CE1D38B0.roa
File:                     B4AEA918ACE511F1AF45A9E0CE1D38B0.roa (raw, json)
Hash identifier:          2BRGTgsy3DYm6MjbVi4JiPYyuKCX8dOruVkjCQW+i8g=
Subject key identifier:   EA:37:EF:2F:A9:3A:30:C5:EF:1D:D0:C4:80:49:55:B1:D9:45:95:6B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E6D7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4AEA918ACE511F1AF45A9E0CE1D38B0.roa
Signing time:             Thu 10 Sep 2026 07:03:21 +0000
ROA not before:           Thu 10 Sep 2026 07:03:17 +0000
ROA not after:            Sat 17 Oct 2026 07:03:17 +0000
asID:                     22773
IP address blocks:        154.82.13.0/24 maxlen: 24
                          154.82.14.0/24 maxlen: 24
                          154.82.15.0/24 maxlen: 24
                          154.85.12.0/24 maxlen: 24
                          154.85.107.0/24 maxlen: 24
                          154.85.108.0/24 maxlen: 24
                          154.85.109.0/24 maxlen: 24
                          154.85.110.0/24 maxlen: 24
                          154.85.111.0/24 maxlen: 24
                          154.94.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124631 (0x1e6d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 10 07:03:17 2026 GMT
            Not After : Oct 17 07:03:17 2026 GMT
        Subject: CN=6aa25639-39a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7f:28:99:27:91:49:f0:27:ed:c3:79:9d:6a:
                    0c:28:29:31:db:e7:2f:28:cc:2f:76:dd:63:32:02:
                    60:8e:55:9c:88:2b:02:3f:ea:d6:c9:41:0b:f0:58:
                    65:11:10:05:45:04:bd:d2:87:87:54:2a:44:79:7f:
                    2e:68:ba:df:e5:82:02:f7:fd:41:d2:12:cf:78:b1:
                    09:cd:4c:34:9b:c8:11:f7:d5:21:02:63:c2:f5:42:
                    4d:b6:5c:00:fe:9b:de:7e:3c:59:d6:57:11:00:d8:
                    2c:39:b5:cf:9a:84:d5:2f:f4:9c:b2:43:b6:2d:83:
                    ad:2f:71:10:af:0f:94:44:3a:85:29:b0:75:e7:f0:
                    52:b2:4f:5f:ab:91:10:ea:a7:86:16:bc:bd:d3:34:
                    c0:0b:f7:62:11:50:60:6f:cc:ef:0a:2a:d8:91:46:
                    9d:85:d0:ac:49:ee:21:91:67:67:75:18:de:30:ab:
                    41:a7:e9:68:89:f9:98:e7:39:04:74:31:0e:45:19:
                    c8:b7:e1:06:50:cd:b9:af:19:5b:4c:6a:9c:61:25:
                    ff:46:d1:bc:ac:ab:8e:f9:02:50:1e:3c:f5:f4:05:
                    2f:db:db:07:4a:07:b1:5b:25:4b:76:b3:32:6a:77:
                    61:28:bf:49:0c:eb:f2:52:7d:81:be:f3:01:13:ac:
                    50:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:37:EF:2F:A9:3A:30:C5:EF:1D:D0:C4:80:49:55:B1:D9:45:95:6B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4AEA918ACE511F1AF45A9E0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.13.0-154.82.15.255
                  154.85.12.0/24
                  154.85.107.0-154.85.111.255
                  154.94.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         82:ef:e2:a0:11:b7:ad:83:86:55:ba:34:84:e6:6f:0d:83:03:
         31:62:f9:7e:ea:2f:2b:8b:7c:b8:4b:86:6c:1c:11:5b:ed:4e:
         45:c9:92:2d:12:c6:f4:bc:e1:a1:c5:91:8f:73:c9:66:bd:3d:
         41:ed:ec:f1:ca:f0:fb:23:f3:cb:94:d4:8b:c5:0d:f2:73:76:
         20:e1:ce:fa:ff:3c:32:6c:8d:f3:4e:73:f6:37:72:0e:1a:0b:
         ec:6c:de:39:6a:c6:b1:b7:2e:b4:37:8f:89:1a:13:1a:e2:ef:
         6e:fe:25:4e:9a:3d:85:27:bd:40:bd:51:11:c2:c3:61:7f:27:
         79:c5:99:ed:18:44:82:9e:e1:76:72:09:6f:9c:85:eb:0b:01:
         a1:56:a8:b7:2e:f9:7a:40:6d:bf:2b:1c:75:53:52:b8:14:21:
         87:0b:8b:47:99:18:b9:d7:26:3a:55:93:14:09:e4:d2:00:25:
         29:af:5d:de:31:07:cd:10:00:a7:ce:d1:57:0c:fd:0a:0a:60:
         34:b9:f6:56:ae:96:04:f8:da:8e:08:28:65:49:60:f4:6d:27:
         2b:81:66:78:40:05:c6:ad:8e:b4:26:1c:fb:fe:af:fe:a6:07:
         bc:ea:2c:35:3f:0f:30:dd:8a:a7:41:c5:93:5a:ba:cc:6b:e3:
         da:55:4f:7a
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgIDAebXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTEwMDcwMzE3WhcNMjYxMDE3MDcwMzE3WjAYMRYw
FAYDVQQDEw02YWEyNTYzOS0zOWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtn8omSeRSfAn7cN5nWoMKCkx2+cvKMwvdt1jMgJgjlWciCsCP+rWyUEL
8FhlERAFRQS90oeHVCpEeX8uaLrf5YIC9/1B0hLPeLEJzUw0m8gR99UhAmPC9UJN
tlwA/pvefjxZ1lcRANgsObXPmoTVL/ScskO2LYOtL3EQrw+URDqFKbB15/BSsk9f
q5EQ6qeGFry90zTAC/diEVBgb8zvCirYkUadhdCsSe4hkWdndRjeMKtBp+loifmY
5zkEdDEORRnIt+EGUM25rxlbTGqcYSX/RtG8rKuO+QJQHjz19AUv29sHSgexWyVL
drMyandhKL9JDOvyUn2BvvMBE6xQAQIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFOo3
7y+pOjDF7x3QxIBJVbHZRZVrMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNEFFQTkxOEFDRTUxMUYxQUY0NUE5RTBDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBACaUg0DBASaUgADBACa
VQwwDAMEAJpVawMEBJpVYAMEBZpewDANBgkqhkiG9w0BAQsFAAOCAQEAgu/ioBG3
rYOGVbo0hOZvDYMDMWL5fuovK4t8uEuGbBwRW+1ORcmSLRLG9LzhocWRj3PJZr09
Qe3s8crw+yPzy5TUi8UN8nN2IOHO+v88MmyN805z9jdyDhoL7GzeOWrGsbcutDeP
iRoTGuLvbv4lTpo9hSe9QL1REcLDYX8necWZ7RhEgp7hdnIJb5yF6wsBoVaoty75
ekBtvyscdVNSuBQhhwuLR5kYudcmOlWTFAnk0gAlKa9d3jEHzRAAp87RVwz9Cgpg
NLn2Vq6WBPjajggoZUlg9G0nK4FmeEAFxq2OtCYc+/6v/qYHvOosNT8PMN2Kp0HF
k1q6zGvj2lVPeg==
-----END CERTIFICATE-----