Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C17DCC3EA9CD11F185AADEA2CE1D38B0.roa
File:                     C17DCC3EA9CD11F185AADEA2CE1D38B0.roa (raw, json)
Hash identifier:          Bfa9g1oG1/Pw3sdpR1/ANOvPXn5xLjqarGa0traiRl4=
Subject key identifier:   E0:36:E0:A0:AB:98:7C:F6:A5:2E:A9:12:B8:0C:99:1A:41:98:8B:4D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E5E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C17DCC3EA9CD11F185AADEA2CE1D38B0.roa
Signing time:             Sun 06 Sep 2026 08:34:21 +0000
ROA not before:           Sun 06 Sep 2026 08:34:17 +0000
ROA not after:            Wed 07 Oct 2026 08:34:17 +0000
asID:                     153517
IP address blocks:        154.86.21.0/24 maxlen: 24
                          154.86.22.0/24 maxlen: 24
                          154.86.23.0/24 maxlen: 24
                          154.86.24.0/24 maxlen: 24
                          154.86.25.0/24 maxlen: 24
                          154.86.26.0/24 maxlen: 24
                          154.86.27.0/24 maxlen: 24
                          154.86.28.0/24 maxlen: 24
                          154.86.29.0/24 maxlen: 24
                          154.86.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124387 (0x1e5e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  6 08:34:17 2026 GMT
            Not After : Oct  7 08:34:17 2026 GMT
        Subject: CN=6a9d258d-89e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:44:dd:4f:c0:50:9e:e1:84:67:ec:75:bc:d5:
                    ab:03:16:b2:a0:4b:44:2c:b0:51:25:b0:ae:e3:d0:
                    dd:9b:b5:da:8d:39:e1:3b:78:28:e9:6b:c1:b8:37:
                    78:ad:81:57:d2:5b:ab:e9:8b:c1:a8:37:74:1a:36:
                    23:56:46:45:4e:f8:12:da:26:4b:fd:0c:f1:54:d4:
                    2f:8d:ee:85:0b:3d:f9:ca:73:d1:af:7a:c6:72:66:
                    fe:8f:d7:3f:d0:45:4e:32:a4:dc:54:ff:0e:7a:81:
                    e6:c1:c1:2b:cb:6c:40:c4:46:63:53:f0:0a:78:ec:
                    55:70:a9:af:22:ca:30:70:de:96:8e:ea:73:ed:7e:
                    92:da:5d:0d:30:fd:71:f9:28:8c:00:4f:1e:d9:9b:
                    d7:bd:76:f0:c6:64:5c:7a:77:f1:f8:07:26:17:f9:
                    ac:cc:7f:d8:87:b3:53:d4:c0:10:6d:58:32:2b:b5:
                    2d:9b:be:e1:9b:d1:1f:fb:02:1f:2f:38:0b:21:87:
                    6f:07:2a:ce:cf:eb:4c:6c:4f:d0:c4:f2:6b:44:20:
                    45:a6:c5:98:88:f6:6b:64:4d:c7:a3:52:d9:18:9a:
                    0f:ed:57:bb:98:03:b7:2b:a7:21:ee:12:bb:24:e3:
                    b3:98:e2:e2:0c:32:96:34:1d:d9:6c:bb:fc:81:d1:
                    d2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:36:E0:A0:AB:98:7C:F6:A5:2E:A9:12:B8:0C:99:1A:41:98:8B:4D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C17DCC3EA9CD11F185AADEA2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.21.0-154.86.30.255

    Signature Algorithm: sha256WithRSAEncryption
         c3:88:29:52:54:bd:9f:ca:bf:7e:d8:02:43:26:40:ed:d8:cd:
         34:5a:bd:53:c0:d5:b9:be:7a:e5:52:47:70:5c:4f:59:98:2d:
         6c:31:b0:46:6c:da:e4:5b:3d:e8:e2:d9:ce:b9:71:60:19:c0:
         d9:31:c0:ef:08:34:43:98:b9:61:0d:67:09:15:3a:36:e0:47:
         34:5e:6c:fa:6a:28:b6:e5:d3:45:ce:63:03:4f:6f:ac:43:06:
         13:39:0f:62:98:f2:19:4b:b3:ea:6d:c0:ce:df:48:48:79:22:
         b4:5b:99:23:03:37:95:d9:80:1a:a5:af:7d:52:38:40:0b:95:
         a8:a8:f0:7c:32:00:7e:dd:77:5f:e0:26:d1:25:50:9b:b7:da:
         44:e0:e4:27:9b:13:60:de:59:a9:75:0c:23:fe:76:16:67:8d:
         3b:04:9d:c6:1f:8f:45:3c:54:1c:ed:b1:65:22:f3:da:da:31:
         14:20:ca:b0:ad:d4:aa:9f:71:93:7a:4b:7f:47:e2:4a:d4:4b:
         ef:47:61:2d:18:a5:66:87:87:48:fd:d2:80:d7:eb:ff:ff:50:
         8e:58:45:44:2e:fb:ba:4c:77:c8:de:0d:db:1e:8e:b7:43:da:
         61:b7:d2:94:91:5a:f0:e5:45:b9:e8:b4:13:51:d2:9a:ed:65:
         e7:4a:b7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----