Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1B9C7ACADB411F18F5891C7CE1D38B0.roa
File:                     D1B9C7ACADB411F18F5891C7CE1D38B0.roa (raw, json)
Hash identifier:          OqCyGp/GwGp0rC3B6oZU51PM8khUjLbASgG7soxsMs4=
Subject key identifier:   A8:08:AA:0C:C6:69:99:FF:78:F6:C2:0D:61:F5:61:4D:99:68:AF:7E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E767
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1B9C7ACADB411F18F5891C7CE1D38B0.roa
Signing time:             Fri 11 Sep 2026 07:45:55 +0000
ROA not before:           Fri 11 Sep 2026 07:45:51 +0000
ROA not after:            Fri 16 Oct 2026 07:45:51 +0000
asID:                     17497
IP address blocks:        154.193.8.0/21 maxlen: 24
                          154.193.8.0/24 maxlen: 24
                          154.193.9.0/24 maxlen: 24
                          154.193.10.0/24 maxlen: 24
                          154.193.11.0/24 maxlen: 24
                          154.193.12.0/24 maxlen: 24
                          154.193.13.0/24 maxlen: 24
                          154.193.14.0/24 maxlen: 24
                          154.197.16.0/21 maxlen: 24
                          154.197.16.0/24 maxlen: 24
                          154.197.17.0/24 maxlen: 24
                          154.197.18.0/24 maxlen: 24
                          154.197.19.0/24 maxlen: 24
                          154.197.20.0/24 maxlen: 24
                          154.197.21.0/24 maxlen: 24
                          154.197.22.0/24 maxlen: 24
                          154.197.23.0/24 maxlen: 24
                          154.197.26.0/23 maxlen: 24
                          154.197.26.0/24 maxlen: 24
                          154.197.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124775 (0x1e767)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 11 07:45:51 2026 GMT
            Not After : Oct 16 07:45:51 2026 GMT
        Subject: CN=6aa3b1b3-53de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:77:91:11:fb:24:04:82:4e:5f:3d:fa:ff:82:
                    72:f7:dd:ab:91:01:7b:3b:3c:41:ba:c0:f9:ca:60:
                    aa:51:78:d4:10:ba:4c:11:69:48:85:42:ad:6c:33:
                    08:c7:03:50:fd:c7:4b:bb:75:20:a9:07:cc:ec:2a:
                    ae:f6:81:93:75:17:a0:fb:38:73:1e:2d:b5:c2:b9:
                    f0:13:43:f6:35:21:40:11:cb:26:de:13:25:7e:3e:
                    0c:3c:32:58:cd:91:6c:35:7b:57:e0:16:5b:dc:6a:
                    4e:0f:99:3c:67:a3:55:18:99:cc:92:65:73:b1:dc:
                    60:9d:89:fd:59:25:76:ec:cf:98:fc:fd:9f:03:de:
                    5f:a5:11:3e:62:16:9c:65:84:28:22:62:46:0c:d7:
                    74:87:3a:56:6a:b6:75:01:69:95:90:e6:6b:71:1a:
                    3f:23:ab:1b:77:fc:7f:af:88:84:88:f4:21:5d:02:
                    b7:77:36:55:da:82:e0:56:a8:15:c6:47:3e:cb:10:
                    22:e8:74:36:2d:84:12:d3:0f:9f:66:74:66:4b:21:
                    72:2d:7c:75:82:95:56:3c:bb:e2:7b:04:96:38:1a:
                    3e:1d:9c:97:75:49:6a:fc:38:d3:17:ed:ee:a8:42:
                    fd:4f:1a:72:21:c2:b1:ca:0f:57:28:6c:9a:64:e8:
                    b6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:08:AA:0C:C6:69:99:FF:78:F6:C2:0D:61:F5:61:4D:99:68:AF:7E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1B9C7ACADB411F18F5891C7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.8.0/21
                  154.197.16.0/21
                  154.197.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ba:64:dd:c7:8a:10:b1:b5:af:9b:f6:31:7b:b6:2c:d5:f7:5b:
         64:28:e8:be:4f:f8:c3:b9:45:28:83:8f:ea:1e:7f:68:c7:08:
         89:a7:eb:12:ff:f1:20:3b:19:64:f3:6e:07:63:51:be:cb:f7:
         65:f4:32:52:ad:bc:5f:02:6b:af:65:eb:c6:66:47:ca:dc:f6:
         3d:7b:61:90:df:f4:3d:84:b4:a1:91:f0:d1:98:cf:fe:97:5f:
         88:3c:68:8a:fb:76:26:aa:9a:67:a8:3d:d0:9a:7f:1a:9b:12:
         d8:de:bb:e1:63:2d:22:25:93:76:5d:1a:b6:93:c8:25:3a:23:
         3a:d0:4a:1c:b3:6d:e3:1a:ba:4b:77:e3:07:3b:12:c8:e9:97:
         dc:05:d1:a6:f8:44:62:0d:57:27:b5:eb:89:89:70:47:cd:1f:
         b0:a8:9c:f5:ca:94:ba:6d:3d:dd:30:8d:b8:3e:66:e5:af:a0:
         35:a5:18:ab:83:2f:99:11:96:11:dd:f4:c3:9b:62:04:eb:48:
         f3:ea:42:f3:86:95:f7:f0:e4:f7:08:db:f5:80:31:54:d0:2b:
         bf:ea:6e:cb:7b:3a:e8:41:7f:cc:eb:fd:50:2e:56:a6:db:40:
         bb:99:76:f9:18:f0:5b:1b:74:d7:30:24:bc:c7:0b:7b:ad:2f:
         7d:03:f6:f1
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAednMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTExMDc0NTUxWhcNMjYxMDE2MDc0NTUxWjAYMRYw
FAYDVQQDEw02YWEzYjFiMy01M2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu3eREfskBIJOXz36/4Jy992rkQF7OzxBusD5ymCqUXjUELpMEWlIhUKt
bDMIxwNQ/cdLu3UgqQfM7Cqu9oGTdReg+zhzHi21wrnwE0P2NSFAEcsm3hMlfj4M
PDJYzZFsNXtX4BZb3GpOD5k8Z6NVGJnMkmVzsdxgnYn9WSV27M+Y/P2fA95fpRE+
YhacZYQoImJGDNd0hzpWarZ1AWmVkOZrcRo/I6sbd/x/r4iEiPQhXQK3dzZV2oLg
VqgVxkc+yxAi6HQ2LYQS0w+fZnRmSyFyLXx1gpVWPLviewSWOBo+HZyXdUlq/DjT
F+3uqEL9TxpyIcKxyg9XKGyaZOi24wIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFKgI
qgzGaZn/ePbCDWH1YU2ZaK9+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMUI5QzdBQ0FEQjQxMUYxOEY1ODkxQzdDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDmsEIAwQDmsUQAwQBmsUa
MA0GCSqGSIb3DQEBCwUAA4IBAQC6ZN3HihCxta+b9jF7tizV91tkKOi+T/jDuUUo
g4/qHn9oxwiJp+sS//EgOxlk824HY1G+y/dl9DJSrbxfAmuvZevGZkfK3PY9e2GQ
3/Q9hLShkfDRmM/+l1+IPGiK+3YmqppnqD3Qmn8amxLY3rvhYy0iJZN2XRq2k8gl
OiM60Eocs23jGrpLd+MHOxLI6ZfcBdGm+ERiDVcnteuJiXBHzR+wqJz1ypS6bT3d
MI24Pmblr6A1pRirgy+ZEZYR3fTDm2IE60jz6kLzhpX38OT3CNv1gDFU0Cu/6m7L
ezroQX/M6/1QLlam20C7mXb5GPBbG3TXMCS8xwt7rS99A/bx
-----END CERTIFICATE-----