Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECE08110A6AC11F193F5EAB2CE1D38B0.roa
File:                     ECE08110A6AC11F193F5EAB2CE1D38B0.roa (raw, json)
Hash identifier:          zd1IxezgwNtqD2f7XaSBHSnPTM36YnLkoAIa7K0013w=
Subject key identifier:   05:46:ED:33:FA:54:4B:40:C2:10:C5:65:D2:85:C8:93:C3:A9:E6:A7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E49F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECE08110A6AC11F193F5EAB2CE1D38B0.roa
Signing time:             Wed 02 Sep 2026 09:01:47 +0000
ROA not before:           Wed 02 Sep 2026 09:01:43 +0000
ROA not after:            Sat 01 Sep 2029 09:01:43 +0000
asID:                     17561
IP address blocks:        154.211.104.0/24 maxlen: 24
                          154.211.105.0/24 maxlen: 24
                          154.211.106.0/24 maxlen: 24
                          154.211.107.0/24 maxlen: 24
                          154.211.108.0/24 maxlen: 24
                          154.211.109.0/24 maxlen: 24
                          154.211.110.0/24 maxlen: 24
                          154.211.111.0/24 maxlen: 24
                          154.211.112.0/24 maxlen: 24
                          154.211.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124063 (0x1e49f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  2 09:01:43 2026 GMT
            Not After : Sep  1 09:01:43 2029 GMT
        Subject: CN=6a97e5fb-a879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:26:9d:d1:1b:bd:16:52:ab:eb:8e:52:ce:53:
                    82:ac:e3:42:74:ce:b4:fb:9c:cd:f4:63:e6:ba:e0:
                    05:18:3c:55:04:b2:c4:0e:ad:2f:7c:65:49:91:dc:
                    5d:ca:3a:78:ff:fa:e6:f0:5d:40:84:8a:27:ab:5e:
                    f2:7a:3d:8a:c4:98:88:e5:4c:49:34:a0:3f:cf:94:
                    d8:54:45:5b:36:f2:6b:c4:45:d6:bd:43:ae:b3:da:
                    1c:ef:93:40:a9:1a:fe:b0:c1:15:68:33:14:30:16:
                    df:a5:40:55:1c:73:49:dd:27:88:a3:df:00:e1:d7:
                    3b:d4:6a:fd:96:a2:45:8f:19:0f:3d:9b:0a:b8:96:
                    4d:41:57:99:7f:eb:2e:c9:22:b7:40:eb:37:31:7b:
                    f7:6f:93:7e:c6:29:2b:a1:e2:33:5d:6e:79:00:34:
                    85:57:06:63:c0:5d:8c:5b:5c:92:09:d0:b8:01:5a:
                    49:be:05:74:55:39:fe:1f:09:b0:ba:95:21:0f:d6:
                    ce:7e:12:87:77:a9:c6:8b:bf:a6:bb:ec:8a:ba:9f:
                    f2:c5:6b:3a:e3:14:6e:77:db:ea:66:3c:b8:ad:fb:
                    a9:9d:01:02:85:c5:22:de:4a:32:f0:16:49:93:d0:
                    8d:23:01:35:9d:19:c0:a9:8f:49:86:1e:60:6d:52:
                    eb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:46:ED:33:FA:54:4B:40:C2:10:C5:65:D2:85:C8:93:C3:A9:E6:A7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECE08110A6AC11F193F5EAB2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.211.104.0-154.211.113.255

    Signature Algorithm: sha256WithRSAEncryption
         80:91:7e:fa:24:44:21:c0:99:02:ae:ce:66:76:df:31:0d:2a:
         26:48:73:fd:b5:b7:22:c4:88:5a:41:ad:79:a0:3c:b9:ac:35:
         aa:93:1e:6c:6b:a1:a6:99:a1:9f:ec:57:e7:6c:fb:f1:96:38:
         42:93:4a:51:41:2a:93:76:fd:25:cb:78:9f:d6:89:31:cf:cb:
         0a:db:89:b1:2e:42:df:8d:d0:41:f5:52:f6:bb:af:75:08:2d:
         4a:a8:33:91:a3:a3:80:f5:05:e2:cc:39:ae:10:26:b3:dd:43:
         d7:1c:79:51:4e:ac:fd:60:91:2f:48:6f:f4:a3:17:49:ed:21:
         84:68:6b:1a:d5:cb:cc:93:cc:8b:0f:cc:21:f3:d1:78:f8:9a:
         dc:26:50:40:f1:d3:af:7a:9f:4d:19:64:98:9a:4f:09:06:ae:
         50:e8:2f:ce:79:28:43:fe:ee:fb:75:26:01:fd:96:31:35:93:
         e1:36:19:39:c7:c6:60:24:5e:96:b5:ab:6a:ab:53:40:ed:3a:
         b8:70:11:c1:0e:88:36:3b:50:a0:cf:58:01:88:2f:21:5a:85:
         d4:34:ed:ff:c9:6a:67:32:1f:b0:aa:5c:66:a3:d9:02:f3:60:
         18:63:93:21:f7:7c:5f:82:83:58:da:d8:dc:5a:07:89:44:bf:
         19:49:4e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----