Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F17D2AE49FA811F1A7F3CEB0CE1D38B0.roa
File:                     F17D2AE49FA811F1A7F3CEB0CE1D38B0.roa (raw, json)
Hash identifier:          AaXbcImoBwTT+RqWuY0MJ6ztL9luHpB2OeLPJ+5bkbI=
Subject key identifier:   27:E1:65:74:36:C6:6D:13:BF:1C:21:42:4B:E4:91:4B:A5:D1:56:AF
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E252
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F17D2AE49FA811F1A7F3CEB0CE1D38B0.roa
Signing time:             Mon 24 Aug 2026 10:45:38 +0000
ROA not before:           Mon 24 Aug 2026 10:45:34 +0000
ROA not after:            Sat 03 Oct 2026 10:45:34 +0000
asID:                     140869
IP address blocks:        154.81.32.0/24 maxlen: 24
                          154.81.33.0/24 maxlen: 24
                          154.81.34.0/24 maxlen: 24
                          154.81.35.0/24 maxlen: 24
                          154.81.36.0/24 maxlen: 24
                          154.81.37.0/24 maxlen: 24
                          154.81.38.0/24 maxlen: 24
                          154.81.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123474 (0x1e252)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 24 10:45:34 2026 GMT
            Not After : Oct  3 10:45:34 2026 GMT
        Subject: CN=6a8c20d2-1caa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:45:36:3e:bd:2b:9e:0d:dd:cd:c5:d4:c6:a5:
                    bf:4b:0b:fd:ae:55:46:93:26:e5:46:ed:f1:fb:ec:
                    a8:ff:75:0c:d9:ea:b4:12:ee:ad:1e:fb:61:15:36:
                    0a:25:87:00:20:66:7e:8d:77:e8:8a:86:a3:d4:47:
                    a8:f6:e2:2a:17:fb:94:78:9b:0e:e9:81:15:f6:b8:
                    f9:70:30:07:ce:b5:79:c1:9a:d6:f5:a8:90:3a:22:
                    e7:60:5b:56:e8:45:35:f5:5a:1f:c8:6d:16:66:bc:
                    2c:05:d3:ec:6b:b2:68:c6:49:49:83:55:6f:c3:97:
                    02:ce:23:f5:cc:98:7d:24:82:cc:6e:6d:81:42:0d:
                    be:c7:07:4d:4a:e7:dc:7c:6b:a8:c0:aa:51:0b:ba:
                    f1:75:3e:af:c7:53:fd:27:29:d8:83:2c:3d:e7:5a:
                    83:47:eb:3e:31:e4:40:df:3b:28:d6:72:50:e1:58:
                    25:78:6a:dd:fd:86:dc:e5:10:ef:e5:92:77:22:ae:
                    2c:2c:25:71:35:1c:e5:21:c6:a6:3d:10:64:1a:b8:
                    ef:4d:e3:a8:57:6e:3d:e0:ce:18:00:1b:c3:ea:c3:
                    c2:4a:e5:1a:23:98:f3:fa:42:41:34:7a:55:54:83:
                    89:90:80:d8:04:c7:c6:61:a7:90:4d:8c:a2:5d:8b:
                    5d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E1:65:74:36:C6:6D:13:BF:1C:21:42:4B:E4:91:4B:A5:D1:56:AF
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F17D2AE49FA811F1A7F3CEB0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         71:9c:79:20:63:bc:7e:ce:44:a7:33:1a:db:c3:2a:73:5d:47:
         61:27:f5:7b:5b:e5:32:e2:dd:90:0a:01:9e:5d:a0:a2:97:f1:
         d0:60:2d:ba:52:fe:b7:68:3e:f4:a5:30:98:c4:02:0e:68:c9:
         af:f9:3b:f0:11:f0:c3:7f:76:9b:6a:19:7b:fc:dd:e9:fa:8b:
         37:dc:6b:a7:2a:bd:e6:ae:31:2f:ab:5a:19:d5:6d:49:8b:6c:
         0a:13:c1:a0:e4:3b:63:83:b2:e2:da:29:0f:2d:f8:8b:e5:45:
         1c:a7:8e:c1:e7:f8:be:de:f0:bd:f1:a5:e6:0b:b9:eb:73:a9:
         4e:70:12:63:15:e7:32:c8:26:57:17:23:32:e2:33:94:46:76:
         c5:9a:a6:09:7f:35:13:91:ca:a0:31:db:55:d3:c5:1a:b9:1a:
         ec:4f:e8:9c:3d:4b:21:31:1a:74:a3:bd:9b:e4:5a:fe:28:21:
         47:06:ac:87:95:52:58:fe:e1:03:ee:bf:7b:61:78:65:bc:b5:
         04:bd:08:4a:20:ba:26:d8:4f:75:b9:23:2c:19:0f:9d:96:1c:
         ca:f9:35:bf:32:8a:62:27:6d:54:7c:0f:88:ff:3f:c7:8b:0d:
         4d:07:32:26:6b:ab:9a:e5:4a:3e:86:64:3b:8d:3c:8b:c4:d9:
         c7:53:7e:11
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAeJSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODI0MTA0NTM0WhcNMjYxMDAzMTA0NTM0WjAYMRYw
FAYDVQQDEw02YThjMjBkMi0xY2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0EU2Pr0rng3dzcXUxqW/Swv9rlVGkyblRu3x++yo/3UM2eq0Eu6tHvth
FTYKJYcAIGZ+jXfoioaj1Eeo9uIqF/uUeJsO6YEV9rj5cDAHzrV5wZrW9aiQOiLn
YFtW6EU19VofyG0WZrwsBdPsa7JoxklJg1Vvw5cCziP1zJh9JILMbm2BQg2+xwdN
SufcfGuowKpRC7rxdT6vx1P9JynYgyw951qDR+s+MeRA3zso1nJQ4VgleGrd/Ybc
5RDv5ZJ3Iq4sLCVxNRzlIcamPRBkGrjvTeOoV2494M4YABvD6sPCSuUaI5jz+kJB
NHpVVIOJkIDYBMfGYaeQTYyiXYtdfQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCfh
ZXQ2xm0TvxwhQkvkkUul0VavMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GMTdEMkFFNDlGQTgxMUYxQTdGM0NFQjBDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmlEgMA0GCSqGSIb3DQEB
CwUAA4IBAQBxnHkgY7x+zkSnMxrbwypzXUdhJ/V7W+Uy4t2QCgGeXaCil/HQYC26
Uv63aD70pTCYxAIOaMmv+TvwEfDDf3abahl7/N3p+os33GunKr3mrjEvq1oZ1W1J
i2wKE8Gg5Dtjg7Li2ikPLfiL5UUcp47B5/i+3vC98aXmC7nrc6lOcBJjFecyyCZX
FyMy4jOURnbFmqYJfzUTkcqgMdtV08UauRrsT+icPUshMRp0o72b5Fr+KCFHBqyH
lVJY/uED7r97YXhlvLUEvQhKILom2E91uSMsGQ+dlhzK+TW/MopiJ21UfA+I/z/H
iw1NBzIma6ua5Uo+hmQ7jTyLxNnHU34R
-----END CERTIFICATE-----