Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14873BC89C8511F19B75FDE9CE1D38B0.roa
File:                     14873BC89C8511F19B75FDE9CE1D38B0.roa (raw, json)
Hash identifier:          WkYn4QR1S+113k9WYq/apoFyTFLAvLJ75L2pfp7X0ow=
Subject key identifier:   D2:86:A4:04:98:2B:2E:4C:8D:A9:F3:BE:36:54:52:B7:0B:D9:F2:03
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E082
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14873BC89C8511F19B75FDE9CE1D38B0.roa
Signing time:             Thu 20 Aug 2026 10:51:22 +0000
ROA not before:           Thu 20 Aug 2026 10:51:18 +0000
ROA not after:            Sat 26 Sep 2026 10:51:18 +0000
asID:                     138915
IP address blocks:        154.206.64.0/24 maxlen: 24
                          154.206.65.0/24 maxlen: 24
                          154.206.66.0/24 maxlen: 24
                          154.206.68.0/23 maxlen: 24
                          154.206.70.0/23 maxlen: 24
                          154.206.78.0/24 maxlen: 24
                          154.206.79.0/24 maxlen: 24
                          154.206.80.0/23 maxlen: 24
                          154.206.82.0/23 maxlen: 24
                          154.206.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123010 (0x1e082)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 10:51:18 2026 GMT
            Not After : Sep 26 10:51:18 2026 GMT
        Subject: CN=6a86dc2a-49a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:94:fc:14:2c:79:87:11:97:13:0a:bf:b1:b5:
                    b5:ee:2f:66:3b:39:9d:69:e2:87:6c:23:fa:77:8f:
                    2c:b7:56:a9:6d:05:3d:b0:2a:f4:18:ff:18:d0:e3:
                    c4:2d:72:cd:9f:17:3c:54:4b:fe:e5:dd:fd:c0:71:
                    5f:c5:4c:64:6f:77:26:7a:35:82:31:60:31:dd:2c:
                    dc:b7:58:86:8a:af:f6:1a:c0:c3:5e:63:f0:bc:c2:
                    ac:b9:cb:71:0c:b8:c8:a8:7f:12:b5:02:eb:64:d5:
                    5a:88:b9:91:09:bb:f9:41:61:1d:29:47:63:84:c6:
                    05:dd:f3:7c:43:60:75:7b:ad:26:fc:e1:5f:63:bd:
                    c0:91:17:9c:04:1b:45:d3:62:1a:75:b4:c1:5d:8b:
                    2a:c6:8e:99:3a:90:ee:cd:19:11:28:48:1a:01:b3:
                    94:bd:1a:49:ae:65:27:62:8a:f2:a6:92:6a:93:8c:
                    16:4e:a2:d1:09:4f:32:a1:8a:46:9d:15:aa:55:2c:
                    2e:ca:3c:c9:cc:3b:63:2f:12:c7:85:83:a3:2e:91:
                    57:e2:8a:90:57:51:ab:04:3e:5d:08:32:ec:95:9f:
                    83:b5:1a:40:91:5d:df:e3:7c:d9:9f:93:af:e9:17:
                    63:5f:e9:03:d2:08:f1:70:f6:ea:7e:61:99:41:9f:
                    33:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:86:A4:04:98:2B:2E:4C:8D:A9:F3:BE:36:54:52:B7:0B:D9:F2:03
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14873BC89C8511F19B75FDE9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.206.64.0-154.206.66.255
                  154.206.68.0/22
                  154.206.78.0-154.206.85.255

    Signature Algorithm: sha256WithRSAEncryption
         60:c1:2d:20:e7:2b:7a:a6:73:48:a9:32:f0:27:47:ca:15:d3:
         09:bc:3e:1c:ea:03:90:5d:a6:d3:eb:92:9f:bf:98:84:06:15:
         05:99:9d:9d:f8:7a:19:1c:61:12:96:16:09:5e:91:2a:22:b9:
         24:ce:3e:f8:d6:10:32:89:fb:9b:fa:23:76:d8:fa:53:a7:af:
         e9:62:3d:8d:c1:b7:52:4b:d5:f7:69:24:96:ec:ae:00:da:d1:
         c3:36:01:c3:b6:c7:0b:a5:aa:c2:46:52:29:ab:83:a5:db:ba:
         fe:d6:28:8d:d7:17:d4:ea:68:e8:0c:14:bf:ac:e9:10:0a:2d:
         90:59:83:70:2b:5a:f7:b8:78:88:d0:96:71:9e:a4:0e:7b:35:
         6d:fe:a2:16:67:af:e8:ee:2c:c1:0b:31:77:ae:88:b7:5d:83:
         fb:6c:f9:e0:61:2c:5c:20:e3:ad:ee:d3:bd:ed:e9:ad:1d:03:
         2d:48:69:d3:b2:89:a3:4e:4c:4e:53:2f:67:a8:3b:8b:12:e8:
         86:e8:60:e5:e9:5b:88:c4:ae:0d:64:c9:2b:ff:4b:cd:f7:61:
         69:ef:e3:03:6c:dc:9a:6a:90:1e:c8:a6:ed:46:a1:98:7b:91:
         0a:04:ac:50:76:76:2c:e0:c8:74:ad:f1:c3:a9:12:ac:2f:4e:
         ac:bf:56:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----