Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65C336149C8911F1A4972204CF1D38B0.roa
File:                     65C336149C8911F1A4972204CF1D38B0.roa (raw, json)
Hash identifier:          Vv7LfvACmdh4uBDlldg8UkGkiJVBlkJqrMCoj0VcTNY=
Subject key identifier:   34:3A:7F:9B:8F:37:67:F3:F3:2B:2B:53:45:58:1C:E4:08:C8:71:03
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E092
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65C336149C8911F1A4972204CF1D38B0.roa
Signing time:             Thu 20 Aug 2026 11:22:16 +0000
ROA not before:           Thu 20 Aug 2026 11:22:12 +0000
ROA not after:            Sat 26 Sep 2026 11:22:12 +0000
asID:                     138915
IP address blocks:        154.205.128.0/24 maxlen: 24
                          154.205.129.0/24 maxlen: 24
                          154.205.130.0/24 maxlen: 24
                          154.205.131.0/24 maxlen: 24
                          154.205.132.0/24 maxlen: 24
                          154.205.133.0/24 maxlen: 24
                          154.205.134.0/24 maxlen: 24
                          154.205.135.0/24 maxlen: 24
                          154.205.136.0/23 maxlen: 24
                          154.205.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123026 (0x1e092)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 11:22:12 2026 GMT
            Not After : Sep 26 11:22:12 2026 GMT
        Subject: CN=6a86e368-123f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:12:37:08:70:6c:87:ed:cb:96:bf:4e:17:34:
                    46:f1:d7:10:62:ea:0a:5c:b8:a7:23:28:d0:05:b4:
                    ca:b5:89:21:dd:82:54:c0:10:ea:2f:1f:69:00:05:
                    6b:ca:d0:1d:9b:e1:95:8f:2b:8b:af:4e:8b:df:55:
                    a2:22:0f:f8:48:70:68:3c:5c:da:a3:b4:e1:e6:06:
                    c3:c1:17:71:6e:16:bb:fd:57:a0:1b:2f:19:bb:c9:
                    e5:68:c6:dd:0c:a0:21:97:d8:c4:0a:b4:a4:5a:a3:
                    4b:69:50:b0:c9:20:63:f4:8b:1d:6c:e7:99:83:9b:
                    11:32:b6:e5:cc:38:6e:79:03:15:21:cc:dc:7e:cd:
                    cd:37:b5:71:58:1b:16:e9:42:c0:40:d3:e6:48:62:
                    a8:3e:7e:da:3a:1b:e1:e7:79:b9:92:93:0d:f3:73:
                    0d:a4:f7:71:96:c4:59:00:bb:99:66:0b:33:d2:ba:
                    d1:40:e9:4d:da:b5:b8:a2:6f:49:30:96:e9:c9:36:
                    ed:27:94:a1:3e:7c:45:de:74:ad:1b:2b:00:3e:a4:
                    97:ca:ef:c3:46:d9:85:0d:0b:c8:23:01:be:1a:a5:
                    a6:75:bc:14:4d:8f:bf:10:d4:b5:99:fe:90:bf:e4:
                    f3:a0:bc:0d:46:d7:12:b8:f4:0a:bd:7d:b2:e6:cf:
                    f3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3A:7F:9B:8F:37:67:F3:F3:2B:2B:53:45:58:1C:E4:08:C8:71:03
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65C336149C8911F1A4972204CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.128.0-154.205.138.255

    Signature Algorithm: sha256WithRSAEncryption
         45:f6:a0:2e:91:e1:bc:a1:00:6e:df:54:55:f3:31:9a:ad:86:
         f1:99:c5:e1:b5:18:23:ae:ea:45:e8:a4:4a:d2:0e:72:ba:8e:
         7d:a1:8e:33:6d:33:03:b0:91:f5:53:d3:b9:bb:45:3e:b0:79:
         ad:05:54:fc:ea:81:87:0f:08:78:f0:49:27:de:0d:7f:20:69:
         2a:b8:80:bb:fd:c4:f9:6e:24:74:29:e1:08:62:a9:8c:8c:65:
         ae:6f:f3:cf:9a:26:25:4e:08:16:16:43:d7:73:13:8f:b9:b9:
         e8:f6:4d:e0:f1:57:d3:b7:e8:e3:8c:34:24:04:72:8b:0d:69:
         c0:b1:70:dc:5b:c7:6b:8a:09:ff:bd:cc:09:b5:59:d2:82:78:
         7c:c2:09:c2:d9:49:66:3f:5a:a8:b4:c0:86:90:4e:20:ea:41:
         ad:1a:e0:97:aa:3d:cc:98:e1:8f:ba:ec:97:64:00:8a:77:30:
         62:5b:0b:f3:12:e5:70:ed:8e:d5:d2:bf:57:ff:0b:92:e6:60:
         cf:25:ed:90:6a:3b:90:00:0e:27:f7:f4:ec:2f:3f:d9:51:d7:
         a4:ca:37:49:40:1b:c6:50:4c:d0:1b:c8:d6:cf:3e:e6:42:86:
         35:40:d7:37:3e:86:ed:43:fe:89:7a:ed:40:46:bc:1c:f7:80:
         ed:85:c4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----