Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B163694A13911F1990A82AECE1D38B0.roa
File:                     0B163694A13911F1990A82AECE1D38B0.roa (raw, json)
Hash identifier:          6cPXpa5O9Udfm7hJgQzNMC3jKUFZu4K4Gj2ii/23ncY=
Subject key identifier:   67:3D:35:C5:8B:B5:C0:EE:23:70:12:12:79:2A:04:B0:ED:04:6A:29
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E36B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B163694A13911F1990A82AECE1D38B0.roa
Signing time:             Wed 26 Aug 2026 10:29:40 +0000
ROA not before:           Wed 26 Aug 2026 10:29:36 +0000
ROA not after:            Sat 25 Aug 2029 10:29:36 +0000
asID:                     17561
IP address blocks:        154.212.120.0/24 maxlen: 24
                          154.212.121.0/24 maxlen: 24
                          154.212.122.0/24 maxlen: 24
                          154.212.123.0/24 maxlen: 24
                          154.212.124.0/24 maxlen: 24
                          154.212.125.0/24 maxlen: 24
                          154.212.126.0/24 maxlen: 24
                          154.212.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123755 (0x1e36b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 26 10:29:36 2026 GMT
            Not After : Aug 25 10:29:36 2029 GMT
        Subject: CN=6a8ec014-663e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:28:5a:a5:a0:7a:45:7a:e0:e9:5e:f1:c4:41:
                    d2:25:41:49:e0:65:4f:b1:82:65:57:53:ad:a8:ff:
                    3f:2c:3a:7f:68:1f:d3:e9:8c:10:8d:30:a4:a1:57:
                    3d:f4:3f:ad:5f:ec:c7:65:6f:01:e8:bd:21:8b:35:
                    37:19:b1:5f:c9:a3:9d:a0:4f:fa:96:2f:e6:77:d0:
                    f9:92:43:9d:b7:1d:a5:64:9f:b7:0e:c9:a0:bc:8e:
                    90:d1:8f:f8:68:16:97:0d:95:ac:9a:df:d5:7e:c4:
                    d9:2b:4b:9c:59:d5:7b:76:fa:d0:24:3a:8e:2e:f2:
                    9e:49:21:b8:47:62:ee:ea:48:60:0f:7c:4c:8d:ff:
                    43:58:9a:ce:51:00:af:3e:dd:dd:d5:c4:7f:b3:28:
                    94:5e:07:d4:a5:bb:fb:b7:a0:5b:64:5f:31:04:dc:
                    fd:f0:1f:80:c0:bf:50:78:26:57:9e:56:be:2e:f3:
                    9b:85:be:6e:cf:8f:e3:64:ae:b8:40:71:3d:5e:18:
                    49:59:3f:1b:ff:46:7d:01:7e:7d:20:82:10:0c:80:
                    a5:0c:73:86:0c:44:08:88:71:49:ce:a8:31:6b:ee:
                    b6:ad:a5:db:98:e3:cc:08:0c:c5:4d:2e:79:cf:55:
                    ab:63:43:1c:02:e3:96:3b:be:7c:fe:59:15:3e:3b:
                    bd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3D:35:C5:8B:B5:C0:EE:23:70:12:12:79:2A:04:B0:ED:04:6A:29
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B163694A13911F1990A82AECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.212.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b1:93:e9:38:e2:df:e2:d9:a2:35:23:04:c7:c4:9d:00:0a:6d:
         f0:06:f3:57:2f:b8:42:6c:0f:0b:c8:9a:53:a3:0c:e2:e2:e8:
         9c:8c:d0:47:56:5d:d3:96:53:a3:27:da:2e:a2:c9:d4:8d:64:
         4d:39:d6:f7:22:6b:c2:d0:ab:4a:b4:90:78:ea:70:2c:2d:0b:
         f2:92:f6:42:4c:7f:38:5c:ea:17:54:af:5b:e9:4a:e2:b7:5d:
         32:0f:f6:19:e5:56:ae:dd:07:7a:1a:eb:26:9a:84:1a:4b:5d:
         a8:01:98:9c:db:8b:8b:17:66:5b:bb:6e:d4:55:6e:5c:a8:34:
         56:88:f9:57:c2:af:ad:e7:23:24:ef:ed:5a:6b:18:ad:5f:ae:
         a8:49:ff:eb:38:da:46:c5:1d:de:53:1a:02:e4:ea:00:c6:e9:
         55:61:54:fb:7b:fc:50:b0:ba:43:4a:09:a3:fb:ea:78:78:c1:
         1d:57:86:7a:61:d1:93:b6:92:0f:6b:4f:57:6c:c7:02:de:0e:
         00:6d:5d:9e:3c:ad:40:d5:82:46:15:dd:9a:c4:5e:09:2e:a3:
         bd:0f:54:06:67:6f:7e:21:3d:21:77:ab:6b:f8:8a:dc:eb:ef:
         11:55:58:02:67:f0:b9:2e:67:aa:c4:97:50:9b:b3:6e:af:4d:
         c5:f4:29:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----