Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B4EBE8CBCC911F1AB00BFA7CE1D38B0.roa
File:                     0B4EBE8CBCC911F1AB00BFA7CE1D38B0.roa (raw, json)
Hash identifier:          Xuz4rKzoxGrxBu3/ork8x6JE6yXBzPm6dKtRyp8J5vM=
Subject key identifier:   67:B6:FB:3A:39:9E:21:16:56:C9:42:79:A3:91:42:68:0B:3A:84:5C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EBB2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B4EBE8CBCC911F1AB00BFA7CE1D38B0.roa
Signing time:             Wed 30 Sep 2026 12:18:29 +0000
ROA not before:           Wed 30 Sep 2026 12:18:25 +0000
ROA not after:            Sat 10 Oct 2026 12:18:25 +0000
asID:                     131274
IP address blocks:        154.203.32.0/19 maxlen: 24
                          154.203.72.0/21 maxlen: 24
                          154.203.92.0/22 maxlen: 24
                          154.203.192.0/22 maxlen: 24
                          154.205.160.0/21 maxlen: 24
                          154.205.176.0/21 maxlen: 24
                          154.206.48.0/21 maxlen: 24
                          154.206.120.0/21 maxlen: 24
                          154.206.240.0/20 maxlen: 24
                          154.210.96.0/20 maxlen: 24
                          154.210.112.0/21 maxlen: 24
                          154.214.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 12:18:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125874 (0x1ebb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 30 12:18:25 2026 GMT
            Not After : Oct 10 12:18:25 2026 GMT
        Subject: CN=6abcfe15-35f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c0:72:46:7b:99:f8:fd:0a:06:20:89:b6:be:
                    e5:5e:14:42:68:fb:9e:eb:54:4a:cf:7c:5e:8d:b0:
                    12:e7:b6:b1:bc:e3:8a:c6:88:f5:ca:c3:ab:e7:90:
                    60:bc:3e:d4:3f:07:98:63:b4:92:39:fa:4d:ec:6f:
                    93:68:e2:a7:f2:7e:8e:83:50:91:d3:57:35:66:3b:
                    3f:31:a6:95:02:69:7b:46:db:e5:34:88:8d:4e:4d:
                    1b:dd:69:0a:89:48:aa:83:24:8b:d2:50:33:90:2f:
                    95:ce:8b:14:e5:3a:a0:ee:d5:76:72:ba:4c:c8:d8:
                    97:2b:99:c3:ce:42:c9:e5:91:dd:35:f8:0e:8c:c4:
                    db:31:35:43:35:f5:90:cc:c5:62:14:94:d6:35:43:
                    61:d4:5c:de:c1:35:6b:33:89:92:8f:c7:58:d4:95:
                    01:6c:6b:4f:65:0e:ec:d4:a9:b6:58:e2:c0:5c:7a:
                    c0:f1:7c:55:b6:46:46:42:6a:63:fc:95:13:50:af:
                    71:e6:8c:57:a1:4a:90:d2:ed:46:b7:9d:d2:90:ff:
                    a2:f2:c4:f2:77:66:7f:3f:cb:11:d5:2f:c7:67:dd:
                    35:b3:2a:78:00:8b:8f:a4:00:da:7a:19:ca:10:71:
                    3b:72:e2:de:55:23:94:8a:80:74:c0:3f:1e:df:b3:
                    b9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B6:FB:3A:39:9E:21:16:56:C9:42:79:A3:91:42:68:0B:3A:84:5C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B4EBE8CBCC911F1AB00BFA7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.32.0/19
                  154.203.72.0/21
                  154.203.92.0/22
                  154.203.192.0/22
                  154.205.160.0/21
                  154.205.176.0/21
                  154.206.48.0/21
                  154.206.120.0/21
                  154.206.240.0/20
                  154.210.96.0-154.210.119.255
                  154.214.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a6:dc:4b:92:c8:57:f8:55:aa:dc:63:14:2f:bf:0b:bc:97:5f:
         e1:77:49:ac:5a:dc:40:93:db:5d:e7:38:83:70:e4:4a:56:a0:
         e1:4f:a8:fd:6f:83:4d:20:b5:7e:d2:f2:17:4c:9f:1a:9f:d5:
         b6:13:70:aa:a2:a4:9f:db:44:ff:28:0b:f3:9c:25:51:e3:6b:
         08:1e:60:ac:ff:16:eb:09:ff:92:f8:40:cb:fa:e6:a9:c8:5b:
         a0:48:7c:97:b8:2f:1e:bf:13:7a:b0:1d:d9:fb:ff:78:4d:27:
         4f:e2:22:84:68:8d:d7:fb:b6:f4:d1:7d:3b:5a:40:d4:c9:0f:
         59:e9:fc:47:a8:3b:ba:c7:22:b5:c5:ec:09:7d:16:aa:d1:c1:
         3b:35:04:61:37:61:db:37:30:06:85:d9:23:a4:7f:1a:42:e8:
         8b:fb:e4:00:ec:d6:f6:e3:99:9a:d2:03:80:bc:1d:64:76:b6:
         cf:b7:0e:34:86:a8:96:99:0b:26:40:3e:db:ee:bd:c4:67:eb:
         67:ba:71:7a:dc:3f:e5:e2:26:86:28:0b:e8:ae:f6:7a:81:b8:
         dd:f4:20:65:7f:ee:52:81:c7:b4:b5:61:76:8e:fe:b2:04:c9:
         99:77:36:92:da:ee:8f:f9:b0:1a:43:7b:14:76:b6:30:a1:13:
         11:57:84:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----