Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/109A0DEEA14211F194012FE4CE1D38B0.roa
File:                     109A0DEEA14211F194012FE4CE1D38B0.roa (raw, json)
Hash identifier:          wugEsbwwg3tfwXht+CwnJJCBRc6ozFiDZ0B/kDXuJtA=
Subject key identifier:   C6:B2:24:C3:70:14:D5:53:89:94:64:85:2B:8A:E7:98:D7:B5:9A:E7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E372
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/109A0DEEA14211F194012FE4CE1D38B0.roa
Signing time:             Wed 26 Aug 2026 11:34:15 +0000
ROA not before:           Wed 26 Aug 2026 11:34:11 +0000
ROA not after:            Sat 25 Aug 2029 11:34:11 +0000
asID:                     17561
IP address blocks:        154.215.148.0/24 maxlen: 24
                          154.215.149.0/24 maxlen: 24
                          154.215.150.0/24 maxlen: 24
                          154.215.151.0/24 maxlen: 24
                          154.215.152.0/24 maxlen: 24
                          154.215.153.0/24 maxlen: 24
                          154.215.154.0/24 maxlen: 24
                          154.215.155.0/24 maxlen: 24
                          154.215.156.0/24 maxlen: 24
                          154.215.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123762 (0x1e372)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 26 11:34:11 2026 GMT
            Not After : Aug 25 11:34:11 2029 GMT
        Subject: CN=6a8ecf37-21c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:83:cb:51:2b:84:d2:80:d0:45:71:7c:28:76:
                    66:39:ae:0d:c9:4c:be:9d:e7:74:be:f4:dd:8e:dd:
                    9b:2d:b7:ab:24:7b:ce:39:27:7a:e6:5d:d1:d0:96:
                    88:a2:7c:97:7f:fa:0d:57:6c:e3:f4:6b:37:46:8c:
                    b0:78:c1:ec:97:f2:6f:82:a6:87:de:61:29:75:7a:
                    a9:df:ca:d6:8d:29:f3:17:86:cb:31:0d:bf:71:70:
                    71:3f:3b:b2:84:42:f9:8f:b3:2e:93:b1:ce:9e:fd:
                    65:6b:da:f5:ed:7f:4b:63:b1:7d:fe:a0:11:5f:55:
                    aa:4a:75:fd:ff:b5:8b:39:b3:9d:16:42:5d:90:4d:
                    61:d4:09:49:22:d8:35:d7:2c:9c:b1:f0:e6:ee:81:
                    f0:48:d5:2a:d4:e0:a5:1f:02:d1:b8:be:97:88:a0:
                    42:70:46:09:e5:77:91:6b:59:34:6d:70:d4:14:bd:
                    c1:c8:fb:7b:15:cc:18:86:81:4a:e7:24:71:a2:4b:
                    88:2b:b3:87:8a:85:9a:54:fe:c8:18:c5:24:37:b4:
                    8c:1b:71:eb:3a:8d:99:b6:fc:91:93:65:91:0c:23:
                    7b:19:e8:4c:95:43:9c:ab:df:c2:bd:c3:9a:02:a6:
                    72:d3:98:fe:fe:36:bf:90:03:bc:80:dd:cf:22:b1:
                    4d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B2:24:C3:70:14:D5:53:89:94:64:85:2B:8A:E7:98:D7:B5:9A:E7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/109A0DEEA14211F194012FE4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.215.148.0-154.215.157.255

    Signature Algorithm: sha256WithRSAEncryption
         54:29:f2:1d:bb:08:34:a0:33:e8:a7:ca:88:69:58:5f:e0:8c:
         ab:98:af:4a:34:4a:0d:b8:6e:fa:3e:77:70:3b:51:2a:cc:14:
         6b:ec:39:11:b1:16:38:61:74:cd:be:b8:79:34:04:81:3d:88:
         37:a3:f7:a0:0c:05:55:37:8f:9a:7d:c6:98:b3:b4:98:b6:b6:
         01:37:36:92:63:52:83:6f:a8:65:4c:1a:ad:93:49:0a:02:76:
         80:10:16:27:5c:4a:b0:da:c1:02:a6:40:6c:bf:06:17:3a:61:
         be:10:c3:f2:c1:29:f1:65:8d:c6:2c:2d:ef:75:73:19:cf:44:
         19:0a:f4:61:fa:cb:9c:92:f1:db:41:0a:c0:1b:ca:2c:72:34:
         53:c4:3e:0a:f7:da:38:ce:18:3e:4c:57:83:81:ba:92:62:a8:
         b5:58:30:e5:85:0a:32:fb:53:93:9b:6a:99:b5:88:7a:32:77:
         77:4c:46:fe:03:89:40:38:62:16:1b:1e:d6:5b:a8:ff:e6:0a:
         e5:ff:c1:b6:a8:8e:33:eb:88:44:55:8d:0b:de:ba:63:ce:3e:
         2d:95:b4:a8:eb:f6:58:53:67:df:78:3c:01:05:18:b9:d5:d0:
         a3:e6:d2:b9:7a:6f:ac:e1:26:36:96:cb:7d:30:1e:d1:41:01:
         52:b9:32:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----