Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/142DA3169D6511F19DF25BBBCE1D38B0.roa
File:                     142DA3169D6511F19DF25BBBCE1D38B0.roa (raw, json)
Hash identifier:          rLRE6QuB9Rk7zat8A5xpq5n8qE3/A3ld+EIYK2Uk6wQ=
Subject key identifier:   9B:84:43:07:EC:7A:83:54:E8:09:6D:1F:0F:D9:66:1B:43:19:16:4D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E1A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/142DA3169D6511F19DF25BBBCE1D38B0.roa
Signing time:             Fri 21 Aug 2026 13:34:48 +0000
ROA not before:           Fri 21 Aug 2026 13:34:44 +0000
ROA not after:            Wed 16 Sep 2026 13:34:44 +0000
asID:                     17497
IP address blocks:        154.196.164.0/22 maxlen: 24
                          154.196.216.0/21 maxlen: 24
                          154.196.216.0/24 maxlen: 24
                          154.196.217.0/24 maxlen: 24
                          154.196.218.0/24 maxlen: 24
                          154.196.219.0/24 maxlen: 24
                          154.196.220.0/24 maxlen: 24
                          154.196.221.0/24 maxlen: 24
                          154.196.222.0/24 maxlen: 24
                          154.196.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 11 Sep 2026 10:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123296 (0x1e1a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 21 13:34:44 2026 GMT
            Not After : Sep 16 13:34:44 2026 GMT
        Subject: CN=6a8853f8-1dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a0:6d:d0:44:c4:15:47:8a:19:5a:58:71:70:
                    90:3b:07:31:bc:13:cd:3f:e9:e3:1a:3d:55:39:e1:
                    4c:ab:89:24:89:54:4c:13:93:4e:ba:fb:26:40:13:
                    90:c8:f3:5d:c2:29:c4:08:7b:21:59:38:b9:ac:1c:
                    6f:8d:e7:87:74:08:25:1b:79:0c:65:a3:d1:72:73:
                    90:dc:3e:7a:28:c6:0b:cb:65:b6:5c:4f:ec:9d:03:
                    bb:be:19:6c:0e:75:41:cc:7e:7c:eb:c3:af:63:a4:
                    51:21:fe:55:89:ed:3f:2d:81:93:dc:6d:be:d8:aa:
                    70:d8:cf:91:c3:83:c5:34:46:d5:f7:9f:03:cd:32:
                    e2:b6:e3:70:68:5e:d9:8a:93:69:da:08:2e:12:3d:
                    00:3d:53:22:d6:fe:96:e3:81:44:76:45:92:8a:0c:
                    62:e0:1f:bc:b0:57:96:35:85:16:0c:b3:d9:81:05:
                    9f:d7:02:dc:18:32:fc:b4:b6:1e:c0:e0:04:f4:28:
                    90:19:76:6f:2c:6e:85:e2:64:75:96:f2:c8:26:51:
                    f8:69:e5:8f:83:54:e5:6e:09:f3:15:16:7f:33:fa:
                    e0:b7:33:44:b2:99:84:39:bc:f9:1d:71:50:ae:77:
                    f6:44:6a:20:bd:58:f4:c1:dc:75:4d:35:43:3d:b6:
                    c9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:84:43:07:EC:7A:83:54:E8:09:6D:1F:0F:D9:66:1B:43:19:16:4D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/142DA3169D6511F19DF25BBBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.164.0/22
                  154.196.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         09:a5:b7:d7:08:5e:1c:cd:c7:06:7c:dd:c3:81:5b:85:44:09:
         9f:2c:f2:fd:93:84:da:26:f1:3b:83:28:f3:94:af:93:4d:3f:
         db:0e:3b:01:03:9a:9b:a8:98:d0:a9:e1:cd:7d:2a:28:68:a4:
         4d:07:25:7b:43:31:c3:c3:64:f7:c5:e1:75:d5:19:45:5c:ae:
         7d:41:d7:ea:d5:35:7d:0e:e3:67:20:b1:d1:0f:18:8a:a2:4c:
         9a:74:80:6c:70:eb:72:f5:c5:a6:d6:56:18:c8:ba:16:be:2b:
         14:28:ac:99:b1:d6:0a:d1:e4:2d:5b:46:d1:87:77:96:f7:27:
         23:e4:7a:4d:a7:23:e7:18:18:f2:06:cc:6a:93:f4:6b:ec:fb:
         49:47:b1:18:dc:a6:ac:c1:aa:2e:3e:ab:6a:60:23:f4:e3:47:
         72:68:bb:d6:9b:96:ff:40:17:aa:19:c1:c8:31:8a:7f:33:8d:
         2a:94:a8:a7:0c:fa:87:b9:8c:26:a8:24:94:2a:22:65:65:0c:
         b8:03:c8:81:19:cb:ef:3a:dc:f9:4a:b2:81:62:20:6a:6b:fa:
         da:f8:5b:9c:2a:96:f3:75:83:34:6e:bd:1c:70:78:81:a5:22:
         1e:23:a4:ef:d2:72:fa:76:76:80:4a:0c:ce:52:56:dc:d6:5a:
         2a:8b:43:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----