Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14339B749F8411F1831160D7CE1D38B0.roa
File:                     14339B749F8411F1831160D7CE1D38B0.roa (raw, json)
Hash identifier:          6N3XBjpIVe6qAVbiVNahao/D4clZtyE4oJ6kXMcJqpw=
Subject key identifier:   63:EB:AF:8A:D5:46:FB:F7:2B:69:9A:FD:9C:F2:59:1B:70:03:88:57
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E1E0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14339B749F8411F1831160D7CE1D38B0.roa
Signing time:             Mon 24 Aug 2026 06:21:45 +0000
ROA not before:           Mon 24 Aug 2026 06:21:41 +0000
ROA not after:            Thu 01 Oct 2026 06:21:41 +0000
asID:                     62240
IP address blocks:        154.194.106.0/24 maxlen: 24
                          154.194.107.0/24 maxlen: 24
                          154.194.108.0/24 maxlen: 24
                          154.194.109.0/24 maxlen: 24
                          154.194.110.0/24 maxlen: 24
                          154.194.111.0/24 maxlen: 24
                          154.196.79.0/24 maxlen: 24
                          154.196.80.0/24 maxlen: 24
                          154.196.81.0/24 maxlen: 24
                          154.196.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 11:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123360 (0x1e1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 24 06:21:41 2026 GMT
            Not After : Oct  1 06:21:41 2026 GMT
        Subject: CN=6a8be2f9-e5bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:21:6b:be:f7:02:5b:92:d3:f1:13:27:65:f0:
                    3f:24:26:fb:a8:d9:46:e2:d9:8f:55:b7:ee:4f:7f:
                    45:b1:ea:4f:11:15:c0:fc:5f:db:04:1a:be:28:3e:
                    b7:eb:dc:22:13:dc:b3:3f:6c:dc:24:3c:13:f8:00:
                    98:2a:0f:ba:1e:02:7f:2f:a9:77:8d:bf:83:10:d1:
                    df:b0:f3:b3:1b:92:7a:13:4c:de:cd:22:4f:f6:63:
                    60:4a:5a:3a:bb:f9:73:84:2c:9a:f7:18:53:c7:8a:
                    f8:b7:90:9b:44:52:5b:24:63:1b:62:92:24:36:75:
                    b0:a0:1d:d0:94:16:4a:8c:3a:3b:5d:e9:0e:f5:54:
                    99:6f:ff:4d:33:3a:64:5d:4b:87:5e:0a:b3:a4:50:
                    85:ca:d5:e9:ee:09:95:7e:0a:3c:bf:66:50:f3:10:
                    c8:45:f1:8b:49:8c:36:a5:35:c1:46:e1:41:a5:23:
                    12:f9:fd:97:55:a6:28:09:97:d0:18:53:4d:d4:75:
                    c9:76:f7:79:b8:05:9e:8f:18:98:fb:78:de:ec:90:
                    e3:aa:e0:cb:17:61:6d:db:29:59:94:84:72:14:77:
                    eb:b5:ec:25:27:20:85:19:84:a8:c4:9f:f5:59:65:
                    24:8b:3e:9f:7a:33:1a:ca:f9:51:07:ca:31:a8:e8:
                    c3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:EB:AF:8A:D5:46:FB:F7:2B:69:9A:FD:9C:F2:59:1B:70:03:88:57
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14339B749F8411F1831160D7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.106.0-154.194.111.255
                  154.196.79.0-154.196.81.255
                  154.196.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:d4:57:0a:ac:ca:b9:8d:6e:ef:87:f9:5d:37:62:ef:49:3d:
         a7:4c:5d:a3:d3:bd:7e:62:bd:49:9d:b2:4b:ab:66:f9:a5:56:
         4b:ad:86:94:1b:cf:4d:88:e3:ce:82:56:a4:6b:b8:a6:b3:ff:
         b4:4e:11:09:97:02:ed:25:1d:9e:fb:c0:68:84:5b:93:a0:9e:
         f1:a0:90:55:7f:fb:c0:a4:d2:80:55:a3:19:ab:9c:d9:d1:3e:
         a1:33:3f:67:6a:78:d5:0e:0d:88:27:45:0e:f9:bf:0e:dd:02:
         8a:4a:32:3c:57:64:f8:33:0c:8b:ef:18:82:a3:5a:5e:b1:fd:
         84:49:e4:1a:b7:db:37:01:7d:77:d7:1e:04:a0:64:e1:b5:29:
         e6:a6:8f:d8:7b:8e:df:cd:fb:e4:62:7b:b9:db:f6:b0:2a:a3:
         19:60:48:f0:c6:9a:3f:ff:73:8b:1e:60:65:31:b3:f1:89:a4:
         e2:a6:89:ce:7b:2e:2e:83:b1:63:6d:2e:9c:a8:50:a3:af:90:
         ff:ae:64:aa:51:a3:b5:88:67:99:e4:f2:1d:5d:37:86:6a:a7:
         07:df:b2:b0:97:99:a9:a6:43:ec:58:15:34:94:7f:7b:a8:da:
         29:66:e8:16:b2:07:b8:04:84:91:01:fc:a7:3e:d5:25:89:aa:
         0c:0b:77:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----