Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17A88980B58811F193059BD8CE1D38B0.roa
File:                     17A88980B58811F193059BD8CE1D38B0.roa (raw, json)
Hash identifier:          v4/D6m860ELcet2dOZdkBya/Kf5x6K7msLR5s43cu6M=
Subject key identifier:   81:EA:D7:85:57:64:B9:B1:91:12:E8:09:DB:07:49:77:93:3B:ED:69
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E970
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17A88980B58811F193059BD8CE1D38B0.roa
Signing time:             Mon 21 Sep 2026 06:45:54 +0000
ROA not before:           Mon 21 Sep 2026 06:45:51 +0000
ROA not after:            Mon 28 Sep 2026 06:45:51 +0000
asID:                     139613
IP address blocks:        154.81.136.0/24 maxlen: 24
                          154.81.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125296 (0x1e970)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 21 06:45:51 2026 GMT
            Not After : Sep 28 06:45:51 2026 GMT
        Subject: CN=6ab0d2a2-9262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bd:9d:2b:1d:09:c2:8a:62:5b:8f:cf:cf:32:
                    46:4d:12:6c:aa:fa:8a:ca:8f:92:9a:ca:c2:76:9a:
                    10:f2:7e:ab:4d:1b:45:b6:cf:cd:6d:ee:ac:b9:60:
                    9c:c4:67:9e:a3:d8:c3:7f:ad:79:3d:a7:66:7e:b2:
                    3b:58:72:af:fe:82:b4:67:cf:be:92:2d:cf:46:39:
                    e1:f5:0d:3d:10:12:8e:71:66:a8:c9:cd:9b:60:a9:
                    16:9b:fc:e8:7c:c7:be:c9:43:d1:89:c6:57:30:75:
                    94:ef:3a:a7:e6:b0:8a:89:d0:e6:ce:1a:07:12:e0:
                    5b:06:06:f4:0b:9a:d3:03:1e:c9:0d:1b:09:5d:91:
                    3a:cb:78:1d:81:d4:c8:2d:30:04:6e:3a:7c:52:d5:
                    1c:74:cd:e1:00:96:7b:b0:45:57:1a:fe:44:37:94:
                    6c:91:92:5a:02:38:ed:79:56:0c:0b:21:2d:63:39:
                    82:1f:37:e8:f9:38:55:77:3a:fe:3b:ef:dd:9f:e0:
                    2a:c5:78:f3:e6:e1:0a:25:d1:d7:29:70:50:5b:95:
                    87:2b:c4:fa:aa:16:3d:f1:dd:26:48:38:7c:c6:d7:
                    05:47:c2:97:32:b4:69:90:41:c3:2e:91:75:75:2e:
                    44:df:7b:9c:82:97:63:9a:c0:51:51:f0:a8:12:93:
                    44:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EA:D7:85:57:64:B9:B1:91:12:E8:09:DB:07:49:77:93:3B:ED:69
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17A88980B58811F193059BD8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.136.0/24
                  154.81.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:c5:5f:d5:0c:bf:45:47:ba:2f:4c:ab:4e:d1:18:31:cb:64:
         2e:27:ca:17:99:a2:68:80:32:5b:14:97:c5:1f:88:72:8c:4e:
         52:08:0e:4f:13:2c:d9:5f:51:ae:bd:d7:58:ca:03:9c:54:62:
         6e:88:ef:16:c9:71:98:25:ed:24:41:8f:2c:1c:a6:82:90:a5:
         3c:ba:a0:c5:8c:b8:53:ef:4a:7c:91:b9:d7:ab:e3:5a:2e:94:
         76:09:36:6d:a3:10:1b:37:ff:27:6c:d1:81:02:5d:99:b1:6c:
         db:2d:db:11:8f:f5:3b:ed:7b:63:96:9b:b8:f5:5d:57:f3:e9:
         6b:e9:b0:46:51:1b:2f:85:34:5c:ed:9a:78:7c:16:18:9b:85:
         f2:96:5e:2f:a1:13:9f:5c:0c:59:89:62:7c:e7:92:78:4a:f3:
         2a:03:28:9e:e8:8e:0b:a7:d3:71:06:25:04:3b:3f:61:25:36:
         d7:b5:7d:4c:02:ea:63:d5:81:ab:ed:fc:bb:8d:d6:4b:34:30:
         86:52:4a:5d:ee:b0:82:9e:ce:b9:e3:00:d4:ec:96:59:12:ec:
         df:68:2d:26:93:25:05:cc:3c:75:3d:75:e3:0d:9d:31:64:db:
         b7:aa:f0:4f:55:96:1c:54:81:29:83:b6:65:fa:54:6a:f3:6c:
         05:d3:65:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----