Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2749B08CACE911F188981FF3CE1D38B0.roa
File:                     2749B08CACE911F188981FF3CE1D38B0.roa (raw, json)
Hash identifier:          IGbY6r5kGmhEKEn60/RKVipp16Ypi6Tg0R7PyD3IorA=
Subject key identifier:   C2:8F:54:43:DF:F8:FC:3E:20:82:8E:56:0B:52:D1:C0:EF:A0:A7:35
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E6E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2749B08CACE911F188981FF3CE1D38B0.roa
Signing time:             Thu 10 Sep 2026 07:28:02 +0000
ROA not before:           Thu 10 Sep 2026 07:27:57 +0000
ROA not after:            Mon 21 Sep 2026 07:27:57 +0000
asID:                     18229
IP address blocks:        154.206.22.0/24 maxlen: 24
                          154.206.23.0/24 maxlen: 24
                          154.206.29.0/24 maxlen: 24
                          154.210.177.0/24 maxlen: 24
                          154.210.184.0/24 maxlen: 24
                          154.210.197.0/24 maxlen: 24
                          154.210.202.0/24 maxlen: 24
                          154.210.205.0/24 maxlen: 24
                          154.210.206.0/24 maxlen: 24
                          154.210.207.0/24 maxlen: 24
                          154.210.208.0/24 maxlen: 24
                          154.210.209.0/24 maxlen: 24
                          154.210.210.0/24 maxlen: 24
                          154.210.211.0/24 maxlen: 24
                          154.210.212.0/24 maxlen: 24
                          154.210.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 11:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124644 (0x1e6e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 10 07:27:57 2026 GMT
            Not After : Sep 21 07:27:57 2026 GMT
        Subject: CN=6aa25c01-6f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:00:25:b5:7f:82:30:3b:1a:84:bd:b2:6d:b9:
                    08:be:06:b4:7e:2c:7d:4c:b6:71:ab:d9:06:2e:65:
                    9a:00:7d:62:55:21:7a:95:c6:5d:3b:4d:94:90:92:
                    86:9a:85:c1:c6:d1:98:fb:79:da:08:97:68:94:89:
                    b7:a6:3e:1a:66:0e:15:71:0b:5c:fe:65:b0:a2:06:
                    13:b9:87:dc:35:73:23:bd:96:0d:fa:e8:2b:60:23:
                    82:47:fa:a6:af:27:ee:e4:3b:1f:86:23:4f:77:63:
                    02:24:54:7a:3b:59:28:75:e9:fc:1d:5e:de:ce:50:
                    0c:1d:d2:da:7d:c7:45:3b:05:68:d0:85:7f:8f:db:
                    62:43:37:d8:7e:ed:22:87:37:63:f1:e1:0f:d6:b0:
                    88:12:1c:49:fe:86:74:80:94:fe:2a:b3:3c:91:5c:
                    aa:d2:9e:2c:ba:35:a0:35:dd:1b:14:2e:40:d5:81:
                    77:6f:82:c8:c0:5b:ad:7a:cc:44:83:bc:0c:24:6d:
                    fb:96:83:5b:1e:f1:6e:c5:24:61:8a:88:07:8b:66:
                    3e:22:b5:0d:70:42:f1:bf:5b:4e:4d:02:f4:10:71:
                    ad:c9:d6:5b:b4:45:e6:ce:75:8d:c2:a5:c1:34:76:
                    ef:b5:97:4f:69:83:75:3b:6c:1f:bb:2e:cc:4f:b7:
                    26:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8F:54:43:DF:F8:FC:3E:20:82:8E:56:0B:52:D1:C0:EF:A0:A7:35
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2749B08CACE911F188981FF3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.206.22.0/23
                  154.206.29.0/24
                  154.210.177.0/24
                  154.210.184.0/24
                  154.210.197.0/24
                  154.210.202.0/24
                  154.210.205.0-154.210.212.255
                  154.210.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:1f:ff:a2:16:55:f2:65:10:96:0d:42:5c:75:16:e3:4c:1f:
         df:01:ba:45:96:ea:6b:b4:01:00:61:4b:a9:2a:a7:3a:b6:95:
         32:49:1b:4e:93:13:dd:fd:db:ae:af:dd:a5:62:db:f0:e5:f5:
         35:d4:30:db:be:7b:9b:7b:ac:d1:7e:60:c9:37:04:38:c7:fd:
         ee:3b:4d:a8:d2:fa:8f:1c:ac:46:09:a2:56:a3:a3:d7:35:ef:
         09:cd:bc:82:fa:58:c1:ef:43:97:3d:2a:28:e6:ff:9a:d7:b0:
         dd:aa:31:9c:84:25:1c:2a:a1:16:25:c2:7d:91:c0:9d:91:07:
         38:70:03:b4:39:75:d7:0b:a9:eb:7e:9d:ec:20:80:34:ce:88:
         6b:aa:25:03:43:47:46:44:bd:4a:91:6a:4d:b7:ab:2f:0a:14:
         78:59:e2:67:5b:cd:c1:f4:6a:2e:6e:fa:e4:77:1f:1f:07:42:
         92:0e:60:60:20:38:06:dc:14:87:42:5b:02:10:a8:15:2b:a5:
         94:fc:4f:f5:f7:86:45:cb:28:51:4b:30:1e:0e:d4:97:d2:0d:
         9f:f5:7e:37:3a:ea:61:f3:0f:f0:05:b6:f6:5e:b0:77:84:cf:
         fc:dc:8d:ef:75:b4:0d:dc:f8:fb:bd:a5:1a:b5:67:9c:fb:36:
         f4:51:88:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----