Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29A811A6965111F18EEBB4CCCE1D38B0.roa
File:                     29A811A6965111F18EEBB4CCCE1D38B0.roa (raw, json)
Hash identifier:          wwANMy8BmG/zqE6i/6YmC4lD6wfHo0/YOJZfHl01F/A=
Subject key identifier:   79:40:71:10:25:83:9E:30:AA:F0:17:06:65:1D:38:77:52:CB:45:E6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DEAE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29A811A6965111F18EEBB4CCCE1D38B0.roa
Signing time:             Wed 12 Aug 2026 13:24:36 +0000
ROA not before:           Wed 12 Aug 2026 13:24:32 +0000
ROA not after:            Sun 12 Aug 2029 13:24:32 +0000
asID:                     17561
IP address blocks:        154.219.6.0/24 maxlen: 24
                          154.219.7.0/24 maxlen: 24
                          154.219.8.0/24 maxlen: 24
                          154.219.9.0/24 maxlen: 24
                          154.219.10.0/24 maxlen: 24
                          154.219.11.0/24 maxlen: 24
                          154.219.12.0/24 maxlen: 24
                          154.219.13.0/24 maxlen: 24
                          154.219.14.0/24 maxlen: 24
                          154.219.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122542 (0x1deae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 12 13:24:32 2026 GMT
            Not After : Aug 12 13:24:32 2029 GMT
        Subject: CN=6a7c7414-3de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3a:6b:a8:6e:73:c4:8a:90:e4:af:d5:a0:4f:
                    6e:96:23:ee:59:cc:a7:25:ab:5f:25:6e:9d:22:6c:
                    90:26:01:c5:14:d0:49:4e:8a:c5:ad:21:99:d0:f5:
                    65:10:2d:c9:77:36:6f:1d:bb:c3:82:2e:4d:8c:ae:
                    82:57:f8:d3:61:af:1e:52:fe:c5:48:76:6a:7f:6c:
                    2d:e5:29:71:7a:17:8b:6a:fc:40:56:1e:1a:8b:91:
                    23:00:70:8d:fd:45:9a:14:95:33:64:2b:f4:9e:2d:
                    72:48:d1:74:5c:d4:af:8e:5b:34:4a:49:12:83:9a:
                    06:8f:27:96:6e:1d:9d:14:41:ce:fa:80:16:b8:10:
                    a5:26:79:fd:df:94:9f:0a:20:cb:e7:02:f8:3a:fd:
                    98:87:90:94:3e:e2:e6:bd:06:06:0e:12:f5:85:36:
                    1c:26:50:b1:3d:14:c5:1d:e5:e5:72:7a:c5:1f:49:
                    2a:a9:25:2d:41:01:d5:78:12:89:4a:aa:f6:9c:8c:
                    90:65:7b:8a:7b:2a:af:57:fe:c8:a1:57:ec:ee:5d:
                    48:5e:81:84:78:76:74:d2:f1:b7:36:9a:a5:1a:0c:
                    ec:c9:3f:76:e4:aa:3f:d7:d6:15:dc:21:8c:18:a1:
                    6e:5c:83:57:1f:82:f2:be:0c:a3:f8:6f:08:45:36:
                    ed:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:40:71:10:25:83:9E:30:AA:F0:17:06:65:1D:38:77:52:CB:45:E6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29A811A6965111F18EEBB4CCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.219.6.0-154.219.15.255

    Signature Algorithm: sha256WithRSAEncryption
         89:f0:3f:8a:40:22:2f:56:d7:b0:ef:2c:b1:23:c6:0b:f0:cd:
         20:ef:9e:9f:78:1c:7b:cd:d0:d9:43:fa:74:9a:b4:12:32:0f:
         04:13:b2:4f:91:0d:9a:0a:36:ab:6f:a2:66:73:49:e8:ae:02:
         2d:f7:97:1c:4c:9c:53:c0:cb:be:3b:b5:03:52:dc:f5:24:33:
         ea:09:1a:5a:8a:17:ae:87:19:5a:25:03:8e:35:96:2b:d6:03:
         67:93:5c:46:a9:b0:64:87:6c:71:e3:17:7f:a6:89:5e:95:8d:
         18:57:d1:93:0f:49:9e:f4:ed:bd:01:30:ce:64:41:0e:ef:8b:
         c4:d6:f6:ef:90:a5:43:20:0a:b3:a5:83:3d:a9:f3:53:d0:c2:
         d6:d5:bb:a3:a5:cd:be:cc:92:98:ee:ad:e5:49:b8:fb:5c:72:
         48:3d:38:62:4a:b2:20:5d:02:f8:d4:17:47:91:58:e8:da:ce:
         65:98:8b:10:51:66:4c:7e:4e:2e:2f:fd:04:4a:80:f9:e3:00:
         4d:16:e9:12:79:f7:2c:f4:50:dd:29:0e:90:66:5f:12:d0:f8:
         af:e7:c6:cc:66:3b:67:4e:ed:b3:f8:0f:fe:5e:4b:7c:2b:24:
         60:d2:83:35:94:21:6f:42:9b:0b:16:57:19:1f:f3:11:33:8f:
         d8:c1:8a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----