Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AA5AA089D2E11F18AB965F3CE1D38B0.roa
File:                     2AA5AA089D2E11F18AB965F3CE1D38B0.roa (raw, json)
Hash identifier:          kplyJq8TIzP00iRZHbI213eGAsngEk5xaCgrvAILMUM=
Subject key identifier:   79:BB:C3:40:69:4F:EC:A6:51:0A:B2:D1:EE:1F:50:1D:CB:6C:3F:D8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E145
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AA5AA089D2E11F18AB965F3CE1D38B0.roa
Signing time:             Fri 21 Aug 2026 07:01:44 +0000
ROA not before:           Fri 21 Aug 2026 07:01:40 +0000
ROA not after:            Sat 19 Sep 2026 07:01:40 +0000
asID:                     400619
IP address blocks:        154.204.8.0/21 maxlen: 24
                          154.204.128.0/18 maxlen: 24
                          154.204.183.0/24 maxlen: 24
                          154.210.2.0/24 maxlen: 24
                          154.211.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 14:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123205 (0x1e145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 21 07:01:40 2026 GMT
            Not After : Sep 19 07:01:40 2026 GMT
        Subject: CN=6a87f7d8-3096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d8:af:f5:72:96:35:60:28:a8:85:b2:1a:f9:
                    20:22:7e:8b:91:24:6d:0e:ff:a8:1f:8a:57:58:db:
                    98:09:81:86:8f:fc:fc:ac:f2:d3:9c:f5:8c:a0:1f:
                    c8:b1:29:a3:cf:2f:f6:85:4b:af:c3:0d:94:ea:90:
                    1f:38:b3:9e:b7:43:d7:08:08:6f:d6:3d:3f:9f:fa:
                    7c:71:81:56:a3:a5:bc:ae:16:2e:2b:ff:0c:5a:97:
                    49:44:de:3c:53:46:45:f8:85:b4:2e:cb:44:81:fa:
                    73:43:7a:5a:b5:75:a9:76:7f:4f:dc:9c:e0:a1:3e:
                    5e:67:24:04:ee:4d:2d:df:e2:ce:e7:d4:4c:c6:8a:
                    20:01:b5:1d:5c:1a:b6:89:d2:92:77:df:45:e0:0b:
                    cf:00:cd:6a:d1:11:70:df:c9:03:45:8c:52:21:ed:
                    ba:3a:34:25:e1:26:d6:68:49:b7:22:60:9f:0d:19:
                    af:a7:06:c8:ac:90:f9:17:d5:59:39:a9:dd:dd:99:
                    d4:59:87:9b:a1:9d:de:8c:b6:93:48:7d:a7:c7:8b:
                    76:04:f4:ec:1a:0a:8c:61:d8:39:b5:d9:b8:cf:bb:
                    4a:aa:e1:d8:9d:de:6a:c5:8a:21:a7:0e:30:d6:70:
                    21:80:a1:aa:79:a3:71:f3:e1:3d:ed:a1:de:a4:ef:
                    92:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BB:C3:40:69:4F:EC:A6:51:0A:B2:D1:EE:1F:50:1D:CB:6C:3F:D8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AA5AA089D2E11F18AB965F3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.204.8.0/21
                  154.204.128.0/18
                  154.210.2.0/24
                  154.211.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:0c:61:74:9f:8a:f6:f9:e1:23:e3:5e:07:c2:ae:cd:27:5b:
         1e:82:f6:b9:06:cf:07:29:2b:2d:91:33:d6:8e:4e:e7:d0:ab:
         d7:34:ff:1e:91:78:74:9b:46:57:34:99:f4:09:0d:c6:6b:df:
         d1:4a:d4:84:a1:a1:63:85:d1:bf:7b:cf:5d:39:69:fb:9e:f8:
         37:f0:b2:46:b2:01:cf:2e:26:0f:8c:30:61:0a:e9:24:79:0c:
         42:31:6d:76:42:cb:9b:6f:5d:3e:4b:4e:7b:30:1f:b7:bd:87:
         0a:0b:ba:69:54:dd:22:f7:90:47:2f:66:1d:08:90:2f:af:91:
         ef:8b:a7:c2:8a:0c:bb:94:91:94:a9:82:c2:1c:b6:ac:24:fe:
         18:5d:15:f2:f0:5d:44:93:c5:22:3c:33:99:48:12:40:2c:81:
         d1:ee:b6:5c:62:06:99:b7:a3:dd:8b:e7:f0:9a:f0:8c:8c:0e:
         b0:2b:bb:fc:44:e7:d7:07:54:94:67:aa:ea:6d:21:cd:98:4b:
         fc:8f:34:c0:af:3b:67:55:4a:61:88:d9:a1:58:1c:a4:c7:82:
         a1:0f:a7:15:2d:9f:11:2f:3c:3d:da:81:cd:5d:eb:2e:8a:11:
         d5:61:48:7f:2e:fd:21:8f:20:64:be:a0:07:ec:3c:f2:f1:0d:
         66:bf:6a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----