Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B1EDD2E9C9311F1B364DCBECE1D38B0.roa
File:                     2B1EDD2E9C9311F1B364DCBECE1D38B0.roa (raw, json)
Hash identifier:          YT4yFo3YnLheL9/OGzYfxQEoNMFGIlt3l7Xl8IcKugQ=
Subject key identifier:   7F:81:28:DD:0D:A3:DB:82:AD:E3:4D:FD:45:99:FE:FF:77:3F:38:10
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E0A6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B1EDD2E9C9311F1B364DCBECE1D38B0.roa
Signing time:             Thu 20 Aug 2026 12:32:13 +0000
ROA not before:           Thu 20 Aug 2026 12:32:08 +0000
ROA not after:            Sat 26 Sep 2026 12:32:08 +0000
asID:                     140666
IP address blocks:        154.93.87.0/24 maxlen: 24
                          154.93.88.0/22 maxlen: 24
                          154.93.94.0/24 maxlen: 24
                          154.93.100.0/23 maxlen: 24
                          154.93.104.0/23 maxlen: 24
                          154.94.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123046 (0x1e0a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 12:32:08 2026 GMT
            Not After : Sep 26 12:32:08 2026 GMT
        Subject: CN=6a86f3cc-036e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:39:24:0d:ea:2f:72:f9:75:55:ee:11:1f:0e:
                    05:48:da:47:36:95:d3:a5:99:80:61:8b:f9:d8:50:
                    31:58:8e:1b:8f:b8:7a:79:28:2d:91:5d:c6:19:d7:
                    25:a1:db:ab:bc:11:e5:1c:da:d0:06:7e:60:b5:8c:
                    87:fc:32:98:a3:7f:e5:d8:16:61:61:ff:35:78:d5:
                    ae:24:71:d9:78:b9:d5:88:c9:bd:79:67:d0:86:70:
                    be:f5:ca:45:06:44:94:34:ed:b2:7f:fc:3d:c3:a0:
                    a1:3b:28:f9:17:97:cf:a3:36:3c:b3:b4:a2:3d:21:
                    31:13:7f:3e:95:ae:05:f9:12:f8:fe:71:09:aa:ea:
                    9d:42:46:e5:6c:a4:3c:7d:73:aa:1d:24:fa:9e:cc:
                    5f:40:6f:7d:e9:fa:25:3b:43:b1:13:8e:bc:5c:75:
                    98:f4:23:66:ff:ea:6d:5f:e8:01:5c:ff:bd:10:fc:
                    3d:16:e7:0c:a2:53:60:72:5a:4c:49:77:48:4e:03:
                    e9:f4:40:47:40:75:6c:fd:0a:eb:7d:5d:21:75:26:
                    e8:c5:aa:54:93:4a:47:84:a1:c4:f2:59:36:b6:51:
                    f4:5d:13:1f:6a:e6:83:0e:71:19:84:8a:5d:f0:25:
                    63:54:78:15:ba:99:ce:49:f3:b5:78:af:f6:07:da:
                    fa:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:81:28:DD:0D:A3:DB:82:AD:E3:4D:FD:45:99:FE:FF:77:3F:38:10
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B1EDD2E9C9311F1B364DCBECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.93.87.0-154.93.91.255
                  154.93.94.0/24
                  154.93.100.0/23
                  154.93.104.0/23
                  154.94.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:5d:1c:19:f7:47:97:17:a3:fd:53:41:90:5a:53:32:29:54:
         f3:16:43:bb:e5:b5:3d:c1:43:b8:31:1c:36:c6:c5:72:5e:a7:
         b9:0e:da:d1:df:98:9b:4a:ba:ca:4c:4b:d7:f5:46:c3:c0:53:
         2a:a9:93:15:09:6e:60:bd:d6:e7:dd:7c:04:b5:7c:dc:99:83:
         dd:64:fb:4f:b5:77:14:ef:bf:c6:96:4f:2a:cb:c1:52:52:c7:
         40:f7:91:9a:96:37:a5:39:e5:a0:f9:d5:1b:f9:54:75:e9:cb:
         19:c4:75:ac:54:7b:13:ee:a8:51:53:c4:e5:12:98:1f:39:88:
         d3:e8:fa:2b:2d:fa:f9:ad:de:c2:e5:bc:52:b3:ed:d5:56:a0:
         36:e9:51:39:99:35:b0:f0:16:e2:28:20:90:89:95:10:a6:1e:
         c6:80:f8:89:c7:2e:58:72:c1:83:bb:b6:72:ee:fb:12:d6:34:
         78:bc:1b:be:ec:57:0b:8a:1c:01:ca:dc:c1:cc:c6:ff:07:0b:
         9a:b0:be:66:2e:e0:a5:cb:ef:5f:22:11:34:49:f1:60:31:24:
         67:46:8e:97:b1:81:dc:21:07:99:26:e4:7c:5b:4d:0b:bf:e6:
         58:9e:b7:7a:1e:ae:ee:bf:22:8b:8d:e3:be:d2:55:72:5f:9a:
         8e:ab:e5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----