Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E209DE4BEF511F1BE9223DACE1D38B0.roa
File:                     2E209DE4BEF511F1BE9223DACE1D38B0.roa (raw, json)
Hash identifier:          2sIgETMytoonsunzksg/SQLdhfxUDbofLojuP26hwEA=
Subject key identifier:   3C:82:27:0A:8F:0E:00:C0:85:EA:97:70:CA:F6:FD:00:37:30:BA:34
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EBDA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E209DE4BEF511F1BE9223DACE1D38B0.roa
Signing time:             Sat 03 Oct 2026 06:39:28 +0000
ROA not before:           Sat 03 Oct 2026 06:39:24 +0000
ROA not after:            Tue 10 Nov 2026 06:39:24 +0000
asID:                     139613
IP address blocks:        154.204.0.0/24 maxlen: 24
                          154.208.12.0/22 maxlen: 24
                          154.208.16.0/20 maxlen: 24
                          154.212.128.0/24 maxlen: 24
                          154.215.0.0/24 maxlen: 24
                          154.218.0.0/24 maxlen: 24
                          154.221.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125914 (0x1ebda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  3 06:39:24 2026 GMT
            Not After : Nov 10 06:39:24 2026 GMT
        Subject: CN=6ac0a320-b74d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4e:9e:29:bc:65:16:bf:51:0d:8a:5d:7d:a1:
                    e9:b2:8d:85:cc:5e:25:70:3d:ea:11:08:86:6c:ab:
                    41:c5:24:55:80:0f:3f:10:32:d3:c3:8b:c3:6d:46:
                    3e:5a:7f:5d:e7:e8:da:1e:45:45:ff:05:1e:d5:07:
                    9c:05:18:88:5b:f4:72:23:5d:e7:45:2c:82:f6:56:
                    4a:4d:10:8b:58:8e:e1:b2:89:33:5b:f0:13:d0:2f:
                    d8:2a:d2:d1:b6:ce:9f:52:60:e9:25:a1:31:36:6a:
                    22:cf:f5:01:08:12:e7:2b:a5:c7:c7:51:5a:67:c3:
                    ab:d8:65:e2:c9:14:49:fd:9b:7f:6e:1b:8e:97:3e:
                    5e:b5:9e:14:6b:71:92:17:55:27:93:91:9f:4f:70:
                    6b:44:3b:f3:fd:0c:0c:36:dd:21:92:30:ac:b2:3a:
                    b9:e6:bb:20:2e:91:5b:e8:8d:36:32:61:98:3b:ff:
                    ab:eb:9e:bd:8c:95:03:d8:5c:ab:d2:4c:7a:85:76:
                    a7:f7:e7:04:dd:45:79:39:47:3e:ca:83:a5:bc:2f:
                    f8:21:f1:17:7f:07:19:79:a6:f7:dd:53:53:86:73:
                    09:12:42:9e:3d:cf:11:4d:82:87:60:fd:43:fe:ea:
                    1e:a4:e1:7f:fa:be:73:a3:a7:c2:d4:4c:6e:8e:34:
                    cb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:82:27:0A:8F:0E:00:C0:85:EA:97:70:CA:F6:FD:00:37:30:BA:34
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E209DE4BEF511F1BE9223DACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.204.0.0/24
                  154.208.12.0-154.208.31.255
                  154.212.128.0/24
                  154.215.0.0/24
                  154.218.0.0/24
                  154.221.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:c3:03:55:68:41:88:4b:aa:e4:01:7a:0a:a2:99:1a:83:95:
         fa:79:9e:ff:c2:83:1c:a4:86:1d:82:79:a0:23:e4:33:2d:88:
         98:22:64:77:e4:2a:48:3e:44:87:f3:e7:1d:82:3a:ac:c6:d7:
         6a:19:6e:93:6c:1c:7f:81:ae:fc:f6:29:13:fb:09:e5:4c:d9:
         b5:32:f1:88:c8:b4:4a:87:d2:52:7f:6e:11:78:80:ed:8b:43:
         2d:72:69:6c:8a:c5:f4:86:2b:5e:52:a7:79:81:4a:1a:bb:73:
         ee:e4:ea:4b:29:ee:b1:07:bf:bb:76:3c:ed:03:94:26:c1:b0:
         71:ee:1c:36:4a:44:9f:a7:9a:e6:51:36:50:71:10:91:80:51:
         10:ef:d4:dc:53:8b:dc:35:16:03:e8:03:40:67:f0:d4:8f:20:
         12:de:19:27:02:65:ce:e8:39:26:54:e1:d0:5b:4b:51:71:b3:
         05:b8:e1:c9:45:97:18:2b:d8:01:6b:1f:22:36:dc:f6:01:8b:
         be:50:fa:f9:40:a1:e6:15:cf:38:6f:6d:78:d7:fc:de:6b:07:
         ce:de:a8:b2:cd:36:79:fc:10:22:e2:a6:07:c9:24:be:95:22:
         8b:05:8d:2d:bf:11:ea:9c:ae:74:74:98:81:ae:de:55:92:2d:
         11:30:16:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----