Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F7144FEA14111F1A4560CE0CE1D38B0.roa
File:                     2F7144FEA14111F1A4560CE0CE1D38B0.roa (raw, json)
Hash identifier:          H24SaM2ESsn8avQRs8XYbSEyh3IcMqUP2JKqdNKqrno=
Subject key identifier:   2A:BF:14:07:3F:2E:CE:B1:9B:95:5E:7C:1E:EA:62:21:A3:F1:6D:10
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E370
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F7144FEA14111F1A4560CE0CE1D38B0.roa
Signing time:             Wed 26 Aug 2026 11:27:57 +0000
ROA not before:           Wed 26 Aug 2026 11:27:53 +0000
ROA not after:            Sat 25 Aug 2029 11:27:53 +0000
asID:                     17561
IP address blocks:        154.215.138.0/24 maxlen: 24
                          154.215.139.0/24 maxlen: 24
                          154.215.140.0/24 maxlen: 24
                          154.215.141.0/24 maxlen: 24
                          154.215.142.0/24 maxlen: 24
                          154.215.143.0/24 maxlen: 24
                          154.215.144.0/24 maxlen: 24
                          154.215.145.0/24 maxlen: 24
                          154.215.146.0/24 maxlen: 24
                          154.215.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123760 (0x1e370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 26 11:27:53 2026 GMT
            Not After : Aug 25 11:27:53 2029 GMT
        Subject: CN=6a8ecdbd-9e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5c:31:79:4b:fc:bd:0f:cb:61:c5:51:a8:06:
                    96:e3:1a:94:9b:54:29:2b:fc:42:cb:9d:94:6f:b2:
                    1d:ca:35:04:cf:75:92:44:d9:05:ff:62:b7:9c:49:
                    34:9d:53:ba:1c:17:99:98:c4:3e:6a:50:6d:68:e1:
                    4a:c2:01:90:ad:ce:54:25:cf:63:c7:0c:d2:74:94:
                    fb:bb:07:88:0e:60:e6:8a:c9:52:75:47:6c:ca:77:
                    57:78:57:61:13:57:f8:b3:cc:63:0c:59:d8:db:4c:
                    08:c5:d8:3b:84:1e:b9:ba:95:1d:a4:48:df:28:71:
                    08:5a:62:d8:fa:2f:72:92:b8:c5:cb:a4:58:77:c6:
                    d0:43:eb:d2:c3:8b:85:cd:49:33:fe:bd:70:35:e6:
                    1e:9d:5a:1a:69:e6:fa:9e:6e:55:fc:c0:f5:36:46:
                    0e:89:c3:ff:20:65:68:15:66:38:28:1c:15:fc:88:
                    1d:84:47:3d:79:86:fe:6e:89:5f:f1:c5:69:4b:59:
                    46:8d:21:4a:a3:0f:48:c4:3a:03:5a:db:b3:8a:12:
                    bd:3d:57:bc:d4:2c:4e:ca:ec:b1:37:b0:51:b4:cf:
                    ff:b7:a0:43:82:ee:2e:ca:f0:1a:8c:d6:9a:2b:9b:
                    c0:1e:99:1e:33:62:d9:e6:c9:76:a8:8c:a9:2b:07:
                    31:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BF:14:07:3F:2E:CE:B1:9B:95:5E:7C:1E:EA:62:21:A3:F1:6D:10
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F7144FEA14111F1A4560CE0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.215.138.0-154.215.147.255

    Signature Algorithm: sha256WithRSAEncryption
         2c:4a:cc:79:d2:b7:68:a8:eb:e5:50:b4:ed:2d:42:e5:43:59:
         d8:a3:bf:f5:1d:b2:a7:2a:4a:13:cf:10:77:a7:07:d6:74:c4:
         aa:fb:29:7d:52:73:5b:1d:f9:65:9f:e7:be:de:f7:85:e2:32:
         51:f2:1c:9d:6c:ff:ad:33:73:1f:ce:7f:37:19:9c:a5:0a:c4:
         69:d7:8d:ed:8d:f3:38:c9:0a:fa:14:93:bf:8d:4b:c7:2e:2b:
         7c:e8:ec:66:00:bf:59:76:9e:2c:50:5a:7a:a5:bd:c7:70:29:
         1f:c6:4e:7f:3d:7f:96:ca:d3:c2:23:73:4a:58:e5:b4:1e:98:
         97:02:48:6b:55:a9:6a:42:c7:e4:16:75:ac:bc:75:2f:58:c8:
         0d:41:9e:00:f4:19:86:6f:8e:12:74:55:4d:f9:f2:54:cd:32:
         0f:af:01:71:f7:1f:58:88:ff:73:50:00:89:76:25:c6:bf:32:
         58:8b:b1:ed:3e:c1:6b:39:cb:33:3a:f3:31:a2:97:99:cd:28:
         99:74:7e:ea:91:3f:1e:af:5b:ec:c6:dd:09:79:43:3a:e4:bc:
         32:ee:a5:1d:49:17:18:b2:f5:4d:1f:f3:cd:2d:3c:eb:10:b6:
         19:e3:bd:63:39:62:06:74:49:7e:bb:b9:32:14:8d:ff:6d:5c:
         66:ff:50:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----