Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30F2960AA14811F19A1FC008CF1D38B0.roa
File:                     30F2960AA14811F19A1FC008CF1D38B0.roa (raw, json)
Hash identifier:          vyHD7gQQroC2v5PLTGDfZmaWWiRzaGSW8fL+WpaFLts=
Subject key identifier:   37:7E:3E:88:D8:D6:6F:EA:A8:F6:0C:DF:D6:F6:A6:37:7F:40:CA:ED
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E380
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30F2960AA14811F19A1FC008CF1D38B0.roa
Signing time:             Wed 26 Aug 2026 12:18:06 +0000
ROA not before:           Wed 26 Aug 2026 12:18:02 +0000
ROA not after:            Sat 25 Aug 2029 12:18:02 +0000
asID:                     17561
IP address blocks:        154.221.154.0/24 maxlen: 24
                          154.221.155.0/24 maxlen: 24
                          154.221.156.0/24 maxlen: 24
                          154.221.157.0/24 maxlen: 24
                          154.221.158.0/24 maxlen: 24
                          154.221.159.0/24 maxlen: 24
                          154.221.160.0/24 maxlen: 24
                          154.221.161.0/24 maxlen: 24
                          154.221.162.0/24 maxlen: 24
                          154.221.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123776 (0x1e380)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 26 12:18:02 2026 GMT
            Not After : Aug 25 12:18:02 2029 GMT
        Subject: CN=6a8ed97e-1e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cd:8f:ae:af:a9:92:e2:49:24:c1:7b:30:d1:
                    14:3a:25:ac:3b:33:b2:76:75:09:90:d2:5a:e4:ec:
                    b1:6f:fe:b8:77:7a:a7:03:37:21:85:4f:04:0e:bb:
                    20:bc:f4:01:1a:39:fc:4a:e6:96:56:5f:4c:09:57:
                    fb:c6:ac:0a:a0:a9:8b:f8:97:74:0a:39:4c:93:02:
                    9a:ac:d4:2b:e4:c5:02:fa:1b:e2:27:49:39:f1:b6:
                    64:fd:35:e6:f6:71:74:36:91:7f:39:45:8e:a8:0c:
                    9b:ec:24:86:33:58:db:4c:22:50:57:6c:b1:80:81:
                    88:89:d2:0d:44:06:b7:60:cb:7d:16:90:0b:89:43:
                    1c:0d:6d:c8:aa:2d:48:ad:31:99:18:e9:17:86:ea:
                    39:ee:48:4b:09:20:fe:f9:20:3d:95:cc:9a:80:53:
                    25:61:7c:78:21:b2:80:ce:ab:ef:c7:46:d2:e9:b6:
                    2a:65:80:c6:49:50:90:b6:06:4d:08:c7:7f:fd:62:
                    54:2d:6e:e4:d1:f7:dc:21:07:9e:99:82:d5:2e:58:
                    1d:50:9d:14:ec:23:84:24:8e:41:5b:66:2e:d2:5b:
                    ca:ca:f4:81:3d:76:12:1b:12:13:1e:9c:97:54:5f:
                    63:4c:cf:23:64:0f:ba:51:ae:ca:c8:a6:04:e4:3a:
                    41:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:7E:3E:88:D8:D6:6F:EA:A8:F6:0C:DF:D6:F6:A6:37:7F:40:CA:ED
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30F2960AA14811F19A1FC008CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.221.154.0-154.221.163.255

    Signature Algorithm: sha256WithRSAEncryption
         56:31:a0:fe:a2:24:24:1b:ad:3b:3b:6d:ba:5d:d8:b2:21:49:
         d5:9e:a5:de:db:f8:be:89:24:ad:e4:b4:57:13:41:ac:e7:e2:
         87:d1:c7:e7:ae:4f:b8:4a:d1:d7:2c:48:cf:7f:34:66:bd:c3:
         60:d0:38:65:1e:e2:c2:8f:d2:78:b4:e1:e0:56:64:57:44:db:
         a1:06:6e:c4:d6:09:d4:50:ac:97:31:98:ee:97:fe:10:0f:98:
         79:dc:95:77:de:93:af:51:dd:ab:9a:0c:87:0d:e4:c7:e9:a6:
         e3:32:7d:5e:ce:38:a8:19:2f:91:f2:e6:db:e8:3b:31:7d:a9:
         c8:d8:2f:ea:7c:97:57:43:5f:87:88:2c:26:49:c9:a5:20:23:
         4f:a1:39:a2:4a:91:b4:0b:10:58:c0:70:99:9a:4b:8b:88:4d:
         55:e9:d9:9d:cf:7c:68:25:7d:7f:83:df:f5:08:20:86:ec:37:
         ac:40:a9:e3:5d:ef:7c:ef:01:8f:fe:90:d5:2e:1a:96:e8:4c:
         a5:a9:51:9c:14:9a:d3:c1:b5:8c:57:eb:b0:bf:ff:cb:66:8f:
         8c:4a:d5:8f:3b:76:94:43:41:62:5f:3c:a2:2e:a2:37:2f:99:
         96:82:48:93:6c:4a:30:5f:a8:0b:ec:28:94:41:92:1d:1c:fe:
         09:59:96:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----