Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31A21DF2963311F1BDCA8216CF1D38B0.roa
File:                     31A21DF2963311F1BDCA8216CF1D38B0.roa (raw, json)
Hash identifier:          jgSmIUxMhmvzZolaW59YXhO94sDOtCZIfLDKesrt+oA=
Subject key identifier:   28:E8:A6:79:35:4C:EC:AA:54:BA:19:07:4B:A6:5F:80:7E:6B:C5:BD
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DE57
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31A21DF2963311F1BDCA8216CF1D38B0.roa
Signing time:             Wed 12 Aug 2026 09:50:05 +0000
ROA not before:           Wed 12 Aug 2026 09:50:01 +0000
ROA not after:            Sun 12 Aug 2029 09:50:01 +0000
asID:                     17561
IP address blocks:        154.207.117.0/24 maxlen: 24
                          154.207.118.0/24 maxlen: 24
                          154.207.119.0/24 maxlen: 24
                          154.207.120.0/24 maxlen: 24
                          154.207.121.0/24 maxlen: 24
                          154.207.122.0/24 maxlen: 24
                          154.207.123.0/24 maxlen: 24
                          154.207.124.0/24 maxlen: 24
                          154.207.125.0/24 maxlen: 24
                          154.207.126.0/24 maxlen: 24
                          154.207.127.0/24 maxlen: 24
                          154.207.128.0/24 maxlen: 24
                          154.207.129.0/24 maxlen: 24
                          154.207.130.0/24 maxlen: 24
                          154.207.131.0/24 maxlen: 24
                          154.207.132.0/24 maxlen: 24
                          154.207.133.0/24 maxlen: 24
                          154.207.134.0/24 maxlen: 24
                          154.207.135.0/24 maxlen: 24
                          154.207.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122455 (0x1de57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 12 09:50:01 2026 GMT
            Not After : Aug 12 09:50:01 2029 GMT
        Subject: CN=6a7c41cd-bcd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:66:f5:47:d7:73:12:70:87:8e:72:68:ae:ca:
                    1f:58:cf:e3:63:d6:15:a4:ba:0e:ae:33:21:fb:d3:
                    be:32:7f:c8:39:d6:8c:20:51:a9:45:4a:91:f9:6f:
                    a3:9f:b8:a5:43:33:61:0b:33:09:15:2c:3f:a0:6b:
                    39:e8:2d:29:61:73:06:46:64:8d:8b:72:5d:cc:be:
                    11:98:5f:5d:23:87:6e:2f:1a:bf:69:de:7c:a1:39:
                    83:26:54:be:9c:a0:b0:c7:5a:29:93:eb:a8:8b:cf:
                    dc:0f:d8:c8:69:49:e6:33:01:c4:74:ef:25:f6:ad:
                    78:a6:98:fb:b9:4c:fc:21:94:a8:be:8f:43:67:22:
                    96:d1:13:3e:c9:e0:f6:78:35:78:c7:57:0b:e3:70:
                    dc:e9:09:fd:75:df:8d:31:4b:25:51:0a:5f:94:1e:
                    5d:f5:ac:2e:42:3f:87:fe:53:66:28:90:e4:94:4c:
                    36:96:86:bf:df:93:5a:52:d7:61:86:42:d5:64:ab:
                    4a:89:bf:3c:ad:c0:01:dd:82:56:1f:ad:64:09:ff:
                    e8:6b:28:bf:86:e9:5f:0a:43:79:04:7c:4f:41:60:
                    8b:4b:26:77:66:b8:67:f0:51:da:77:0b:b1:0b:f4:
                    2c:96:5d:16:1f:f6:24:64:dc:2b:5f:33:80:14:df:
                    8a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E8:A6:79:35:4C:EC:AA:54:BA:19:07:4B:A6:5F:80:7E:6B:C5:BD
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31A21DF2963311F1BDCA8216CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.207.117.0-154.207.136.255

    Signature Algorithm: sha256WithRSAEncryption
         70:95:64:ff:a9:e1:a2:ee:f2:72:ac:b2:09:b0:19:06:8e:e5:
         9a:0f:eb:8a:7d:0d:90:13:03:d8:92:b4:00:e3:e5:1c:54:46:
         b8:33:ae:8f:3a:46:5b:c7:5c:31:69:ee:03:4f:bc:a4:7f:c9:
         c3:13:35:82:f4:0f:41:b8:78:35:d4:88:26:d3:2a:d0:37:89:
         ee:8c:88:15:5d:70:dc:75:59:fe:86:fe:3c:3c:af:df:d7:94:
         f6:58:f9:b1:47:ee:c0:a5:05:ce:36:0a:b7:00:36:23:f4:fc:
         2f:7a:af:64:c2:56:58:14:57:05:01:9e:96:47:2b:7d:cf:1a:
         f7:3e:65:c6:fa:8d:f4:97:57:18:09:d7:37:8b:ec:36:9f:12:
         6e:c2:30:7f:43:b7:ea:40:c8:66:96:7a:e4:a9:24:49:2a:6d:
         b0:b3:fc:a3:b0:b7:15:ea:49:f9:1f:4e:5a:50:dc:ca:78:e6:
         63:ac:9b:b4:8b:7b:91:4b:e0:9b:ea:6d:58:71:d4:ba:6c:d0:
         03:f5:96:91:b8:d7:31:cd:34:19:9e:04:ba:be:58:b3:2d:47:
         49:48:99:f9:0f:ab:1e:15:c2:21:85:e2:85:10:1c:07:26:36:
         b0:ea:f2:97:71:23:38:69:35:e5:9c:f4:56:87:c6:f3:de:70:
         31:8e:fe:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----