Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3353A23CA05C11F1B381D3F3CE1D38B0.roa
File:                     3353A23CA05C11F1B381D3F3CE1D38B0.roa (raw, json)
Hash identifier:          49Bx7g5aHvYfD/bt2ZdMdQauBeRcWUdf9h7A0luheDE=
Subject key identifier:   EB:D6:96:BD:8E:43:9D:3E:D0:F6:36:9F:6C:46:28:84:94:FE:88:EC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E29C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3353A23CA05C11F1B381D3F3CE1D38B0.roa
Signing time:             Tue 25 Aug 2026 08:08:49 +0000
ROA not before:           Tue 25 Aug 2026 08:08:45 +0000
ROA not after:            Sat 28 Nov 2026 08:08:45 +0000
asID:                     45669
IP address blocks:        154.80.59.0/24 maxlen: 24
                          154.80.60.0/24 maxlen: 24
                          154.80.61.0/24 maxlen: 24
                          154.80.62.0/24 maxlen: 24
                          154.80.63.0/24 maxlen: 24
                          154.80.64.0/18 maxlen: 24
                          154.80.64.0/24 maxlen: 24
                          154.80.65.0/24 maxlen: 24
                          154.80.66.0/24 maxlen: 24
                          154.80.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 05:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123548 (0x1e29c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 25 08:08:45 2026 GMT
            Not After : Nov 28 08:08:45 2026 GMT
        Subject: CN=6a8d4d91-f61f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:03:2e:91:96:d6:d8:01:af:a2:3c:19:8d:d1:
                    a1:ca:27:ef:52:db:49:f1:cb:fa:47:32:bc:d6:87:
                    91:49:a8:a1:4a:78:95:c2:1e:42:68:a9:61:fe:2c:
                    05:9e:09:29:4c:a1:c9:b8:6a:ae:26:ce:d1:c4:27:
                    23:ee:04:d0:07:00:85:17:be:1d:19:d0:f0:bf:c1:
                    a5:0b:00:4d:b5:a5:25:f3:87:73:a2:5d:e2:c5:f7:
                    3c:80:51:e5:53:37:92:5c:eb:f6:41:81:6d:ee:2a:
                    cd:62:8c:5a:8d:4d:7b:1a:9f:16:a6:01:68:9c:32:
                    90:0b:08:ca:cb:b7:82:26:04:1e:f1:19:58:a1:54:
                    19:88:5f:0c:a0:28:35:97:f8:c0:e2:0a:ba:3e:01:
                    dc:a0:55:49:bf:39:7b:8e:e8:96:28:f5:af:a3:f0:
                    78:de:79:62:cf:b3:e8:41:1c:3d:1c:3f:fc:5c:77:
                    5c:bd:58:f9:16:a2:e4:e9:7a:d1:a3:df:d2:2c:92:
                    3d:37:b3:c1:50:aa:ef:43:36:e1:69:ea:4c:87:51:
                    31:e8:d0:08:fd:1b:fe:84:55:8f:4e:0b:87:ca:e7:
                    47:19:00:e9:0b:e0:ed:19:ad:2b:88:1d:98:c6:fd:
                    21:82:6a:ab:ee:17:5d:ec:61:6a:ee:fd:eb:45:2c:
                    16:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D6:96:BD:8E:43:9D:3E:D0:F6:36:9F:6C:46:28:84:94:FE:88:EC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3353A23CA05C11F1B381D3F3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.80.59.0-154.80.127.255

    Signature Algorithm: sha256WithRSAEncryption
         b8:a9:90:e5:d5:24:d3:8e:0a:10:77:82:3c:bf:48:21:92:00:
         19:a2:20:2b:98:11:91:66:13:fe:f0:df:04:89:93:e9:7d:cd:
         41:a0:c2:c5:e4:84:b7:7e:7c:13:57:99:e3:3e:3d:7a:34:38:
         45:a3:d3:02:f8:08:a7:d7:05:9e:ea:7f:7b:08:f6:89:87:9b:
         86:4f:bf:d7:f0:85:da:44:3a:28:16:b9:f9:24:21:16:62:db:
         cd:2f:72:78:c1:e6:45:50:9d:3e:38:a2:ea:f3:06:c1:44:04:
         b7:62:b2:12:a2:15:f6:34:1d:48:42:f3:5e:61:07:af:72:56:
         dd:ae:0a:57:c0:15:a1:00:6f:8f:91:cf:5c:d2:b8:f6:01:17:
         53:4a:3e:62:c5:98:aa:b1:02:5b:bf:58:cd:60:ca:2e:23:03:
         e6:ce:fb:57:6d:97:d7:29:d9:9d:7e:2b:5c:9c:e7:30:e8:69:
         e2:4d:d3:bc:83:5e:0a:bc:de:1c:f0:7f:46:a5:f7:f7:cb:55:
         e4:eb:0e:c4:49:99:f3:70:7a:df:8b:6a:76:36:e8:f3:91:9a:
         e0:62:83:42:5f:59:5d:97:c9:ee:fe:9e:26:85:4b:53:48:fe:
         fe:3a:98:85:e8:73:64:a0:92:2e:b9:68:fd:00:84:08:d7:38:
         2a:1b:fc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----