Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34A2CC2EBA3A11F19B6847FCCE1D38B0.roa
File:                     34A2CC2EBA3A11F19B6847FCCE1D38B0.roa (raw, json)
Hash identifier:          kA4LSumjv43yPjFpcqJpBiTbvAPzmNGw9h/zC5IuSkU=
Subject key identifier:   51:A5:CF:04:E2:94:74:AB:37:EC:63:0A:82:93:F2:AF:93:9A:6A:01
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EAE8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34A2CC2EBA3A11F19B6847FCCE1D38B0.roa
Signing time:             Sun 27 Sep 2026 06:10:58 +0000
ROA not before:           Sun 27 Sep 2026 06:10:54 +0000
ROA not after:            Sun 01 Nov 2026 06:10:54 +0000
asID:                     44559
IP address blocks:        154.203.222.0/24 maxlen: 24
                          154.203.223.0/24 maxlen: 24
                          154.203.225.0/24 maxlen: 24
                          154.203.226.0/24 maxlen: 24
                          154.203.227.0/24 maxlen: 24
                          154.203.228.0/24 maxlen: 24
                          154.203.229.0/24 maxlen: 24
                          154.205.28.0/24 maxlen: 24
                          154.205.29.0/24 maxlen: 24
                          154.205.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125672 (0x1eae8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 27 06:10:54 2026 GMT
            Not After : Nov  1 06:10:54 2026 GMT
        Subject: CN=6ab8b372-a1d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:65:98:71:f7:cb:d6:c8:5d:64:f4:30:1d:e8:
                    d1:94:c3:16:e9:38:31:08:bd:19:1f:ac:0a:3b:bb:
                    36:64:e0:b0:71:18:4b:2d:45:02:7f:a8:22:5f:ec:
                    e9:1f:61:90:ba:e5:ee:af:33:0b:e1:8f:6b:e1:da:
                    06:57:99:9c:c3:c8:5c:f1:61:13:b8:cb:60:06:9a:
                    3e:f3:14:13:18:dd:d4:f9:aa:e7:48:43:68:a8:d1:
                    02:2f:56:f6:da:b6:72:ee:39:ed:59:ff:b2:5c:e1:
                    7f:df:45:f6:ed:60:8c:6e:1a:5e:94:d3:de:3d:e1:
                    85:63:8d:d6:2b:15:f5:08:fc:1d:24:cc:45:47:94:
                    0d:0c:83:89:a5:96:71:e8:3b:15:8c:b1:0c:9d:b5:
                    9f:48:0f:37:14:a3:9c:53:18:d2:be:d2:30:e4:54:
                    37:8e:a9:3c:b3:dd:0a:60:96:2c:ad:c9:46:28:a0:
                    2e:cd:75:77:3e:21:be:11:20:5e:11:d0:2a:54:3a:
                    51:17:3d:46:1e:e8:e6:3a:bf:24:88:e9:1f:8a:88:
                    13:50:9a:e5:98:7e:89:fb:be:bf:19:2a:3a:6d:36:
                    0b:12:86:86:4e:b8:fa:ba:fa:3c:dc:bc:3e:ed:4d:
                    a5:9a:46:4a:c4:47:b0:e4:ff:04:9f:43:45:35:23:
                    60:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A5:CF:04:E2:94:74:AB:37:EC:63:0A:82:93:F2:AF:93:9A:6A:01
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34A2CC2EBA3A11F19B6847FCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.222.0/23
                  154.203.225.0-154.203.229.255
                  154.205.28.0/23
                  154.205.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:c3:f7:20:35:92:7c:9a:06:55:d5:4f:48:82:c5:d3:f8:5b:
         90:fe:ce:82:75:4a:4a:22:4f:7e:8f:b4:62:d2:fe:72:c2:6b:
         a9:25:2a:4c:b1:13:8d:43:db:56:82:86:88:70:17:29:38:f5:
         dd:61:86:56:9c:b5:6d:7c:e0:5a:fc:22:de:c1:9e:78:73:07:
         5c:08:ad:10:a0:6b:ae:b0:5d:6e:6e:de:71:78:c7:b6:20:17:
         20:cf:dd:10:d2:3b:f8:b8:bf:47:38:38:85:7e:ae:ec:30:53:
         ca:93:01:b8:f2:a1:3e:3e:07:f5:af:f5:19:a1:45:1c:1a:f2:
         ae:ff:cc:80:f9:cd:c5:97:26:c4:cd:b2:f6:8a:bc:20:38:f0:
         93:ca:d7:ae:f2:e2:21:8f:ba:5f:3e:de:e2:d5:8e:5e:d2:11:
         45:46:9f:5e:15:2e:5a:da:d8:0c:f9:51:49:9c:cb:ef:e8:94:
         a0:70:f3:13:52:b8:a8:f5:da:28:cf:1a:d6:70:a9:66:f7:24:
         72:d7:4b:25:b9:33:42:b4:f5:14:ab:f2:3b:fa:78:97:d8:33:
         c8:fe:b1:14:ea:fa:eb:2d:6c:08:95:dc:11:1b:7c:c9:c2:a5:
         c3:06:03:d0:5d:71:b4:63:62:eb:87:fe:ed:b3:a8:70:a6:c2:
         18:c8:ce:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----