Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37C30280BBCE11F1AA4E8EC7CE1D38B0.roa
File:                     37C30280BBCE11F1AA4E8EC7CE1D38B0.roa (raw, json)
Hash identifier:          brzPA1VxBgUb+mihyIYxiETJLLKIMZJBG/0wEHRndVs=
Subject key identifier:   90:45:0B:59:16:3A:47:AB:FF:23:E9:6E:F0:88:F6:58:34:20:B6:B8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EB39
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37C30280BBCE11F1AA4E8EC7CE1D38B0.roa
Signing time:             Tue 29 Sep 2026 06:23:00 +0000
ROA not before:           Tue 29 Sep 2026 06:22:56 +0000
ROA not after:            Sun 01 Nov 2026 06:22:56 +0000
asID:                     214413
IP address blocks:        154.193.136.0/21 maxlen: 24
                          154.193.144.0/22 maxlen: 24
                          154.193.148.0/22 maxlen: 24
                          154.193.168.0/22 maxlen: 24
                          154.193.172.0/22 maxlen: 24
                          154.193.176.0/22 maxlen: 24
                          154.193.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125753 (0x1eb39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 29 06:22:56 2026 GMT
            Not After : Nov  1 06:22:56 2026 GMT
        Subject: CN=6abb5944-e87b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:24:15:d7:99:a8:6b:d5:f2:ec:41:a6:de:f3:
                    db:1a:63:02:84:ea:18:e7:49:3b:83:b8:c8:cd:2e:
                    0a:dc:b6:05:be:b7:fb:83:eb:ca:d5:d8:a0:06:2e:
                    05:ed:3d:ae:7a:c7:8b:93:b3:1b:78:0a:8b:b3:9f:
                    c2:cd:7f:21:1f:65:00:12:cd:d4:4c:18:e9:a0:cc:
                    76:79:05:ec:46:a9:a1:3e:9f:34:3b:f3:70:44:81:
                    a9:70:f7:b2:b1:85:a9:95:a6:e6:16:63:e5:fa:0b:
                    ad:62:5a:8a:98:17:73:a3:7e:08:42:ad:7b:90:74:
                    f7:17:2b:e3:d8:27:85:0d:b3:9b:eb:05:7f:b1:4a:
                    d4:ae:57:45:70:a1:ce:07:a0:f8:33:09:af:d7:13:
                    6f:78:5b:d9:56:ac:50:73:ef:c0:f9:46:8e:a1:a2:
                    86:03:ba:29:56:de:d9:3a:ac:5f:4e:4b:3a:63:05:
                    fd:23:4a:20:08:fd:29:15:50:54:33:8f:88:1c:42:
                    89:e9:a2:92:0a:f6:44:d0:38:ea:26:de:16:95:4a:
                    7b:ca:a7:76:d8:fe:ee:1d:ad:e8:0d:26:dd:58:09:
                    b5:45:42:89:0d:f1:90:b7:96:78:69:ee:a7:a4:89:
                    f9:ad:3c:80:f5:2b:7b:18:ce:f0:2a:f3:58:e0:cf:
                    d8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:45:0B:59:16:3A:47:AB:FF:23:E9:6E:F0:88:F6:58:34:20:B6:B8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37C30280BBCE11F1AA4E8EC7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.136.0-154.193.151.255
                  154.193.168.0-154.193.183.255

    Signature Algorithm: sha256WithRSAEncryption
         d3:a7:bc:dd:e4:26:bb:11:cb:4f:02:b0:8b:45:af:8a:b8:5e:
         8e:fe:a5:5a:b1:43:97:37:13:a8:04:a6:68:8e:49:d6:80:e8:
         ae:6d:c2:2c:79:8f:ee:80:4f:c1:96:69:21:83:60:c6:66:b6:
         3a:41:82:2d:87:f7:92:f2:e5:4d:2a:32:45:eb:40:34:82:e3:
         de:85:c0:d8:3e:49:a1:cb:99:b4:1c:e8:44:f6:e7:b9:18:3e:
         e3:09:b3:fd:0c:8b:81:3e:f1:3e:4d:1f:af:7a:86:00:99:92:
         b2:b0:a2:81:7b:17:1e:cf:bf:78:10:b2:cc:f1:b4:c4:87:b1:
         c9:7b:c6:9a:81:c5:6e:07:e7:83:8e:9d:d7:af:f7:4f:40:bc:
         d9:ef:b4:4d:83:05:72:46:ff:0d:52:e0:58:82:29:19:cf:20:
         65:dd:33:1b:f7:fb:61:4b:1f:2a:24:03:d8:fb:c0:cb:7a:01:
         55:fa:b3:03:59:b6:8d:74:bf:c3:dd:1d:38:d8:99:5e:1d:b4:
         a9:a7:36:e5:c1:e6:d8:d7:c7:6f:79:76:39:e0:6b:0d:7b:58:
         1b:f7:7e:cf:9d:84:2f:7f:54:eb:d2:56:c4:9d:94:ce:ba:a3:
         17:c6:46:dd:1b:54:08:3a:98:37:f1:bb:1d:c9:a7:9c:c8:50:
         18:e0:83:27
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----