Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FACAD5E9C6E11F1BA1327E3CE1D38B0.roa
File:                     3FACAD5E9C6E11F1BA1327E3CE1D38B0.roa (raw, json)
Hash identifier:          arGCmf4mPkBj/vhn9IjCpUfpHwWZajEdp/O1guLV8qQ=
Subject key identifier:   E0:C1:70:83:C9:C9:81:7D:33:12:4E:0E:A0:30:18:BA:01:45:98:89
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E047
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FACAD5E9C6E11F1BA1327E3CE1D38B0.roa
Signing time:             Thu 20 Aug 2026 08:07:56 +0000
ROA not before:           Thu 20 Aug 2026 08:07:52 +0000
ROA not after:            Tue 22 Sep 2026 08:07:52 +0000
asID:                     22516
IP address blocks:        154.199.160.0/19 maxlen: 24
                          154.199.224.0/19 maxlen: 24
                          154.202.32.0/19 maxlen: 24
                          154.207.32.0/19 maxlen: 24
                          154.207.64.0/18 maxlen: 24
                          154.207.192.0/18 maxlen: 24
                          154.212.32.0/19 maxlen: 24
                          154.219.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 12:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122951 (0x1e047)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 08:07:52 2026 GMT
            Not After : Sep 22 08:07:52 2026 GMT
        Subject: CN=6a86b5dc-25cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d0:de:67:20:50:20:74:fa:66:85:30:6e:bb:
                    46:ae:c0:00:47:75:fe:d8:8f:1a:6a:59:73:20:e8:
                    c2:5d:aa:ff:0a:03:4c:95:d0:b6:b1:8c:71:cd:f3:
                    0a:85:d1:ec:27:2d:2d:c7:37:6f:01:89:51:46:df:
                    0b:1f:26:9d:7f:8e:8e:ee:c0:53:cd:c4:9c:72:a5:
                    3a:bc:71:46:f5:e7:02:d3:b6:46:5e:1c:c6:d9:6b:
                    21:f5:9a:c4:ed:9f:16:e4:d1:0e:cd:e5:0d:4d:67:
                    49:7f:e8:21:bf:01:ac:81:32:a3:ae:4a:a8:6e:e6:
                    1f:ac:da:1f:13:94:58:01:e2:73:21:1c:cd:61:cf:
                    29:7b:71:d6:23:29:2b:75:4a:58:bf:71:5b:4d:fc:
                    90:d8:29:05:cf:80:8e:10:3a:17:09:55:d5:b3:dd:
                    f1:4b:7a:11:92:70:0e:7e:c4:90:de:82:0d:da:a2:
                    8a:77:94:ed:b9:65:98:6a:70:56:6c:1b:d3:90:c1:
                    11:e8:dc:2d:c1:07:2b:64:e8:5c:69:a8:8c:98:14:
                    69:95:79:9d:87:83:ae:b6:ff:80:9e:82:32:dc:55:
                    86:6d:bd:e4:87:cf:e3:98:07:97:c7:db:98:c3:1a:
                    7c:ee:45:52:5e:b4:1d:c9:70:13:34:7f:6b:1e:f4:
                    05:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C1:70:83:C9:C9:81:7D:33:12:4E:0E:A0:30:18:BA:01:45:98:89
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FACAD5E9C6E11F1BA1327E3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.199.160.0/19
                  154.199.224.0/19
                  154.202.32.0/19
                  154.207.32.0-154.207.127.255
                  154.207.192.0/18
                  154.212.32.0/19
                  154.219.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1f:96:79:ae:ea:d6:39:0b:a8:9b:74:9a:eb:89:88:c6:76:62:
         fb:7f:44:0e:fa:14:fa:c8:5e:a4:d0:5c:80:c5:82:26:53:74:
         d3:d1:19:43:91:4f:26:1f:5e:02:12:0c:bd:b3:13:ee:a9:b5:
         33:af:b4:10:20:29:7a:d7:11:56:25:8b:b6:d7:40:64:4c:67:
         5c:f5:85:4c:01:15:ce:64:45:ee:ac:aa:53:41:c9:0f:a1:de:
         f5:79:25:3a:69:52:93:5a:6e:0c:69:f5:61:c5:4a:15:0b:31:
         5e:5d:b9:d2:6e:f6:0d:02:6e:1a:4e:0c:25:26:3c:8c:e7:67:
         c2:e6:15:12:be:d1:03:7f:fc:40:cd:19:4f:e2:5d:49:4a:a5:
         81:bf:34:2a:c1:e8:31:97:6d:ae:31:17:24:e8:49:0c:67:7d:
         b5:88:d0:03:a1:33:8e:63:f7:04:89:88:d6:f6:fc:fa:3f:9b:
         f5:50:9c:ef:51:83:25:a0:e7:83:f9:7d:2a:95:19:f8:e7:62:
         21:3c:46:a8:c1:48:f0:9f:20:f3:fc:ea:ea:0c:d3:3a:e0:a3:
         52:e4:42:8d:7f:43:fe:3d:57:42:25:fe:1b:78:19:2c:87:9c:
         27:dc:83:8a:56:e4:96:d9:cc:9d:f7:6a:0c:32:83:3e:47:44:
         07:fb:e6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----