Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45298068933611F1B42B2FFCCE1D38B0.roa
File:                     45298068933611F1B42B2FFCCE1D38B0.roa (raw, json)
Hash identifier:          mLkq6Ag6MpR7zqE9JboG/atvfr4zBfkmnp1Xc1yj2gg=
Subject key identifier:   33:F8:EC:8C:83:CA:76:E3:B4:D7:E6:84:2A:1B:BC:F1:CF:7E:68:7D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DD8E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45298068933611F1B42B2FFCCE1D38B0.roa
Signing time:             Sat 08 Aug 2026 14:34:33 +0000
ROA not before:           Sat 08 Aug 2026 14:34:29 +0000
ROA not after:            Sun 15 Aug 2027 14:34:29 +0000
asID:                     63199
IP address blocks:        154.208.131.0/24 maxlen: 24
                          154.209.72.0/21 maxlen: 24
                          154.209.88.0/22 maxlen: 24
                          154.223.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Sep 2026 00:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122254 (0x1dd8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug  8 14:34:29 2026 GMT
            Not After : Aug 15 14:34:29 2027 GMT
        Subject: CN=6a773e78-f787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6e:13:ec:d1:71:a0:08:33:46:bd:b5:a4:30:
                    24:8d:bd:5f:12:99:9b:30:6a:43:23:ce:a3:f1:f6:
                    88:87:33:58:75:86:a7:e9:01:8e:61:89:11:f3:19:
                    17:12:fa:fc:0d:bc:16:3a:e7:6f:dd:e2:ac:93:87:
                    db:a2:4c:31:34:a6:e2:b5:16:46:12:67:aa:7d:2b:
                    4a:a1:bd:fd:9b:4c:85:33:94:dc:14:04:94:41:e6:
                    96:a3:1e:7c:a0:98:fd:55:f7:e7:9c:0f:be:e8:17:
                    8f:37:1a:47:ae:ee:46:b2:89:7b:c6:79:ce:a5:56:
                    c6:ec:43:07:92:77:df:a0:a7:3d:f8:e8:f0:57:d5:
                    7a:54:f9:e8:50:49:5d:83:67:6a:8c:62:fc:fb:62:
                    2c:f4:db:1e:a5:46:e7:74:14:07:b9:69:11:ab:ec:
                    d2:a2:91:0b:d6:5e:d5:ed:42:d9:f6:8a:52:6a:ac:
                    9e:17:dc:87:22:3c:60:77:7a:6e:f7:75:3f:77:69:
                    43:d2:7c:ee:8b:0a:a7:5d:a2:0a:56:be:d6:85:7e:
                    8b:88:b2:32:57:d0:38:74:31:2b:13:b3:0e:5c:e7:
                    33:d0:3d:00:b0:56:bd:fa:7e:06:61:1b:54:c8:ff:
                    e0:32:f0:3b:e6:29:06:13:22:15:84:fe:fc:cd:eb:
                    ec:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F8:EC:8C:83:CA:76:E3:B4:D7:E6:84:2A:1B:BC:F1:CF:7E:68:7D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45298068933611F1B42B2FFCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.208.131.0/24
                  154.209.72.0/21
                  154.209.88.0/22
                  154.223.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:4c:4b:7a:f9:53:f4:28:a4:3c:92:4c:cb:01:3a:9d:39:bc:
         42:02:7d:fb:d1:8c:05:3c:f9:5a:61:49:c5:8b:0c:e8:f4:59:
         1b:55:5a:c4:ce:10:7f:32:1d:71:ee:98:23:30:3b:3f:e3:2c:
         1e:ad:cb:b1:76:aa:cb:3a:7a:13:1c:f5:0c:d1:4e:7a:b2:37:
         3c:9e:b2:d0:62:ea:8d:41:ad:ca:33:53:b2:fd:cd:4c:6c:8e:
         d2:ab:7c:ea:7f:f7:97:98:31:87:4c:d1:9b:00:36:77:0d:a7:
         ab:77:db:c4:db:d7:91:56:41:9e:eb:bb:36:81:a5:c5:47:91:
         02:72:55:5e:bc:39:b9:48:cf:d6:e8:a9:73:fe:df:4c:a7:13:
         14:e3:1b:bf:dc:e9:51:ad:96:e6:f3:c6:48:e6:6d:a1:aa:22:
         f3:b7:a7:cb:51:2d:bb:98:ae:9e:8c:5a:b5:ff:a3:48:89:c2:
         c7:68:b0:cb:4e:87:3d:28:98:6f:a0:51:97:0e:88:12:0b:2e:
         e1:c2:64:cd:76:32:38:6a:6c:b5:3c:c3:ae:5f:d6:7e:f8:56:
         96:e0:54:95:63:d0:d0:b7:03:a2:c6:39:8c:f7:3b:d9:84:c8:
         d8:12:1c:a8:47:fc:45:ff:ab:38:bc:ce:d2:a4:ed:23:58:33:
         50:d8:63:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----