Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A6550AC9C7D11F1B2303BBCCE1D38B0.roa
File:                     4A6550AC9C7D11F1B2303BBCCE1D38B0.roa (raw, json)
Hash identifier:          rwEgZQX5vO/YVGDccCa+0ux1/pcuoUhnfAXfMUkOBC8=
Subject key identifier:   97:13:46:2F:8C:7F:A7:6E:C9:16:38:E9:46:78:2A:3E:35:34:B9:81
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E068
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A6550AC9C7D11F1B2303BBCCE1D38B0.roa
Signing time:             Thu 20 Aug 2026 09:55:36 +0000
ROA not before:           Thu 20 Aug 2026 09:55:32 +0000
ROA not after:            Thu 24 Sep 2026 09:55:32 +0000
asID:                     8796
IP address blocks:        154.202.117.0/24 maxlen: 24
                          154.202.120.0/21 maxlen: 24
                          154.217.234.0/23 maxlen: 24
                          154.217.236.0/22 maxlen: 24
                          154.217.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 12:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122984 (0x1e068)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 09:55:32 2026 GMT
            Not After : Sep 24 09:55:32 2026 GMT
        Subject: CN=6a86cf18-bfff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5c:79:d9:38:ee:b6:b2:46:52:a3:52:3d:80:
                    01:b8:9d:b6:8c:a7:71:79:e7:eb:70:a2:85:2d:fb:
                    4d:2a:b1:35:2f:7d:b6:2a:a3:09:36:fd:70:bd:5f:
                    8e:0e:08:17:99:73:47:d5:6f:a4:88:ba:b0:3d:b2:
                    c2:23:e9:7a:32:0d:25:e3:c2:0f:69:f3:1d:74:70:
                    79:15:5e:df:ef:77:a1:40:48:9b:af:05:8c:55:4f:
                    28:49:09:02:30:dc:92:18:0d:9b:ba:35:69:36:5a:
                    c2:8e:fc:1f:06:7c:9a:02:06:83:41:5b:9c:9a:16:
                    fd:35:1b:2b:58:13:47:81:eb:36:58:fc:7e:71:bc:
                    64:b1:97:73:3d:59:5e:84:a0:4e:02:6a:4b:a1:f4:
                    35:68:e2:34:d4:2b:1d:d6:5b:20:ce:ca:1f:73:32:
                    a8:3a:f2:f6:c1:6b:1e:e7:0b:60:b6:a9:16:4b:ea:
                    17:7d:89:2c:0f:40:95:c2:3f:c6:e7:2c:c4:a6:ae:
                    af:84:31:b3:56:87:2a:94:62:43:2f:ed:ba:cf:ba:
                    47:ca:51:5a:d8:e6:2e:9d:8d:3a:c9:2e:8c:f1:47:
                    8f:66:6f:6e:a7:4b:3f:b2:6a:d1:2b:64:fd:4d:2e:
                    01:2f:ea:31:8f:bb:c5:89:3e:aa:41:3a:5b:f4:13:
                    36:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:13:46:2F:8C:7F:A7:6E:C9:16:38:E9:46:78:2A:3E:35:34:B9:81
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A6550AC9C7D11F1B2303BBCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.117.0/24
                  154.202.120.0/21
                  154.217.234.0-154.217.255.255

    Signature Algorithm: sha256WithRSAEncryption
         73:8e:86:31:04:f1:15:11:02:49:43:a9:cb:7c:d5:f2:f2:ca:
         7d:26:07:83:cf:90:da:a8:e0:10:77:79:07:d6:91:a1:29:95:
         73:1e:3a:da:29:87:44:2c:2e:0f:80:34:b9:4d:1b:e1:5d:55:
         7c:ad:2f:e9:c6:99:29:12:06:47:b3:3c:23:2c:68:07:4f:53:
         ce:4f:09:59:34:4b:e3:e9:bd:38:fd:3c:c9:50:42:95:53:b3:
         51:36:8e:29:54:b5:26:60:ca:18:63:ec:b5:cf:5f:2c:72:72:
         93:ee:b9:c3:ec:fe:22:e9:5d:a3:f4:95:b0:1e:ec:f7:6f:39:
         93:e0:66:da:95:76:62:1f:5f:bb:45:68:89:e7:e8:5d:22:b1:
         3b:aa:f0:1d:fa:e3:a7:c3:6f:21:d6:68:5f:e1:62:46:71:e8:
         98:7d:ab:5d:1d:3f:28:9c:93:cb:06:f3:cd:d2:b7:a3:6f:53:
         e0:28:99:be:34:ed:60:a2:4b:76:5e:ab:96:56:36:e5:e5:61:
         a8:d2:ba:b0:2c:f2:f0:18:38:e5:70:2f:aa:23:7d:c1:36:57:
         67:7d:9f:75:78:5e:55:0d:c9:c6:ad:80:2d:99:bf:be:29:ab:
         f5:19:40:78:2f:0c:46:70:5f:3d:97:c6:cb:26:87:9e:b2:ee:
         6c:86:b5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----