Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CA11A96965011F1A8B3F2C4CE1D38B0.roa
File:                     4CA11A96965011F1A8B3F2C4CE1D38B0.roa (raw, json)
Hash identifier:          b1aFf0qGu/AzQU1YJIOiIToLkWHi5FhYhs9RT7p9PRU=
Subject key identifier:   97:B9:9F:C1:E2:9F:C8:65:6C:8E:3E:24:A7:3D:08:E3:E4:74:27:0B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DEAC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CA11A96965011F1A8B3F2C4CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 13:18:25 +0000
ROA not before:           Wed 12 Aug 2026 13:18:21 +0000
ROA not after:            Sun 12 Aug 2029 13:18:21 +0000
asID:                     17561
IP address blocks:        154.209.246.0/24 maxlen: 24
                          154.209.247.0/24 maxlen: 24
                          154.209.248.0/24 maxlen: 24
                          154.209.249.0/24 maxlen: 24
                          154.209.250.0/24 maxlen: 24
                          154.209.251.0/24 maxlen: 24
                          154.219.0.0/24 maxlen: 24
                          154.219.2.0/24 maxlen: 24
                          154.219.3.0/24 maxlen: 24
                          154.219.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122540 (0x1deac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 12 13:18:21 2026 GMT
            Not After : Aug 12 13:18:21 2029 GMT
        Subject: CN=6a7c72a1-7faa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:94:67:38:3b:ce:4a:b1:ed:7c:f3:1e:36:59:
                    07:b5:e8:bb:a9:9b:97:1b:c7:c4:71:3c:f2:70:15:
                    5f:4b:4b:85:c7:93:ff:7a:80:4f:59:65:5e:49:0a:
                    25:b2:c5:1f:7d:7b:9e:7d:af:74:cb:dc:9e:fb:d9:
                    0d:57:df:f3:76:92:5c:23:4d:26:a8:0f:56:89:fe:
                    18:ae:35:78:91:eb:34:3d:14:dd:b6:cf:4a:78:db:
                    cd:34:c3:1c:d7:be:d4:cd:2b:e8:a9:55:15:55:d7:
                    cd:01:20:44:60:c9:4e:d8:8e:48:8a:04:97:da:48:
                    16:c3:e7:32:b4:88:1d:4b:f6:4d:5e:de:92:be:27:
                    f0:cb:88:ef:3f:ed:09:fd:48:5f:f2:79:a5:05:6d:
                    29:ff:7a:3b:ff:af:94:94:c7:73:93:1e:0d:94:ce:
                    c1:a8:f5:75:8a:b9:c5:46:18:ba:41:20:2c:14:99:
                    b4:73:63:4d:06:a3:3d:58:5c:0b:18:e4:c5:cb:2a:
                    0d:4f:c5:1b:e2:3b:0e:3d:af:5a:4c:83:0b:8c:05:
                    90:b1:66:2e:8c:bd:26:ba:df:44:c1:6d:2f:55:f4:
                    b3:89:82:61:73:81:b9:3b:fd:94:53:f4:1d:be:02:
                    05:bb:fa:ac:05:1b:3f:27:16:bd:e7:84:e4:9a:8f:
                    63:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B9:9F:C1:E2:9F:C8:65:6C:8E:3E:24:A7:3D:08:E3:E4:74:27:0B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CA11A96965011F1A8B3F2C4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.209.246.0-154.209.251.255
                  154.219.0.0/24
                  154.219.2.0/23
                  154.219.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:31:c8:01:2c:ee:f9:75:ac:e1:bf:6f:d1:10:19:13:96:bc:
         8a:e1:4c:d3:5f:64:be:54:87:e3:ec:56:2c:5c:7e:56:fa:b6:
         09:fb:62:fa:f9:4d:8f:f0:fe:c4:66:42:e4:40:3c:e7:c6:97:
         7e:62:a9:f1:69:a0:b6:9f:08:9a:90:99:ad:f2:af:15:5c:76:
         5e:59:8a:a8:2f:b6:5c:b9:85:0f:88:d3:46:3d:d8:5f:23:2b:
         71:6d:2b:b3:50:6c:b9:00:55:53:ea:c6:13:81:e3:e2:9d:3d:
         47:3a:74:27:ae:db:e8:7a:f7:3b:60:33:5b:bc:d0:bf:d6:07:
         16:10:19:b1:e9:b0:aa:d8:2b:eb:fb:b3:0d:3c:d2:e3:3e:77:
         db:00:8c:57:5a:98:a2:c9:e6:25:54:85:ab:43:55:cc:44:47:
         a8:fb:c2:7a:47:d1:3c:3f:e9:d8:8a:a6:23:c0:ba:98:03:12:
         70:c0:1e:6b:75:f5:ed:f0:77:8d:61:e2:17:56:17:54:51:4e:
         41:d4:83:29:a8:98:df:a7:56:55:72:1e:b1:64:d5:b3:77:fd:
         91:39:5a:e9:9f:dd:1e:ff:58:d3:e7:fa:f7:73:3c:45:b0:ad:
         1f:52:65:5e:b9:a6:43:a3:6d:b0:37:3f:0e:11:9d:28:35:41:
         40:cf:39:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----