Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/556D5C22C60511F18A2CC106CF1D38B0.roa
File:                     556D5C22C60511F18A2CC106CF1D38B0.roa (raw, json)
Hash identifier:          jCytqhFdN6OdBiHYs5+23eZ7+H7jOvnxpN4fueDnN7c=
Subject key identifier:   65:19:DE:AB:09:90:79:57:B6:14:F1:DB:07:31:CC:C1:10:B5:8B:B3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ED9F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/556D5C22C60511F18A2CC106CF1D38B0.roa
Signing time:             Mon 12 Oct 2026 06:22:44 +0000
ROA not before:           Mon 12 Oct 2026 06:22:39 +0000
ROA not after:            Thu 11 Oct 2029 06:22:39 +0000
asID:                     17561
IP address blocks:        154.86.138.0/24 maxlen: 24
                          154.86.139.0/24 maxlen: 24
                          154.86.140.0/24 maxlen: 24
                          154.86.141.0/24 maxlen: 24
                          154.86.142.0/24 maxlen: 24
                          154.86.143.0/24 maxlen: 24
                          154.86.144.0/24 maxlen: 24
                          154.86.145.0/24 maxlen: 24
                          154.86.146.0/24 maxlen: 24
                          154.86.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126367 (0x1ed9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 12 06:22:39 2026 GMT
            Not After : Oct 11 06:22:39 2029 GMT
        Subject: CN=6acc7cb4-7983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:96:1e:34:0a:2c:1b:b3:7e:4c:fb:83:05:b3:
                    63:a6:df:a4:65:66:e1:5b:7d:e9:ad:6e:48:2b:c0:
                    56:1a:c3:18:61:29:fa:7f:84:36:b0:82:87:6f:8c:
                    28:d2:ab:71:d0:02:7c:5f:08:46:07:9b:e2:54:83:
                    97:8e:87:78:00:06:85:39:61:89:83:14:06:d0:37:
                    aa:5a:47:f8:7a:50:25:9c:e6:bf:c6:32:30:39:cb:
                    64:93:70:51:6b:9e:4b:2b:bd:4c:e9:18:c3:c8:04:
                    61:a3:b9:05:0f:14:7c:fb:e4:31:f1:c8:38:fd:68:
                    1b:4e:53:d0:b3:d8:fa:42:c5:ac:ec:44:b2:05:d6:
                    0b:a9:ef:9f:54:8e:5d:e5:0e:43:56:e8:52:ad:dd:
                    a7:8f:70:9d:ea:54:a5:a8:41:be:37:98:20:5f:8d:
                    40:8c:23:21:bb:6c:92:ad:0a:7b:db:f4:29:9f:d3:
                    b9:c6:63:aa:45:4b:96:e2:bc:4f:50:44:d5:4c:c4:
                    79:23:22:39:7e:5e:a6:90:10:fa:45:b9:c4:1d:05:
                    00:7e:31:04:23:e1:14:4d:f9:6d:ab:ce:61:fe:6d:
                    8e:09:cd:97:7e:50:b9:60:b8:84:6c:ad:d9:0b:10:
                    f9:00:b5:6b:31:f2:42:92:02:4a:72:28:98:e4:9a:
                    67:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:19:DE:AB:09:90:79:57:B6:14:F1:DB:07:31:CC:C1:10:B5:8B:B3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/556D5C22C60511F18A2CC106CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.138.0-154.86.147.255

    Signature Algorithm: sha256WithRSAEncryption
         94:ee:2d:f5:85:3a:21:19:57:bb:c0:ae:dc:e7:f0:5c:2b:3a:
         2e:59:6a:51:21:92:c9:6c:1c:70:7b:fb:29:97:a8:82:73:10:
         6b:00:6f:dd:0c:a0:57:85:29:4f:ec:3f:f7:05:ae:ea:61:7e:
         87:b7:41:a4:6e:fa:c5:bf:e9:2b:9c:c8:e3:e2:91:c0:e6:2b:
         c0:89:98:1b:29:3d:ad:fe:c8:40:d7:e7:c7:8f:1d:a2:3a:f2:
         18:25:6a:07:97:89:4d:ff:59:75:38:3f:fe:84:bc:85:85:1e:
         2a:7c:48:3a:43:72:27:4e:fc:f3:fd:d0:c5:a0:17:99:0e:a4:
         bf:6a:f8:40:1b:5e:35:25:91:ea:d5:fc:82:23:1a:51:94:2e:
         7e:3c:b9:11:ad:4e:79:f4:6c:dc:fc:94:9d:c2:e8:cd:d7:1b:
         83:a7:dd:8c:cd:0d:a4:d4:81:52:3d:8d:62:ed:cc:75:92:75:
         6f:e2:b9:fa:be:93:62:75:05:e5:57:c4:d3:70:dc:75:eb:56:
         25:20:84:fd:0b:e3:c5:e5:0c:89:a2:d5:c7:96:57:4c:44:46:
         5e:b7:a2:3b:9c:f0:2c:e2:14:9c:cd:db:3a:75:bb:32:6e:da:
         37:13:46:24:d1:f5:71:42:8e:c7:ff:8e:7a:00:85:5c:9f:c1:
         f7:22:e7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----