Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55C5D5E6963511F1A9C5C8A4CE1D38B0.roa
File:                     55C5D5E6963511F1A9C5C8A4CE1D38B0.roa (raw, json)
Hash identifier:          x8vCZixBuefqQyCBPN5T6cadwayA1LFYnNEdgB/5dKY=
Subject key identifier:   F2:FC:CE:AB:62:3A:3B:B3:69:EA:BD:9C:7C:45:5C:81:43:D6:61:F3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DE5F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55C5D5E6963511F1A9C5C8A4CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 10:05:24 +0000
ROA not before:           Wed 12 Aug 2026 10:05:20 +0000
ROA not after:            Sun 12 Aug 2029 10:05:20 +0000
asID:                     17561
IP address blocks:        154.207.189.0/24 maxlen: 24
                          154.207.190.0/24 maxlen: 24
                          154.207.191.0/24 maxlen: 24
                          154.207.192.0/24 maxlen: 24
                          154.207.193.0/24 maxlen: 24
                          154.207.194.0/24 maxlen: 24
                          154.207.195.0/24 maxlen: 24
                          154.207.196.0/24 maxlen: 24
                          154.207.197.0/24 maxlen: 24
                          154.207.198.0/24 maxlen: 24
                          154.207.199.0/24 maxlen: 24
                          154.207.200.0/24 maxlen: 24
                          154.207.201.0/24 maxlen: 24
                          154.207.202.0/24 maxlen: 24
                          154.207.203.0/24 maxlen: 24
                          154.207.204.0/24 maxlen: 24
                          154.207.205.0/24 maxlen: 24
                          154.207.206.0/24 maxlen: 24
                          154.207.207.0/24 maxlen: 24
                          154.207.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122463 (0x1de5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 12 10:05:20 2026 GMT
            Not After : Aug 12 10:05:20 2029 GMT
        Subject: CN=6a7c4564-66bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3e:29:72:04:6f:25:4a:da:c0:86:5e:c8:b4:
                    53:e8:08:66:a7:28:65:97:b6:58:0d:d2:eb:13:ba:
                    1a:1c:60:b6:57:c5:93:65:3d:e3:0b:ec:12:ec:bf:
                    5f:c0:e4:8d:ac:73:dc:d8:e0:34:0e:f6:a4:72:c0:
                    02:e5:e4:25:14:aa:7f:18:90:34:0e:38:90:37:9d:
                    bf:14:6e:52:b6:eb:4a:c2:a0:c4:cf:cb:05:2c:61:
                    36:d0:54:d5:ad:04:a9:49:8f:ed:75:42:4a:85:e8:
                    10:81:74:45:36:94:bd:7c:db:58:eb:51:a1:89:ff:
                    ab:50:72:ae:d4:90:4b:86:19:fa:2c:73:89:10:7c:
                    72:ba:50:ad:e7:99:fb:62:25:12:4b:82:fb:9c:79:
                    fe:01:b8:0f:84:9b:a9:ee:f7:ed:07:95:32:0d:b6:
                    eb:24:b0:3e:ab:77:3b:a4:07:7c:9a:c4:18:95:8b:
                    04:8c:17:9f:6b:e9:f3:77:17:44:f3:fc:e9:27:23:
                    8c:f5:ae:5c:c9:f9:d8:54:67:33:5f:a6:c9:cc:fa:
                    2e:f2:56:5f:cf:80:fd:0b:4a:0f:d6:20:34:b5:73:
                    1f:54:1a:a5:71:ec:cc:e6:b6:fb:d0:70:b2:e0:18:
                    d8:d0:d5:2c:de:99:ca:b2:81:4d:3e:27:29:90:4e:
                    0e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:FC:CE:AB:62:3A:3B:B3:69:EA:BD:9C:7C:45:5C:81:43:D6:61:F3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55C5D5E6963511F1A9C5C8A4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.207.189.0-154.207.208.255

    Signature Algorithm: sha256WithRSAEncryption
         b0:d3:70:e0:35:2c:82:9b:a2:ce:9b:c3:b1:8d:11:47:4f:82:
         82:4c:38:28:a2:cd:67:61:21:5b:c3:c8:f0:16:40:6c:fe:57:
         b1:af:7a:8c:56:8e:da:e4:3b:f7:73:c5:91:72:10:25:8a:cc:
         00:8d:f6:a3:1a:8f:76:2e:c1:19:26:e9:89:7d:5a:3f:9a:58:
         0f:9f:7c:86:b2:2b:17:7f:71:c1:a9:67:71:2f:2c:5e:d1:e5:
         95:31:c0:76:98:ab:5e:21:8d:78:c7:ef:c2:9f:86:26:a7:0e:
         e8:ca:d9:f2:f5:4d:8f:a6:71:b1:c9:ad:f1:b5:d4:f3:a3:81:
         8c:ea:93:43:5b:b8:7e:0f:01:a8:0d:ad:1e:68:74:13:7e:bf:
         57:0e:90:b6:d0:8b:0c:e7:c6:63:81:04:51:6c:66:9c:54:dd:
         98:9c:bf:15:8d:65:5f:9d:9d:b1:2b:3a:d5:d7:0a:bf:1c:4b:
         e7:ef:13:d7:15:fd:45:e7:f4:f5:92:a9:77:4e:67:b1:e4:9f:
         83:da:ee:db:eb:83:70:d2:43:25:66:b9:87:0c:a8:11:d3:e7:
         c1:21:a6:b1:bb:3d:c2:9f:1d:93:18:8d:7d:cb:33:7e:8a:b2:
         7a:01:c7:34:7a:d1:eb:e6:13:59:b3:99:4f:fa:0e:e4:80:a0:
         f1:44:72:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----