Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58FB7DAA96E011F182BCECBBCE1D38B0.roa
File:                     58FB7DAA96E011F182BCECBBCE1D38B0.roa (raw, json)
Hash identifier:          ECv8+u1rb6fHiIKpQuQTpERgUpzzLSo9eqb4LToQoEo=
Subject key identifier:   DE:86:10:8A:FA:C5:14:7E:B5:8A:6C:49:61:7D:67:B9:B0:64:EF:AE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DEC9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58FB7DAA96E011F182BCECBBCE1D38B0.roa
Signing time:             Thu 13 Aug 2026 06:29:34 +0000
ROA not before:           Thu 13 Aug 2026 06:29:30 +0000
ROA not after:            Thu 10 Sep 2026 06:29:30 +0000
asID:                     17497
IP address blocks:        154.193.16.0/20 maxlen: 24
                          154.193.162.0/24 maxlen: 24
                          154.196.142.0/24 maxlen: 24
                          154.196.143.0/24 maxlen: 24
                          154.211.168.0/21 maxlen: 24
                          154.217.232.0/23 maxlen: 24
                          154.217.232.0/24 maxlen: 24
                          154.217.233.0/24 maxlen: 24
                          154.222.130.0/24 maxlen: 24
                          154.222.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 10 Sep 2026 06:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122569 (0x1dec9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 13 06:29:30 2026 GMT
            Not After : Sep 10 06:29:30 2026 GMT
        Subject: CN=6a7d644e-f5a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e8:7a:e4:30:d8:1c:d4:33:85:aa:36:a7:72:
                    8e:49:a6:18:5b:85:91:4f:a6:58:b1:74:bd:58:66:
                    c5:39:72:a4:b3:17:5d:7a:0c:16:67:3a:9d:0b:17:
                    6e:51:d6:86:dc:86:01:d3:ec:0a:3f:8a:d1:5e:43:
                    61:5c:84:20:29:40:d3:48:93:60:80:3f:66:f0:5c:
                    07:97:53:04:9e:16:3c:c2:d5:d3:35:58:25:60:35:
                    a6:1f:87:49:bd:6a:13:0b:ec:b3:7f:fd:d3:15:7b:
                    c6:9b:08:b0:61:02:aa:99:34:ea:05:48:a6:cc:26:
                    d8:32:c6:12:92:2f:4d:b3:d4:93:11:da:42:69:e6:
                    81:2f:9f:f6:a6:56:f5:96:41:48:67:ea:ed:b8:55:
                    dd:29:f2:85:fa:78:a4:e7:37:b5:24:3e:f7:1f:78:
                    34:7d:f5:eb:ba:fa:c8:85:dd:51:16:bd:9d:d8:8a:
                    14:0e:bc:ac:9c:60:8c:be:fe:7a:07:c4:aa:89:fb:
                    0a:d8:7e:e5:19:df:b6:8c:19:85:f6:53:90:94:f3:
                    87:40:e6:ac:c7:b8:c3:8e:8f:9c:d4:71:47:29:83:
                    1d:6a:8d:7b:02:61:62:5b:70:24:0b:75:42:59:6d:
                    6b:51:08:95:e8:8a:7f:4b:77:67:a7:83:e4:e2:d1:
                    bf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:86:10:8A:FA:C5:14:7E:B5:8A:6C:49:61:7D:67:B9:B0:64:EF:AE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58FB7DAA96E011F182BCECBBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.16.0/20
                  154.193.162.0/24
                  154.196.142.0/23
                  154.211.168.0/21
                  154.217.232.0/23
                  154.222.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:d0:3c:75:d9:2b:3c:1f:72:df:92:d6:bc:d5:95:26:e2:c4:
         46:d6:de:fe:62:4e:3d:14:06:18:34:78:1b:24:e0:f7:fe:07:
         92:24:da:86:1d:34:71:b5:ae:3b:a3:5b:46:d6:d7:09:31:0f:
         f2:3d:23:c9:78:8c:d6:d0:68:b4:43:81:6c:05:4c:e1:70:5e:
         ef:ad:be:f6:7a:71:67:44:37:5f:b6:2b:bc:8f:9c:76:67:02:
         a1:30:79:06:1a:86:9f:46:ad:26:bf:a5:78:34:a1:c3:1b:0d:
         c4:8f:8f:44:30:bd:4c:88:94:58:a5:b4:a1:67:e2:59:a4:86:
         2e:be:09:1f:98:1d:d3:5d:46:8f:d9:db:21:46:9c:70:4e:3a:
         2d:60:df:2f:db:d0:2c:d3:49:b3:71:85:e2:c6:a6:8f:8e:06:
         fd:88:3c:79:81:39:67:19:da:d8:cc:f0:c9:cf:7f:63:81:d8:
         b3:f8:08:f7:ce:d4:d2:e0:5e:33:85:22:34:84:27:4b:79:7e:
         c1:09:39:70:28:fb:5e:33:8f:b4:ae:b3:82:8f:90:77:ae:0d:
         ee:d6:2c:dc:8a:32:b3:eb:2f:bc:24:e8:d1:4b:21:13:81:f2:
         a8:8f:78:96:6d:4c:e6:aa:c9:5d:e3:ec:27:8a:32:bd:1a:dc:
         61:22:9c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----