Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/609441C0964311F1ACB054F7CE1D38B0.roa
File:                     609441C0964311F1ACB054F7CE1D38B0.roa (raw, json)
Hash identifier:          +3IPZbPV1FGslwRfLS8yydA4GpvpSsS455hH05LVyTQ=
Subject key identifier:   77:51:76:6B:A5:26:5F:07:EF:57:8C:0E:A5:B2:13:AD:00:AC:8E:5C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DE8E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/609441C0964311F1ACB054F7CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 11:45:55 +0000
ROA not before:           Wed 12 Aug 2026 11:45:51 +0000
ROA not after:            Sun 12 Aug 2029 11:45:51 +0000
asID:                     17561
IP address blocks:        154.91.130.0/24 maxlen: 24
                          154.91.131.0/24 maxlen: 24
                          154.91.132.0/24 maxlen: 24
                          154.91.133.0/24 maxlen: 24
                          154.91.134.0/24 maxlen: 24
                          154.91.135.0/24 maxlen: 24
                          154.91.136.0/24 maxlen: 24
                          154.91.137.0/24 maxlen: 24
                          154.91.140.0/24 maxlen: 24
                          154.91.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122510 (0x1de8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 12 11:45:51 2026 GMT
            Not After : Aug 12 11:45:51 2029 GMT
        Subject: CN=6a7c5cf3-82d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c0:7a:6f:73:72:f5:35:09:b9:69:75:36:cc:
                    65:f5:68:5f:31:3e:ec:16:40:d2:c1:57:ff:14:73:
                    ec:a0:01:7f:84:35:a1:0a:d0:b4:c2:04:b2:31:55:
                    29:af:73:73:eb:24:91:ee:c4:57:62:44:30:78:5d:
                    3d:58:e9:b4:c0:6d:1e:a0:52:20:44:b9:93:a4:32:
                    f0:ad:7e:af:02:e3:a1:97:2f:28:62:25:f7:c7:ce:
                    73:6b:ca:db:88:13:72:b3:73:ef:41:78:72:c1:ed:
                    a0:24:ff:c7:a5:61:85:22:61:c3:36:90:1e:2a:21:
                    83:6a:76:f2:2e:9f:e8:d9:44:ca:06:fb:7e:5e:5d:
                    1d:9d:d8:c7:df:33:ad:f4:e8:5c:97:43:17:00:e3:
                    33:9b:bb:1a:d1:17:4b:10:40:8d:97:0f:3f:5d:10:
                    7f:f0:57:60:5c:d3:0b:90:32:6a:65:4a:da:7e:49:
                    0c:ab:8f:2b:36:d2:4b:e1:ed:89:d3:bf:a5:de:1f:
                    71:ee:1e:da:df:a8:73:ad:4d:76:1a:43:0b:3b:12:
                    cf:13:25:cf:d7:b7:2c:38:c4:56:e7:88:14:9f:b0:
                    e8:f5:66:6f:f4:2a:dc:4d:1f:6e:ce:c0:69:bb:18:
                    47:2e:4c:9b:04:38:6d:be:5d:91:f0:ca:01:8b:04:
                    a1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:51:76:6B:A5:26:5F:07:EF:57:8C:0E:A5:B2:13:AD:00:AC:8E:5C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/609441C0964311F1ACB054F7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.91.130.0-154.91.137.255
                  154.91.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d2:4c:b2:54:2b:f5:a5:5e:b8:3a:45:c5:74:8f:26:73:70:4b:
         1a:6f:d2:3f:e3:2a:13:39:06:fa:26:13:fc:14:d5:ae:fe:df:
         17:b6:c0:18:67:77:6c:fb:73:32:0f:05:c1:d1:c6:1c:aa:71:
         13:b3:eb:c5:73:9d:13:4d:39:11:eb:ae:1f:f2:9c:bb:f4:76:
         40:08:7c:57:14:ed:88:94:85:af:54:04:68:01:bb:1e:d7:48:
         94:61:ee:d1:ed:f3:1e:58:61:4f:c2:26:dd:c5:a8:2e:8a:8d:
         d8:6f:1a:38:9f:01:5c:2f:79:b5:4d:cb:86:a6:ec:b8:cc:cb:
         ed:5f:01:17:b0:84:69:f8:18:d2:9a:ff:73:12:84:ca:e8:9f:
         d5:38:8e:97:14:41:4f:39:a5:e9:a8:ba:78:9f:c6:f5:58:f0:
         cb:25:88:13:42:da:d2:c7:20:7e:46:65:f8:2e:48:35:10:20:
         b3:25:9a:77:cb:9f:7d:ab:32:7d:bb:f0:09:b1:76:70:a8:e3:
         8a:ff:31:68:b9:4b:80:20:64:58:f0:85:7c:d6:33:38:82:b9:
         9c:95:42:80:1b:f6:34:a6:0e:38:3c:95:dc:59:81:f3:1a:56:
         df:45:46:d9:5e:28:6a:a8:55:d0:7d:f6:b0:a3:d3:2c:de:e3:
         e1:7c:45:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----