Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64E3FDA8963C11F187A5F2CDCE1D38B0.roa
File:                     64E3FDA8963C11F187A5F2CDCE1D38B0.roa (raw, json)
Hash identifier:          KC+fQ4jVUdr/y7wXH6gOHJlBtlzMq2ia/UDI9RHsmSU=
Subject key identifier:   11:BD:F1:8F:85:25:C2:F0:97:09:FF:BA:5E:7B:0B:05:5E:C8:A7:D9
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DE7C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64E3FDA8963C11F187A5F2CDCE1D38B0.roa
Signing time:             Wed 12 Aug 2026 10:55:56 +0000
ROA not before:           Wed 12 Aug 2026 10:55:51 +0000
ROA not after:            Sun 12 Aug 2029 10:55:51 +0000
asID:                     17561
IP address blocks:        154.212.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122492 (0x1de7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 12 10:55:51 2026 GMT
            Not After : Aug 12 10:55:51 2029 GMT
        Subject: CN=6a7c513c-1216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:95:8e:bb:80:79:17:1f:31:d0:0f:54:90:a9:
                    f0:fc:5b:70:ad:10:5e:8f:34:87:14:45:b6:6f:d3:
                    6b:bf:1d:27:2a:d2:bb:83:98:f1:79:ba:bf:29:4b:
                    6f:17:39:c4:57:30:17:93:5b:e7:17:09:65:34:78:
                    6f:07:58:51:cf:7c:37:4a:9c:8c:c5:f9:dc:70:62:
                    0a:86:63:c1:d6:e5:0e:d3:c5:9f:9d:26:e7:1f:2e:
                    29:9d:e9:d0:19:78:4f:3e:d5:3d:6f:97:b0:91:f7:
                    3b:ce:7d:03:82:8a:ce:b9:e3:93:9a:ba:89:6f:0b:
                    56:bb:e9:d5:5e:7d:ec:b6:ca:d1:18:18:d8:aa:f0:
                    6e:35:9f:db:83:d0:2c:84:6f:55:c2:60:e2:e0:c3:
                    9d:70:76:1f:14:af:7b:33:24:42:a0:77:f1:5f:70:
                    d1:8d:74:c3:9e:6b:ce:23:42:23:86:b3:b5:65:c0:
                    71:0f:79:be:06:0b:09:88:85:95:d7:19:b1:b1:f4:
                    2b:c4:e0:64:0b:8d:d0:4f:35:a7:d2:29:d4:dd:df:
                    b4:0f:d6:38:44:a4:2e:f1:7f:db:6b:44:b4:c3:3e:
                    d9:8d:5a:e9:3f:a6:ba:a1:16:15:0a:84:f4:80:3a:
                    25:20:f5:54:df:86:59:84:7c:56:29:9b:de:4c:61:
                    f5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BD:F1:8F:85:25:C2:F0:97:09:FF:BA:5E:7B:0B:05:5E:C8:A7:D9
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64E3FDA8963C11F187A5F2CDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.212.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:5b:7f:6e:1b:31:db:c5:ec:21:59:56:a3:c4:4b:6e:47:62:
         d9:04:ca:f8:3b:e5:21:dd:82:16:1d:70:ab:fc:20:fb:36:df:
         5f:1f:04:35:e0:00:cd:1e:a5:c3:a7:f9:32:88:f8:84:94:b1:
         22:1e:0f:3a:83:e9:d5:7f:a3:32:fb:3f:5d:91:d0:d1:ee:4a:
         06:1a:1b:99:8e:5c:3e:92:c0:2c:34:54:93:99:cb:b3:02:45:
         a7:32:e0:2a:e7:f8:df:56:da:e4:68:b8:5c:cf:6a:95:4b:01:
         71:f9:8b:7b:35:63:76:58:12:78:b9:7c:7f:8b:0c:d0:f2:c4:
         4f:5f:11:12:bf:99:09:e1:da:7a:6e:63:ca:68:1b:f2:b3:fb:
         b9:67:d9:51:33:f8:e2:93:bb:2e:a5:79:f7:f6:cf:f0:76:32:
         5f:52:ad:83:18:60:f5:43:f9:7b:12:15:26:d1:be:38:3e:ea:
         27:d6:a1:57:fa:f8:0b:dc:85:ac:14:81:c9:1c:0a:76:d9:33:
         b7:a4:39:46:a4:ee:4b:46:40:65:fb:ad:e2:ed:f9:5b:0b:f8:
         ea:1e:b9:71:46:02:a6:68:14:9e:f6:7e:49:5b:14:6f:52:bf:
         f9:ab:2a:e2:78:2d:34:d7:ef:57:24:c1:17:bb:18:7d:99:42:
         91:00:14:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----