Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B75A682964911F1A1FD481BCF1D38B0.roa
File:                     6B75A682964911F1A1FD481BCF1D38B0.roa (raw, json)
Hash identifier:          KOTkM8rtlRAIcxiXstQp0irdgQ95WN8kaAfktxSCGlg=
Subject key identifier:   25:AB:4A:F4:14:B2:2A:8E:D2:3C:24:E2:31:DD:28:3A:E2:10:CA:D1
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DE9C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B75A682964911F1A1FD481BCF1D38B0.roa
Signing time:             Wed 12 Aug 2026 12:29:11 +0000
ROA not before:           Wed 12 Aug 2026 12:29:07 +0000
ROA not after:            Sun 12 Aug 2029 12:29:07 +0000
asID:                     17561
IP address blocks:        154.91.242.0/24 maxlen: 24
                          154.91.243.0/24 maxlen: 24
                          154.91.244.0/24 maxlen: 24
                          154.91.245.0/24 maxlen: 24
                          154.91.246.0/24 maxlen: 24
                          154.91.247.0/24 maxlen: 24
                          154.91.248.0/24 maxlen: 24
                          154.91.249.0/24 maxlen: 24
                          154.91.250.0/24 maxlen: 24
                          154.91.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122524 (0x1de9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 12 12:29:07 2026 GMT
            Not After : Aug 12 12:29:07 2029 GMT
        Subject: CN=6a7c6717-9439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d2:cd:3a:87:5b:15:fc:8b:13:07:39:6b:92:
                    c1:c4:71:85:ee:d1:76:f4:ef:fd:9c:f8:1d:32:c3:
                    4f:dd:11:d3:4b:13:29:d3:a9:56:96:66:cf:59:bc:
                    b1:79:2a:7f:75:bb:72:6a:b5:33:a8:55:07:d1:85:
                    7a:9c:ec:ae:ee:03:c0:8c:76:5d:e4:3e:cb:be:4a:
                    40:d6:77:e9:d1:4f:bf:cb:de:c2:19:b4:38:ba:bb:
                    df:00:48:bb:e6:c6:6c:a6:83:ab:51:6d:95:fa:b4:
                    63:09:91:65:b2:69:f1:1d:bf:97:c7:69:dc:24:c4:
                    b4:31:79:e9:76:5d:30:6b:d9:2e:8b:06:6f:97:29:
                    1b:76:3a:04:67:d4:60:ab:25:05:94:21:ee:77:03:
                    29:17:61:03:cb:55:21:7b:03:fe:35:8c:26:4c:a8:
                    53:d1:81:31:82:85:73:cc:b0:aa:b7:22:81:3f:10:
                    30:64:2f:4a:7c:d1:2e:eb:5b:b0:8b:f9:3f:2f:9d:
                    e6:b7:e8:e3:20:f1:b3:24:de:50:64:cb:11:32:98:
                    7a:20:6a:4a:f2:43:57:c0:09:85:62:cd:62:ea:3e:
                    cd:87:1f:20:eb:76:ad:03:3e:77:01:52:3d:81:aa:
                    7d:ab:36:3b:45:54:39:90:b9:2c:59:a2:50:dc:11:
                    74:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:AB:4A:F4:14:B2:2A:8E:D2:3C:24:E2:31:DD:28:3A:E2:10:CA:D1
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B75A682964911F1A1FD481BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.91.242.0-154.91.251.255

    Signature Algorithm: sha256WithRSAEncryption
         aa:c8:47:6c:fa:e6:13:f9:9f:d5:c5:cf:1f:29:d0:5e:c9:3c:
         fd:5a:44:52:e5:06:a3:87:9a:c3:4f:82:5e:23:ca:4a:2f:2f:
         76:2b:b5:f0:1a:a2:11:03:85:a6:c8:c3:9b:84:5a:93:d5:15:
         f7:29:cd:1c:6e:3b:63:13:a0:e1:74:90:f7:75:99:b1:8d:03:
         5d:69:e8:21:1d:0a:76:e0:aa:ef:e8:a9:72:2b:d1:2e:ca:04:
         1b:87:53:10:21:14:c1:58:28:8b:30:fb:f2:74:8c:5b:ae:f3:
         6d:ce:66:fb:e8:60:80:c1:01:fa:5c:b1:61:1d:cf:a4:52:11:
         f2:46:4e:fc:55:de:90:00:a8:bc:2a:a0:f0:98:b0:3c:23:5d:
         97:5b:37:d1:67:67:86:d6:53:4f:8d:29:95:90:81:e4:92:46:
         0e:11:d3:07:cf:65:de:28:ef:9e:87:70:c3:0a:58:9d:b6:b7:
         82:0e:cb:77:c7:f5:49:fc:3f:58:e9:24:26:ac:ee:c9:b8:e4:
         95:7e:ff:5d:3c:2d:2c:42:6e:2c:f0:56:98:de:d7:39:14:d0:
         50:a7:fd:12:af:60:2a:e2:f1:5e:5f:34:32:61:3f:fe:e8:62:
         90:8e:41:6c:dc:27:42:cc:f6:14:a0:e0:0c:95:fe:a9:97:fc:
         64:7d:8e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----