Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7281A3289C9711F194C93DD7CE1D38B0.roa
File:                     7281A3289C9711F194C93DD7CE1D38B0.roa (raw, json)
Hash identifier:          cmtXpJxSBOqlJIg5hXtuLoD7h5ROUE78Kq26H8CpBv8=
Subject key identifier:   A5:BF:7B:78:EB:6A:F1:DA:AB:35:39:F4:D2:95:4E:1D:63:C5:A6:57
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E0B2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7281A3289C9711F194C93DD7CE1D38B0.roa
Signing time:             Thu 20 Aug 2026 13:02:50 +0000
ROA not before:           Thu 20 Aug 2026 13:02:46 +0000
ROA not after:            Sat 26 Sep 2026 13:02:46 +0000
asID:                     63139
IP address blocks:        154.94.69.0/24 maxlen: 24
                          154.94.70.0/24 maxlen: 24
                          154.94.71.0/24 maxlen: 24
                          154.94.72.0/24 maxlen: 24
                          154.94.73.0/24 maxlen: 24
                          154.94.74.0/24 maxlen: 24
                          154.94.75.0/24 maxlen: 24
                          154.94.76.0/24 maxlen: 24
                          154.94.77.0/24 maxlen: 24
                          154.94.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123058 (0x1e0b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 13:02:46 2026 GMT
            Not After : Sep 26 13:02:46 2026 GMT
        Subject: CN=6a86fafa-e960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ba:e5:9d:2f:9c:63:3c:3e:45:36:4e:ba:59:
                    56:37:d6:86:d0:49:7d:47:3c:b6:30:1e:f3:03:ab:
                    35:9e:53:6a:c3:45:a3:e1:8e:b7:fc:80:a9:78:be:
                    49:27:b7:16:fe:0b:8e:f4:ce:c6:dc:a0:b3:a3:69:
                    2c:83:7f:6a:57:6d:79:dc:a4:e3:f9:dd:15:d0:2b:
                    9b:bb:19:66:0e:7b:76:e6:a8:22:cb:b6:6a:1e:f2:
                    8d:30:0b:ba:37:84:52:56:cb:aa:ca:94:91:53:4a:
                    6c:c4:78:0b:7a:66:c2:b0:09:a2:b1:96:df:e1:42:
                    6d:88:62:1c:78:50:bc:c7:e5:c6:ca:d7:a5:4b:6a:
                    8c:54:34:4f:5b:0b:91:b7:5e:21:60:6f:2e:57:f8:
                    90:39:3e:d1:f4:4b:52:46:9d:48:62:db:d0:de:cf:
                    ce:a2:f0:b4:44:07:1f:eb:b3:6a:0d:c0:4e:2f:82:
                    7a:9d:43:cc:ef:d8:f8:a9:17:e5:40:7a:78:4c:02:
                    65:85:a2:be:fe:b5:aa:2f:1e:68:cd:90:81:0c:0c:
                    2e:70:25:09:d9:85:36:69:36:33:46:0d:0a:0a:3b:
                    50:5c:34:15:be:66:a7:f8:37:16:88:f2:7f:de:b9:
                    e6:a4:63:21:bc:ed:6a:d2:8f:66:b0:f1:d4:2b:a0:
                    27:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BF:7B:78:EB:6A:F1:DA:AB:35:39:F4:D2:95:4E:1D:63:C5:A6:57
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7281A3289C9711F194C93DD7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.69.0-154.94.78.255

    Signature Algorithm: sha256WithRSAEncryption
         0d:9d:53:95:39:0d:68:27:68:da:90:39:f6:fe:94:da:14:7c:
         cd:c2:f6:c7:34:6e:68:0e:42:64:b1:32:37:f9:90:03:6f:05:
         84:82:b0:51:c7:8b:a7:4f:9e:fb:38:74:bb:5b:79:8e:fe:6f:
         2d:15:30:b0:4e:d2:5d:3a:ce:a7:ed:ae:43:b2:a9:c9:4a:5a:
         68:a9:2a:ec:e0:83:31:d9:05:a8:51:fb:37:e9:1b:16:87:e9:
         15:39:80:ea:f5:64:67:20:2b:89:aa:61:94:7a:9e:78:f7:a0:
         79:d7:35:d1:95:0d:ae:5e:ec:1e:d3:dc:f9:a4:4f:68:6a:99:
         ea:a6:96:51:7c:de:73:d7:3e:1c:49:ad:af:78:5c:0a:5b:67:
         53:ff:60:e9:77:20:09:7d:7b:7e:b9:f8:63:4b:70:5d:ea:11:
         58:0b:91:53:84:5b:c9:ea:a1:45:a9:65:db:98:20:15:29:db:
         37:57:01:9a:f5:a2:4c:d9:e1:b7:86:a1:8e:18:02:6b:ec:85:
         b5:4c:98:4d:07:58:92:f7:14:48:82:4d:06:46:87:da:44:af:
         a8:eb:ee:a9:33:68:cf:65:82:1d:d1:0c:97:c3:54:ae:c1:ae:
         2a:8c:aa:01:4b:b3:6b:d6:35:5e:ad:ce:58:fe:3b:d5:9e:90:
         39:c2:d7:01
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAeCyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODIwMTMwMjQ2WhcNMjYwOTI2MTMwMjQ2WjAYMRYw
FAYDVQQDEw02YTg2ZmFmYS1lOTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAurrlnS+cYzw+RTZOullWN9aG0El9Rzy2MB7zA6s1nlNqw0Wj4Y63/ICp
eL5JJ7cW/guO9M7G3KCzo2ksg39qV2153KTj+d0V0CubuxlmDnt25qgiy7ZqHvKN
MAu6N4RSVsuqypSRU0psxHgLembCsAmisZbf4UJtiGIceFC8x+XGytelS2qMVDRP
WwuRt14hYG8uV/iQOT7R9EtSRp1IYtvQ3s/OovC0RAcf67NqDcBOL4J6nUPM79j4
qRflQHp4TAJlhaK+/rWqLx5ozZCBDAwucCUJ2YU2aTYzRg0KCjtQXDQVvman+DcW
iPJ/3rnmpGMhvO1q0o9msPHUK6AnfwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFKW/
e3jravHaqzU59NKVTh1jxaZXMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83MjgxQTMyODlDOTcxMUYxOTRDOTNERDdDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACaXkUDBACaXk4wDQYJ
KoZIhvcNAQELBQADggEBAA2dU5U5DWgnaNqQOfb+lNoUfM3C9sc0bmgOQmSxMjf5
kANvBYSCsFHHi6dPnvs4dLtbeY7+by0VMLBO0l06zqftrkOyqclKWmipKuzggzHZ
BahR+zfpGxaH6RU5gOr1ZGcgK4mqYZR6nnj3oHnXNdGVDa5e7B7T3PmkT2hqmeqm
llF83nPXPhxJra94XApbZ1P/YOl3IAl9e365+GNLcF3qEVgLkVOEW8nqoUWpZduY
IBUp2zdXAZr1okzZ4beGoY4YAmvshbVMmE0HWJL3FEiCTQZGh9pEr6jr7qkzaM9l
gh3RDJfDVK7BriqMqgFLs2vWNV6tzlj+O9WekDnC1wE=
-----END CERTIFICATE-----