Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83A35FFAC49411F1AEF8E11ACF1D38B0.roa
File:                     83A35FFAC49411F1AEF8E11ACF1D38B0.roa (raw, json)
Hash identifier:          ljPtTrrYd65NFrPbcdsbYhi1Yt+ZpaSjeGCy7R7KwZg=
Subject key identifier:   D1:C6:1C:BD:74:91:91:DE:58:5F:BE:42:E6:CB:8B:43:BC:4C:9F:F5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ED4F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83A35FFAC49411F1AEF8E11ACF1D38B0.roa
Signing time:             Sat 10 Oct 2026 10:22:37 +0000
ROA not before:           Sat 10 Oct 2026 10:22:32 +0000
ROA not after:            Tue 17 Nov 2026 10:22:32 +0000
asID:                     22773
IP address blocks:        154.198.20.0/24 maxlen: 24
                          154.202.29.0/24 maxlen: 24
                          154.202.30.0/24 maxlen: 24
                          154.202.31.0/24 maxlen: 24
                          154.202.69.0/24 maxlen: 24
                          154.202.72.0/24 maxlen: 24
                          154.202.73.0/24 maxlen: 24
                          154.202.76.0/24 maxlen: 24
                          154.202.77.0/24 maxlen: 24
                          154.202.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126287 (0x1ed4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 10 10:22:32 2026 GMT
            Not After : Nov 17 10:22:32 2026 GMT
        Subject: CN=6aca11ed-ba68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c5:76:b2:6b:7e:24:c9:36:94:1e:fa:08:5c:
                    a1:6f:5c:f8:d8:c2:34:7e:ca:c7:c5:63:94:80:d3:
                    6f:f9:19:b7:9a:e7:e9:92:07:de:42:e5:ff:63:b4:
                    df:3a:6b:a6:c5:16:b0:8d:a6:c4:69:4e:bf:37:dd:
                    be:25:51:a1:d3:d7:63:ee:98:23:a8:84:0d:ca:e5:
                    42:7b:c8:7b:27:88:f1:74:78:25:53:48:66:58:c0:
                    31:f4:e0:fe:b6:21:aa:2b:88:20:9c:df:ef:f1:06:
                    c0:47:98:3d:ab:33:0b:06:40:2e:14:a9:03:87:f0:
                    c9:ae:32:a7:2f:df:69:ff:58:a9:4c:a4:4c:48:06:
                    d6:68:d0:5d:fb:2c:a6:d9:d3:a9:c0:48:b6:4a:08:
                    ac:5a:40:a7:59:9c:43:96:a7:46:6a:69:c7:79:57:
                    98:7a:36:b8:06:e7:0a:ad:0c:e8:23:a2:9b:aa:77:
                    b1:48:37:9a:c3:61:ce:1a:c3:72:73:06:7b:30:42:
                    47:89:19:6b:1b:d4:85:3e:9c:34:2b:26:a6:fd:1c:
                    c1:5b:84:e9:6e:dc:28:96:50:49:d2:fa:45:4d:71:
                    88:b8:30:60:d0:05:41:63:1f:90:b5:42:dd:c9:97:
                    e8:33:ac:19:63:58:40:c3:72:11:36:24:b5:4c:dd:
                    d6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C6:1C:BD:74:91:91:DE:58:5F:BE:42:E6:CB:8B:43:BC:4C:9F:F5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83A35FFAC49411F1AEF8E11ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.198.20.0/24
                  154.202.29.0-154.202.31.255
                  154.202.69.0/24
                  154.202.72.0/23
                  154.202.76.0/23
                  154.202.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:6f:43:32:ed:ef:0d:b9:78:74:ce:2b:dd:2c:af:16:59:74:
         77:71:43:3b:49:df:80:e1:aa:e2:d0:55:4f:af:50:c7:d8:83:
         93:64:ba:ae:1a:82:27:e6:b7:b0:b8:92:57:37:ef:9e:45:85:
         36:32:40:a2:1e:49:ed:96:bd:d5:2c:48:42:04:47:a2:06:38:
         a4:c9:d3:cd:65:41:e8:fa:77:0d:22:48:25:b1:70:6d:1e:d9:
         68:ec:cb:4e:82:6c:32:2c:5f:bd:a9:12:17:c0:db:26:8e:d2:
         a5:37:d5:96:71:39:63:ab:cd:62:9a:3a:4b:e1:54:3c:9e:9f:
         fc:fe:13:75:d4:52:4f:89:5f:81:28:b9:26:87:e6:84:e3:47:
         16:53:5b:07:32:47:05:ca:38:d8:2a:59:cf:e4:be:71:fc:74:
         6d:a4:6a:e1:a1:1e:54:80:3b:0a:e6:0b:50:74:02:0e:dc:e6:
         2e:d0:21:2b:af:00:22:d5:55:cb:e5:d0:00:b4:06:9a:bb:b9:
         b8:b6:ad:7e:eb:f2:f6:68:07:e0:ab:bd:92:24:54:67:7a:ea:
         4d:1c:3c:95:bf:20:5b:fe:65:65:a0:bd:95:33:06:de:87:7d:
         80:99:3e:f0:64:88:5a:64:12:44:ea:29:76:97:5e:e6:98:05:
         64:0c:74:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----