Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2F675A8C79B11F1BF3B8DE2CE1D38B0.roa
File:                     B2F675A8C79B11F1BF3B8DE2CE1D38B0.roa (raw, json)
Hash identifier:          aAJLe5b1ajUdFpHwDhLQkW1opJWtLmqyKQqFQg+jeAE=
Subject key identifier:   4D:9D:33:BE:F3:13:05:66:6C:0B:1A:E9:BC:D8:B6:36:36:43:2F:47
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EDE5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2F675A8C79B11F1BF3B8DE2CE1D38B0.roa
Signing time:             Wed 14 Oct 2026 06:51:36 +0000
ROA not before:           Wed 14 Oct 2026 06:51:32 +0000
ROA not after:            Tue 10 Nov 2026 06:51:32 +0000
asID:                     17497
IP address blocks:        154.193.21.0/24 maxlen: 24
                          154.193.22.0/24 maxlen: 24
                          154.193.23.0/24 maxlen: 24
                          154.193.24.0/24 maxlen: 24
                          154.193.25.0/24 maxlen: 24
                          154.193.26.0/24 maxlen: 24
                          154.193.27.0/24 maxlen: 24
                          154.193.28.0/24 maxlen: 24
                          154.193.29.0/24 maxlen: 24
                          154.193.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126437 (0x1ede5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 14 06:51:32 2026 GMT
            Not After : Nov 10 06:51:32 2026 GMT
        Subject: CN=6acf2678-acaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:31:bd:89:a1:6a:05:b6:81:be:46:a0:d5:d8:
                    d9:54:a2:ed:09:54:f2:7c:67:05:c5:8b:64:3b:1c:
                    ee:5a:84:ad:d4:1f:7a:ee:3a:45:a5:9f:9f:93:15:
                    f0:66:26:9b:f7:c9:2d:b4:89:b2:4f:b2:54:91:ef:
                    ea:95:e8:72:56:66:60:19:4d:87:3b:50:9b:86:f7:
                    7e:d9:03:69:59:00:b4:94:94:8b:8f:bd:fb:1f:4e:
                    96:af:11:35:7e:ac:e1:6d:83:c2:4e:be:4b:71:42:
                    09:e8:62:3b:52:54:e4:77:e6:27:d4:5e:d6:93:7a:
                    a2:c6:ba:89:ca:ae:f8:d2:3b:7b:6c:92:50:fa:b6:
                    02:b6:3a:1b:0d:a3:76:00:10:d7:7f:a5:f8:85:16:
                    f6:1f:e0:2e:28:c0:b4:d7:ae:c6:f1:46:e0:9f:55:
                    91:41:28:4f:fc:1c:bf:eb:0c:ee:2d:a8:55:3a:96:
                    49:85:e1:bf:81:e1:7d:8d:5f:fa:07:d4:09:12:93:
                    21:eb:fa:a6:9e:bc:05:65:c9:aa:5a:62:04:78:1e:
                    0a:05:7b:ad:03:66:ad:96:39:a3:f0:b5:50:ac:19:
                    ba:ba:db:36:db:d9:49:a9:a9:5c:9d:65:7d:a4:42:
                    31:87:62:1f:23:49:4f:68:a3:09:7b:94:e7:90:81:
                    75:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:9D:33:BE:F3:13:05:66:6C:0B:1A:E9:BC:D8:B6:36:36:43:2F:47
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2F675A8C79B11F1BF3B8DE2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.21.0-154.193.30.255

    Signature Algorithm: sha256WithRSAEncryption
         82:90:09:5d:e5:72:92:37:59:e7:ab:5c:c7:74:3d:3c:95:c0:
         0b:b5:c7:1f:21:1e:c2:ed:a8:23:57:78:89:f4:f1:04:3e:96:
         6b:6f:16:d2:9f:7d:a1:31:73:d7:eb:15:79:44:c2:cd:6b:54:
         66:c0:ef:2c:be:69:50:ef:50:c7:62:69:ba:20:fc:b2:74:2b:
         96:ed:91:8e:92:90:68:5c:24:44:83:34:42:bd:9f:42:4b:d6:
         45:71:a9:fb:c7:3e:5f:d5:f0:33:f5:de:18:83:d7:ee:ff:34:
         ed:70:20:a6:58:df:d0:0a:a8:fe:f3:ec:f4:80:b8:9f:85:81:
         a4:fa:d5:7e:4f:38:d3:22:de:6e:65:84:e3:92:92:42:9c:6a:
         d3:54:d1:58:6c:1e:5a:73:0e:89:77:7a:46:eb:bc:9e:85:87:
         58:86:d1:d7:0d:00:bd:9c:74:48:99:b7:19:97:e9:33:54:0e:
         60:52:ae:c4:75:31:7e:9a:17:a2:0b:dc:5c:b8:4d:5c:f3:1f:
         2a:0d:8c:4d:62:a5:89:d3:ed:4b:a1:7c:c0:c3:d7:68:ae:7f:
         d1:82:76:c3:0f:cf:f0:92:6b:20:ca:68:7f:3d:af:09:54:70:
         51:aa:50:81:31:6b:ef:00:0b:de:33:02:2a:b1:ce:5d:58:72:
         8c:0f:b4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----