Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B39A7F40A14411F1BA763CF4CE1D38B0.roa
File:                     B39A7F40A14411F1BA763CF4CE1D38B0.roa (raw, json)
Hash identifier:          7lCmF3OxEBm6G54Tf51dwRsEWaVpJSOXVHL6sTPaZlQ=
Subject key identifier:   DC:03:91:54:2D:3C:9C:BA:71:F8:07:11:C3:FA:07:6C:A3:8E:57:39
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E378
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B39A7F40A14411F1BA763CF4CE1D38B0.roa
Signing time:             Wed 26 Aug 2026 11:53:07 +0000
ROA not before:           Wed 26 Aug 2026 11:53:03 +0000
ROA not after:            Sat 25 Aug 2029 11:53:03 +0000
asID:                     17561
IP address blocks:        154.215.178.0/24 maxlen: 24
                          154.215.179.0/24 maxlen: 24
                          154.215.180.0/24 maxlen: 24
                          154.215.181.0/24 maxlen: 24
                          154.215.182.0/24 maxlen: 24
                          154.215.183.0/24 maxlen: 24
                          154.215.184.0/24 maxlen: 24
                          154.215.185.0/24 maxlen: 24
                          154.215.186.0/24 maxlen: 24
                          154.215.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123768 (0x1e378)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 26 11:53:03 2026 GMT
            Not After : Aug 25 11:53:03 2029 GMT
        Subject: CN=6a8ed3a3-dee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:31:b4:48:3a:0f:81:ed:a2:37:2d:c6:27:4f:
                    f7:0f:88:64:42:7c:12:e9:0d:51:50:c8:d0:04:19:
                    66:96:b0:15:f3:98:7c:29:e5:ee:2f:8a:1f:4f:e8:
                    4a:26:a5:b9:f0:c7:e4:96:ca:7a:26:65:17:e4:4e:
                    40:1e:be:d0:d5:f8:3e:8d:79:89:02:f5:10:ca:d7:
                    6d:0f:b7:8a:04:f5:23:28:2c:31:2e:86:1b:73:15:
                    cb:6e:92:fb:e0:04:af:f6:0a:8e:39:cf:cc:1f:37:
                    e3:c8:b5:92:e6:1a:ad:a3:6f:13:91:43:49:12:aa:
                    5d:2c:44:b5:d5:0a:ca:b4:c6:cf:1d:44:f3:6d:9c:
                    e9:82:f5:b6:50:bc:3f:c5:08:51:ac:41:8b:83:e0:
                    5f:f1:24:68:f8:c4:cd:db:ec:be:f7:66:72:01:ce:
                    10:18:f6:b1:83:70:e4:25:ae:07:1d:44:53:62:db:
                    32:7a:60:be:ef:73:12:eb:29:da:2f:0e:95:74:31:
                    de:c7:a9:7a:9f:04:4f:73:0a:1f:fe:8e:c1:65:0c:
                    2b:04:fa:72:29:bd:0a:6e:d7:bb:13:2f:54:3e:f5:
                    5d:ba:f1:c5:1b:3f:cf:cf:be:66:98:7a:69:cf:e0:
                    31:f4:d8:77:b7:05:49:64:2d:81:92:2a:90:b6:e0:
                    38:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:03:91:54:2D:3C:9C:BA:71:F8:07:11:C3:FA:07:6C:A3:8E:57:39
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B39A7F40A14411F1BA763CF4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.215.178.0-154.215.187.255

    Signature Algorithm: sha256WithRSAEncryption
         99:7f:7d:7e:14:6b:c7:fd:c3:42:a8:47:70:0f:f3:06:c7:e3:
         0b:7d:44:53:d6:1f:41:a7:58:21:3a:30:9b:b3:15:3f:3c:d6:
         73:47:61:5d:53:4b:6b:7d:96:4b:7f:16:a3:5b:e5:f2:f7:45:
         88:f8:0b:e5:b0:b9:f8:1e:f1:72:bd:8b:9f:73:6f:da:a8:9c:
         1b:23:62:ad:de:a2:b8:a5:1c:df:04:70:71:fb:f9:2f:73:e4:
         db:e1:ab:12:01:70:2b:77:2c:26:0e:9b:77:cc:b3:c6:fb:9e:
         6f:2f:38:67:da:ce:8c:33:aa:4d:e4:c1:0f:40:69:08:e5:f4:
         77:55:f6:db:b2:2f:28:4a:fc:bb:5c:24:31:b3:5a:ac:16:64:
         ff:ea:e4:4f:0b:01:f4:a4:71:21:26:c6:45:c6:ff:68:36:54:
         34:4d:d7:c8:b5:76:fc:a2:24:44:63:b0:e9:cd:f0:96:32:40:
         39:6e:e6:b9:b0:7d:0e:f2:95:c6:dc:e5:41:6e:8f:37:8e:73:
         2f:08:02:35:9c:ca:3a:bc:af:a3:eb:bc:7b:c4:9f:da:4a:d0:
         65:dc:88:6a:7f:1b:9b:15:34:fa:d0:5c:2a:d7:39:00:80:df:
         91:98:f9:0d:44:60:4e:ee:20:c0:07:06:81:c1:8c:68:6b:64:
         85:3e:1a:52
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAeN4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODI2MTE1MzAzWhcNMjkwODI1MTE1MzAzWjAYMRYw
FAYDVQQDEw02YThlZDNhMy1kZWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnzG0SDoPge2iNy3GJ0/3D4hkQnwS6Q1RUMjQBBlmlrAV85h8KeXuL4of
T+hKJqW58Mfklsp6JmUX5E5AHr7Q1fg+jXmJAvUQytdtD7eKBPUjKCwxLoYbcxXL
bpL74ASv9gqOOc/MHzfjyLWS5hqto28TkUNJEqpdLES11QrKtMbPHUTzbZzpgvW2
ULw/xQhRrEGLg+Bf8SRo+MTN2+y+92ZyAc4QGPaxg3DkJa4HHURTYtsyemC+73MS
6ynaLw6VdDHex6l6nwRPcwof/o7BZQwrBPpyKb0Kbte7Ey9UPvVduvHFGz/Pz75m
mHppz+Ax9Nh3twVJZC2BkiqQtuA4twIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFNwD
kVQtPJy6cfgHEcP6B2yjjlc5MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMzlBN0Y0MEExNDQxMUYxQkE3NjNDRjRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGa17IDBAKa17gwDQYJ
KoZIhvcNAQELBQADggEBAJl/fX4Ua8f9w0KoR3AP8wbH4wt9RFPWH0GnWCE6MJuz
FT881nNHYV1TS2t9lkt/FqNb5fL3RYj4C+Wwufge8XK9i59zb9qonBsjYq3eoril
HN8EcHH7+S9z5NvhqxIBcCt3LCYOm3fMs8b7nm8vOGfazowzqk3kwQ9AaQjl9HdV
9tuyLyhK/LtcJDGzWqwWZP/q5E8LAfSkcSEmxkXG/2g2VDRN18i1dvyiJERjsOnN
8JYyQDlu5rmwfQ7ylcbc5UFujzeOcy8IAjWcyjq8r6PrvHvEn9pK0GXciGp/G5sV
NPrQXCrXOQCA35GY+Q1EYE7uIMAHBoHBjGhrZIU+GlI=
-----END CERTIFICATE-----