Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA988930965211F188076BD5CE1D38B0.roa
File:                     EA988930965211F188076BD5CE1D38B0.roa (raw, json)
Hash identifier:          vyMsGcFnZn9fMoWNwqxGkGmVT3gLXGYdIemv6AB1qHg=
Subject key identifier:   D8:74:16:B5:3D:98:26:28:0F:5F:FF:EC:EA:15:D6:8E:88:6C:5B:4E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DEB2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA988930965211F188076BD5CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 13:37:10 +0000
ROA not before:           Wed 12 Aug 2026 13:37:05 +0000
ROA not after:            Sun 12 Aug 2029 13:37:05 +0000
asID:                     17561
IP address blocks:        154.219.42.0/24 maxlen: 24
                          154.219.43.0/24 maxlen: 24
                          154.219.44.0/24 maxlen: 24
                          154.219.45.0/24 maxlen: 24
                          154.219.46.0/24 maxlen: 24
                          154.219.47.0/24 maxlen: 24
                          154.219.48.0/24 maxlen: 24
                          154.219.49.0/24 maxlen: 24
                          154.219.50.0/24 maxlen: 24
                          154.219.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122546 (0x1deb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 12 13:37:05 2026 GMT
            Not After : Aug 12 13:37:05 2029 GMT
        Subject: CN=6a7c7705-c354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:87:68:82:a5:91:e5:d8:86:b3:8b:db:21:d4:
                    ce:5e:96:81:3c:13:00:f9:ad:d3:23:43:1f:f5:11:
                    1c:32:b5:81:7c:d3:ba:83:56:a1:c6:98:be:56:32:
                    70:5d:54:2e:2d:5f:cc:ad:5b:dc:d0:b7:e8:24:1f:
                    e8:ed:9a:14:f6:e0:0b:6d:83:c9:23:5b:4f:f4:56:
                    89:03:02:79:6f:72:16:95:c7:76:21:13:9f:ad:e9:
                    5e:f2:06:56:c3:25:97:63:0e:24:a3:11:40:03:21:
                    c8:79:cc:2c:ec:bf:32:7f:7a:a6:13:66:82:09:a5:
                    6f:8c:6a:fd:73:e1:76:8f:51:8b:9d:5a:30:25:cb:
                    5b:ea:5b:ee:24:4c:4f:37:97:10:38:af:cc:6a:27:
                    16:b1:94:dd:b8:80:3d:f0:f2:60:98:73:77:85:d1:
                    e3:fe:6f:0c:5a:11:63:35:b0:24:10:2b:67:b5:b9:
                    05:e4:da:be:72:19:05:b7:60:a6:34:ba:d5:46:57:
                    1e:5c:a0:71:35:0d:f4:8a:9c:43:81:1d:17:2a:a4:
                    47:da:d0:d4:ab:48:ea:b5:5f:29:5c:01:a4:aa:e5:
                    4e:e6:c8:5f:00:b3:e6:ca:8e:40:e0:cb:70:f0:c1:
                    d8:58:b4:a3:35:c5:af:b1:bd:fb:fe:96:cc:9a:25:
                    09:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:74:16:B5:3D:98:26:28:0F:5F:FF:EC:EA:15:D6:8E:88:6C:5B:4E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA988930965211F188076BD5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.219.42.0-154.219.51.255

    Signature Algorithm: sha256WithRSAEncryption
         0c:b2:81:d3:c0:08:81:c8:9c:4b:8a:ba:ad:71:3a:34:77:6d:
         3a:5b:2e:5a:8e:73:03:9a:e3:60:24:87:c7:2b:2e:a2:f6:31:
         be:1e:e8:ab:46:94:e2:fc:a1:88:ce:82:66:90:a8:40:19:15:
         46:fc:63:61:02:f6:46:3d:06:84:b3:33:ae:3b:92:22:fe:97:
         f5:8b:3c:e4:6b:9b:4d:9f:df:4a:c8:df:16:f5:1f:07:3b:7e:
         14:98:c9:38:f6:ab:f7:51:64:86:30:d7:6c:07:2d:33:e2:65:
         55:ce:f6:ec:03:0b:5b:b0:e2:a7:a0:d4:dc:88:79:ab:88:8c:
         f8:c6:77:45:50:ba:bf:11:5a:17:90:70:a0:68:85:67:48:41:
         89:d9:ba:39:83:a5:09:3f:0d:8a:3c:73:40:9d:1d:3a:25:90:
         eb:16:b6:0d:4e:36:99:77:f5:12:4a:ab:ed:79:d9:07:99:8c:
         df:ca:9d:aa:6f:af:bd:41:b7:b2:eb:b2:c6:a8:49:db:b0:ab:
         2e:04:68:fa:cf:cd:d5:af:85:49:fa:33:77:28:41:53:87:00:
         8a:26:5f:35:04:e3:ad:a5:94:f8:e4:54:90:44:80:43:8e:48:
         cd:f7:73:e5:15:69:7c:63:dc:55:67:4c:29:47:0a:74:75:29:
         fc:b6:b1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----