Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB6826F2962C11F19FB8BEF0CE1D38B0.roa
File:                     EB6826F2962C11F19FB8BEF0CE1D38B0.roa (raw, json)
Hash identifier:          LfYHD3ZrpWPiFbvmj2P3JSoQdAPv+mHJcyFr50/Nh5w=
Subject key identifier:   14:7B:BB:D2:C0:75:52:7D:B5:B7:4F:A9:2C:C1:4C:2C:64:1F:6C:EF
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DE48
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB6826F2962C11F19FB8BEF0CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 09:05:10 +0000
ROA not before:           Wed 12 Aug 2026 09:05:06 +0000
ROA not after:            Sun 12 Aug 2029 09:05:06 +0000
asID:                     17561
IP address blocks:        154.199.221.0/24 maxlen: 24
                          154.199.222.0/24 maxlen: 24
                          154.199.223.0/24 maxlen: 24
                          154.199.224.0/24 maxlen: 24
                          154.199.225.0/24 maxlen: 24
                          154.199.226.0/24 maxlen: 24
                          154.199.227.0/24 maxlen: 24
                          154.199.228.0/24 maxlen: 24
                          154.199.229.0/24 maxlen: 24
                          154.199.230.0/24 maxlen: 24
                          154.199.231.0/24 maxlen: 24
                          154.199.232.0/24 maxlen: 24
                          154.199.233.0/24 maxlen: 24
                          154.199.234.0/24 maxlen: 24
                          154.199.235.0/24 maxlen: 24
                          154.199.236.0/24 maxlen: 24
                          154.199.237.0/24 maxlen: 24
                          154.199.238.0/24 maxlen: 24
                          154.199.239.0/24 maxlen: 24
                          154.199.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122440 (0x1de48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 12 09:05:06 2026 GMT
            Not After : Aug 12 09:05:06 2029 GMT
        Subject: CN=6a7c3746-ea90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d1:7d:a0:bf:2a:2e:49:d3:b8:08:ba:ec:1e:
                    2d:27:9d:a2:07:21:f9:e3:65:e6:5f:59:9f:21:cf:
                    d0:83:cd:ab:3f:de:58:0d:86:1b:3b:57:43:e5:e0:
                    03:7b:7f:ca:c8:e3:a2:22:22:c6:df:e2:9a:23:68:
                    be:42:32:e9:3c:78:66:e3:25:71:c5:99:6b:7e:d1:
                    60:b8:1d:8c:40:8f:8b:4a:9e:e4:79:53:92:e0:0d:
                    0e:42:23:49:05:a8:f5:ee:10:f3:43:a3:81:c1:d9:
                    a8:fc:55:55:21:c4:10:a9:b1:8a:82:ad:25:59:86:
                    20:86:b3:47:bf:88:d6:b9:22:3c:82:a1:5f:6e:91:
                    94:f6:bb:e7:6f:e4:5c:6d:8d:94:d7:3b:9b:fc:5c:
                    15:08:c7:54:1e:62:75:d3:f8:64:21:27:7a:df:b4:
                    11:71:35:07:2f:ba:60:60:fe:70:fa:09:09:b0:36:
                    13:eb:97:89:4d:93:2f:a2:c3:38:bc:51:71:2d:f8:
                    67:89:c9:64:29:ac:05:45:66:dc:ad:eb:2b:e4:b1:
                    af:71:53:74:b1:7c:98:ca:c4:a8:15:d7:c4:e8:2b:
                    30:73:db:8d:79:af:b7:9d:fe:6d:14:f9:68:a9:95:
                    e9:bb:f4:b3:5a:5f:ef:7d:d1:63:cd:3c:2f:25:66:
                    f4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7B:BB:D2:C0:75:52:7D:B5:B7:4F:A9:2C:C1:4C:2C:64:1F:6C:EF
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB6826F2962C11F19FB8BEF0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.199.221.0-154.199.240.255

    Signature Algorithm: sha256WithRSAEncryption
         28:fb:ff:05:bd:33:57:e7:09:13:d7:ae:23:d4:91:ae:40:4f:
         bb:f7:65:c2:30:08:29:82:d4:68:6a:ee:e1:3e:92:7a:3d:be:
         94:17:29:ec:0c:fb:e4:ee:d8:45:13:d2:60:3d:3e:f3:c4:96:
         95:fa:23:df:a7:c7:e5:d7:fb:21:08:15:44:9e:6e:3a:06:1c:
         44:d6:20:3c:1b:fc:1c:5f:a6:75:95:9e:e8:4e:22:54:94:36:
         c6:d4:28:5d:ca:6c:85:ff:c2:f5:c1:d9:6e:d0:c9:ca:1c:cb:
         ea:cb:52:40:7e:11:d0:e8:4e:66:a8:ce:a4:1e:57:01:3e:07:
         3e:0a:81:24:9e:9c:ef:62:8b:27:a5:1f:01:ae:b3:0c:c0:3c:
         46:c2:76:3e:72:ac:fb:ac:70:85:1a:3f:29:ea:6d:65:03:d3:
         12:c7:cd:eb:f0:ff:72:87:53:2d:e5:9e:4c:58:06:54:d0:12:
         b5:17:b1:c1:48:c7:cd:11:88:75:1f:35:3d:fe:3d:94:61:d5:
         97:81:b7:da:2f:37:b7:a9:ec:bb:71:2c:14:05:fe:9c:0d:09:
         13:99:a3:e7:15:2f:f7:50:2e:2a:50:38:1a:fb:48:e3:02:cf:
         94:5a:ee:93:10:4b:64:bf:b9:80:53:3e:86:68:c6:46:ab:df:
         08:6e:5e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----