Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F33AF664C49111F195F4A609CF1D38B0.roa
File:                     F33AF664C49111F195F4A609CF1D38B0.roa (raw, json)
Hash identifier:          nHGVYzr5eecA/VgqtWHce4ET9SnYvGjdzxu+DGb0v+Y=
Subject key identifier:   0B:4F:CE:19:D7:F6:0C:AC:4D:01:93:15:2A:16:FF:97:28:70:0D:8D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ED49
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F33AF664C49111F195F4A609CF1D38B0.roa
Signing time:             Sat 10 Oct 2026 10:04:16 +0000
ROA not before:           Sat 10 Oct 2026 10:04:10 +0000
ROA not after:            Tue 17 Nov 2026 10:04:10 +0000
asID:                     22773
IP address blocks:        154.85.22.0/24 maxlen: 24
                          154.85.23.0/24 maxlen: 24
                          154.85.104.0/24 maxlen: 24
                          154.85.105.0/24 maxlen: 24
                          154.85.106.0/24 maxlen: 24
                          154.90.18.0/24 maxlen: 24
                          154.90.149.0/24 maxlen: 24
                          154.90.150.0/24 maxlen: 24
                          154.90.151.0/24 maxlen: 24
                          154.90.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126281 (0x1ed49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 10 10:04:10 2026 GMT
            Not After : Nov 17 10:04:10 2026 GMT
        Subject: CN=6aca0da0-d535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:09:a8:ee:f8:d3:bd:96:86:0c:f7:c9:02:e4:
                    5a:eb:a6:69:6c:69:38:d6:e1:71:4c:fc:39:57:f8:
                    b5:ae:0c:e1:e3:4e:9a:5b:3b:e6:a5:50:5c:6f:fb:
                    a3:1d:12:93:42:b2:1f:96:c5:76:a0:d8:01:eb:84:
                    93:db:4c:b3:49:de:7c:92:92:5f:01:78:34:df:66:
                    e0:03:8a:79:41:c4:23:f6:fd:d0:4a:be:89:d7:2e:
                    b9:07:02:e9:a0:ee:e8:2b:fd:7d:7d:f8:22:62:65:
                    15:70:82:98:6a:a2:a0:c5:8f:fb:2f:dc:1e:5f:6d:
                    38:59:a8:bb:8b:ba:fd:37:7e:85:45:76:ed:8b:df:
                    56:8e:70:98:17:73:dd:1f:b1:be:57:d0:0d:0d:e7:
                    11:bd:f9:7d:81:45:e7:58:55:56:11:60:c7:19:c6:
                    f4:e0:32:c6:4c:65:45:20:11:49:82:f3:ed:e3:f0:
                    2e:7d:e7:71:47:c4:cc:c6:ca:29:0f:f3:84:79:7b:
                    f7:60:08:1a:7d:dd:00:77:2e:b9:b5:66:31:38:12:
                    37:75:ad:56:e6:2f:3c:31:9d:1a:77:fc:90:3f:25:
                    c0:a0:f5:8d:40:0b:39:64:9f:92:22:ee:5f:6b:31:
                    44:f1:77:46:82:8d:f4:09:7c:2d:62:3c:c5:3d:53:
                    ea:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4F:CE:19:D7:F6:0C:AC:4D:01:93:15:2A:16:FF:97:28:70:0D:8D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F33AF664C49111F195F4A609CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.85.22.0/23
                  154.85.104.0-154.85.106.255
                  154.90.18.0/24
                  154.90.149.0-154.90.151.255
                  154.90.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:1c:8d:a5:51:82:72:e5:02:90:0f:01:a3:7d:b5:40:ea:56:
         91:7e:82:2b:1f:6f:91:03:79:93:e6:3a:f6:7e:19:2c:8c:42:
         ee:51:2c:5b:25:40:e2:74:86:5c:0e:58:c1:1e:4a:7c:90:a6:
         36:20:27:6e:fe:44:cc:32:b4:5b:82:81:81:25:c0:d5:42:e8:
         cb:b2:45:28:ad:7e:b3:7c:65:a2:e6:a3:fb:2a:02:ad:ae:ec:
         0d:39:2d:31:12:94:5d:d4:51:a9:61:95:2c:f7:26:3d:80:0a:
         28:a8:d4:2e:3f:65:f1:76:d4:f3:80:c7:8d:74:d0:da:13:8a:
         b2:27:c8:7d:49:2e:43:43:5b:98:74:8c:08:a3:40:cb:c8:5c:
         b8:09:71:e2:20:a4:2d:cf:19:43:41:0a:27:b1:83:8b:9c:7b:
         91:21:9a:12:a7:f1:e2:e5:75:a8:ad:3a:46:f3:7f:69:df:40:
         7c:19:bd:50:ac:a8:49:d8:3d:86:bd:28:2b:b8:5c:22:b7:a4:
         cf:65:78:ff:47:16:26:83:eb:83:ff:74:ef:d8:18:b5:53:1c:
         69:fc:a8:af:4f:46:c3:95:9d:80:08:24:51:72:44:6d:e6:fe:
         04:ef:5d:36:98:11:21:ec:e5:b9:1f:fa:b9:b6:fa:24:35:ef:
         36:72:da:b9
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgIDAe1JMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDEwMTAwNDEwWhcNMjYxMTE3MTAwNDEwWjAYMRYw
FAYDVQQDEw02YWNhMGRhMC1kNTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArQmo7vjTvZaGDPfJAuRa66ZpbGk41uFxTPw5V/i1rgzh406aWzvmpVBc
b/ujHRKTQrIflsV2oNgB64ST20yzSd58kpJfAXg032bgA4p5QcQj9v3QSr6J1y65
BwLpoO7oK/19ffgiYmUVcIKYaqKgxY/7L9weX204Wai7i7r9N36FRXbti99WjnCY
F3PdH7G+V9ANDecRvfl9gUXnWFVWEWDHGcb04DLGTGVFIBFJgvPt4/AufedxR8TM
xsopD/OEeXv3YAgafd0Ady65tWYxOBI3da1W5i88MZ0ad/yQPyXAoPWNQAs5ZJ+S
Iu5fazFE8XdGgo30CXwtYjzFPVPq3QIDAQABo4ICzTCCAskwHQYDVR0OBBYEFAtP
zhnX9gysTQGTFSoW/5cocA2NMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GMzNBRjY2NEM0OTExMUYxOTVGNEE2MDlDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQBmlUWMAwDBAOaVWgDBACa
VWoDBACaWhIwDAMEAJpalQMEA5pakAMEAJpanzANBgkqhkiG9w0BAQsFAAOCAQEA
xxyNpVGCcuUCkA8Bo321QOpWkX6CKx9vkQN5k+Y69n4ZLIxC7lEsWyVA4nSGXA5Y
wR5KfJCmNiAnbv5EzDK0W4KBgSXA1ULoy7JFKK1+s3xlouaj+yoCra7sDTktMRKU
XdRRqWGVLPcmPYAKKKjULj9l8XbU84DHjXTQ2hOKsifIfUkuQ0NbmHSMCKNAy8hc
uAlx4iCkLc8ZQ0EKJ7GDi5x7kSGaEqfx4uV1qK06RvN/ad9AfBm9UKyoSdg9hr0o
K7hcIrekz2V4/0cWJoPrg/9079gYtVMcafyor09Gw5WdgAgkUXJEbeb+BO9dNpgR
IezluR/6ubb6JDXvNnLauQ==
-----END CERTIFICATE-----