Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F37687A4B7F011F18CF04A10CF1D38B0.roa
File:                     F37687A4B7F011F18CF04A10CF1D38B0.roa (raw, json)
Hash identifier:          Pdeqce1S2+pInPZucDvgzauFIS1DhE1O4yr9WXd31es=
Subject key identifier:   00:B8:B0:2B:67:92:D0:06:D6:02:B6:7E:62:7E:DC:59:C4:1E:1A:AA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EAA9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F37687A4B7F011F18CF04A10CF1D38B0.roa
Signing time:             Thu 24 Sep 2026 08:21:33 +0000
ROA not before:           Thu 24 Sep 2026 08:21:29 +0000
ROA not after:            Sun 01 Nov 2026 08:21:29 +0000
asID:                     62240
IP address blocks:        154.195.138.0/24 maxlen: 24
                          154.195.140.0/24 maxlen: 24
                          154.195.143.0/24 maxlen: 24
                          154.195.144.0/24 maxlen: 24
                          154.196.29.0/24 maxlen: 24
                          154.196.32.0/24 maxlen: 24
                          154.196.34.0/24 maxlen: 24
                          154.196.35.0/24 maxlen: 24
                          154.196.37.0/24 maxlen: 24
                          154.196.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 11:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125609 (0x1eaa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 24 08:21:29 2026 GMT
            Not After : Nov  1 08:21:29 2026 GMT
        Subject: CN=6ab4dd8d-ba0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f8:0a:58:03:56:72:4b:51:f0:7a:1d:fc:06:
                    81:3e:dc:9c:56:3d:a2:09:ae:97:93:84:4b:35:4f:
                    8d:95:37:a4:0a:d8:99:e3:d1:aa:96:b3:ce:50:d7:
                    03:e1:37:b5:82:c5:da:ff:ff:be:20:78:26:9a:1a:
                    30:2a:c2:42:21:ec:41:ab:5d:07:f2:2c:f8:1f:fd:
                    b6:ef:6c:3f:57:e6:cb:de:2c:2c:f7:4f:84:8a:ba:
                    6f:ba:d1:34:cf:e9:92:c1:65:3c:7f:c3:5b:19:37:
                    f9:3f:51:ac:8f:c7:5a:0d:48:10:9f:df:6a:69:58:
                    69:54:f0:0a:a0:8c:ee:f1:55:09:48:fb:e9:08:72:
                    4f:7d:70:06:08:7d:82:94:58:0b:80:0d:6f:7b:a8:
                    f5:03:21:87:ee:5d:7c:90:c0:34:21:d1:15:eb:62:
                    d9:05:81:06:63:b3:d6:e8:58:fb:f3:35:f9:ff:f6:
                    c3:6f:23:fd:96:67:2f:7f:b2:4c:51:24:59:14:c0:
                    1a:c1:fc:d7:56:48:20:9c:a5:53:6b:5f:f5:9c:81:
                    68:3a:27:c9:a4:91:9a:02:e6:75:fd:ce:a2:40:53:
                    33:0a:01:a6:bf:de:2f:87:29:fe:19:2e:7d:6f:b7:
                    cc:c8:e3:bd:28:d7:e4:31:ee:ca:17:62:7b:6f:dc:
                    74:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B8:B0:2B:67:92:D0:06:D6:02:B6:7E:62:7E:DC:59:C4:1E:1A:AA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F37687A4B7F011F18CF04A10CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.195.138.0/24
                  154.195.140.0/24
                  154.195.143.0-154.195.144.255
                  154.196.29.0/24
                  154.196.32.0/24
                  154.196.34.0/23
                  154.196.37.0-154.196.38.255

    Signature Algorithm: sha256WithRSAEncryption
         31:ce:3f:c8:d3:0c:fb:a3:a7:7b:89:42:9a:d7:b7:8e:f8:b6:
         59:62:ea:e1:07:43:ee:69:73:30:9e:1f:4c:bc:2d:d2:05:79:
         ce:f0:07:dc:a9:ba:49:40:99:c5:4e:e7:e0:c7:7b:c0:4c:74:
         1d:29:9c:84:9a:68:2c:19:67:5e:c5:d6:29:57:55:e5:c2:18:
         0f:20:a7:1e:e8:4f:12:49:f3:13:7b:96:06:78:1f:16:c4:9e:
         8f:fb:de:c4:bd:93:24:4b:6f:c0:d4:0f:11:bf:43:1c:13:d0:
         23:02:89:bc:11:d5:6b:61:eb:dd:54:d6:cb:db:14:a4:b2:33:
         8f:c1:fc:9e:df:58:9d:e2:ef:48:ed:c3:ae:e6:2e:88:b4:cd:
         5e:54:f0:eb:9b:26:70:d7:37:2b:52:17:3c:68:0d:ea:d3:09:
         9c:b0:72:48:13:3a:46:61:06:08:d8:bc:86:5f:c5:a8:ed:36:
         13:27:25:b6:d5:b8:ac:3e:e4:77:5c:b3:a0:ee:2d:00:a0:9d:
         f7:a3:55:2d:b0:87:c9:ce:5e:35:a8:72:1e:98:c0:b3:51:2f:
         df:8d:43:0c:e4:14:fa:a1:df:6e:91:e4:6a:f6:08:6f:2f:e3:
         72:ca:b3:ce:84:a6:2a:fb:dc:e1:3d:67:a5:d9:4a:b6:bb:2e:
         01:21:05:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----