Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31D05AECB58611F1A39E94CDCE1D38B0.roa
File:                     31D05AECB58611F1A39E94CDCE1D38B0.roa (raw, json)
Hash identifier:          tYv1C+KCjJ2uFSVYsM2jLEcr7LFdzMXaTOHJKej1EXo=
Subject key identifier:   2B:A4:15:32:31:08:97:23:3B:B3:C8:C5:5A:95:6A:86:9E:11:D3:F4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E96A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31D05AECB58611F1A39E94CDCE1D38B0.roa
Signing time:             Mon 21 Sep 2026 06:32:19 +0000
ROA not before:           Mon 21 Sep 2026 06:32:15 +0000
ROA not after:            Thu 20 Sep 2029 06:32:15 +0000
asID:                     17561
IP address blocks:        154.92.144.0/24 maxlen: 24
                          154.92.145.0/24 maxlen: 24
                          154.92.146.0/24 maxlen: 24
                          154.92.147.0/24 maxlen: 24
                          154.92.148.0/24 maxlen: 24
                          154.92.149.0/24 maxlen: 24
                          154.92.150.0/24 maxlen: 24
                          154.92.151.0/24 maxlen: 24
                          154.92.152.0/24 maxlen: 24
                          154.92.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125290 (0x1e96a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 21 06:32:15 2026 GMT
            Not After : Sep 20 06:32:15 2029 GMT
        Subject: CN=6ab0cf73-6da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e3:5b:b7:a1:9d:de:00:b1:23:5d:8d:63:ff:
                    4d:72:8e:24:28:08:59:20:0c:7f:3b:67:f6:05:51:
                    cb:25:50:f6:4a:1b:ac:79:d7:98:c1:52:06:77:2a:
                    90:b6:a9:1f:d9:5f:42:94:3f:e1:fd:fb:81:99:ba:
                    e2:e6:da:ac:0a:d0:23:a4:c1:3e:5b:05:83:28:da:
                    8f:0a:41:42:34:63:df:2c:eb:c4:d3:a7:07:13:e5:
                    37:8c:79:9c:ee:e1:d5:7e:e6:47:71:97:50:4c:bf:
                    3a:6d:15:da:fd:67:62:87:8f:ac:73:4d:3b:83:79:
                    07:95:c0:74:4e:fe:38:85:17:0d:95:7b:cd:41:70:
                    03:d5:59:20:23:02:a2:23:b8:2d:e4:e7:c6:6e:c0:
                    2a:03:7e:9d:09:6f:18:55:e7:73:db:a0:a6:0a:78:
                    f9:af:66:34:c7:5c:21:1e:e9:00:b6:e6:13:91:f0:
                    23:4d:1f:ed:02:02:39:19:9c:0c:9b:de:67:50:0e:
                    0b:5a:4a:6b:51:02:2f:37:59:17:ee:c8:d7:16:aa:
                    1e:85:80:07:23:ad:eb:8e:9e:2b:10:92:73:cb:29:
                    ea:df:a3:9f:ab:85:72:99:5a:8f:fc:33:e0:f4:30:
                    b6:72:2a:6c:c6:f4:fb:5b:18:ff:31:e7:8d:1a:8b:
                    8e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A4:15:32:31:08:97:23:3B:B3:C8:C5:5A:95:6A:86:9E:11:D3:F4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31D05AECB58611F1A39E94CDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.144.0-154.92.153.255

    Signature Algorithm: sha256WithRSAEncryption
         5c:a5:c4:3a:48:39:f1:d4:8e:57:15:ac:c4:32:53:1d:cb:44:
         a2:0a:c3:32:23:2f:3d:a7:17:48:68:61:f6:cc:90:b3:4b:73:
         a4:10:29:33:a7:8c:cb:83:89:bf:80:e3:78:f5:0f:0e:38:1d:
         ec:e3:83:cc:95:2e:a9:6d:ac:85:37:9a:3b:bf:82:33:d5:b1:
         0e:45:99:5a:68:82:3a:6f:6a:57:da:32:fb:39:f6:5d:c2:42:
         7a:63:a1:b6:03:b7:52:4f:df:7b:a3:cf:80:f0:89:01:83:d6:
         b6:7d:4a:d4:74:63:1d:f3:5c:e1:a6:59:9b:6d:29:da:dd:2d:
         47:51:46:bf:99:60:d6:e6:31:b7:d0:76:cf:ce:97:8b:8c:8d:
         20:21:4b:2c:98:01:29:1b:d1:29:c7:9b:dd:80:0b:2e:4a:8f:
         21:1a:d8:ab:b1:21:1e:fd:24:71:e0:0d:4b:35:5a:68:ba:44:
         22:22:ac:15:cd:de:27:bc:5c:47:75:e4:9e:26:d5:67:47:d3:
         36:63:81:bd:37:52:74:95:e5:8d:15:31:7f:8e:d9:08:6f:96:
         06:63:b6:93:03:53:7b:ae:63:ae:7d:c5:14:1b:a7:c3:5d:06:
         23:7a:1d:15:50:e9:94:8b:7b:df:81:21:54:eb:bf:36:77:41:
         e3:bf:42:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----