Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33354A50B0E011F1A910AFF7CE1D38B0.roa
File:                     33354A50B0E011F1A910AFF7CE1D38B0.roa (raw, json)
Hash identifier:          Rfu8S7AcwFHauhAcv1iVI0vv6+qtbwL8wb5agCMlerk=
Subject key identifier:   FB:7D:85:C2:8F:78:0C:1B:B3:AD:E6:D6:50:EB:48:DE:06:67:27:AC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E84D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33354A50B0E011F1A910AFF7CE1D38B0.roa
Signing time:             Tue 15 Sep 2026 08:34:01 +0000
ROA not before:           Tue 15 Sep 2026 08:33:57 +0000
ROA not after:            Sat 24 Oct 2026 08:33:57 +0000
asID:                     136501
IP address blocks:        154.92.192.0/24 maxlen: 24
                          154.92.193.0/24 maxlen: 24
                          154.92.194.0/24 maxlen: 24
                          154.92.195.0/24 maxlen: 24
                          154.92.196.0/24 maxlen: 24
                          154.92.197.0/24 maxlen: 24
                          154.92.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125005 (0x1e84d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 15 08:33:57 2026 GMT
            Not After : Oct 24 08:33:57 2026 GMT
        Subject: CN=6aa902f8-f400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ef:75:48:4c:6e:84:36:57:8b:c8:48:90:d5:
                    ca:16:01:87:d7:0c:5c:8d:da:6f:bb:4e:ef:58:3c:
                    cb:35:a9:a0:66:67:ad:b6:e4:72:15:54:da:5c:93:
                    98:83:0f:91:5a:c9:87:41:33:d0:dd:6e:a4:68:45:
                    8a:e3:5a:eb:93:39:9d:38:ce:63:b9:07:4e:07:59:
                    6a:62:92:cc:91:e3:0d:9f:5c:0f:66:e6:7a:43:b2:
                    a1:ba:8f:a4:b7:2f:2f:6f:c6:e1:0c:d9:c7:e7:de:
                    f7:58:ed:9a:98:ef:21:d9:6a:f4:ae:8d:f1:f6:37:
                    6f:e5:3b:d5:a2:4b:03:10:e1:2a:5e:d9:22:91:55:
                    0d:2b:3d:4d:de:9f:a8:a7:d0:b8:5b:9b:bc:67:3c:
                    e2:cc:59:58:80:e2:1a:69:b1:08:6b:3c:bb:15:a3:
                    2b:0c:de:a1:39:94:e2:d5:a8:9d:b8:59:ac:d2:d0:
                    10:71:43:97:f8:3a:14:9e:99:37:a3:83:8c:50:61:
                    0b:3f:36:30:b5:ee:c7:18:a2:b5:9c:32:65:45:4c:
                    7b:68:c7:f5:b2:3f:d9:c4:58:40:d2:c9:7a:aa:96:
                    b0:e5:0c:c2:37:38:d7:e7:42:c1:b6:00:08:fb:88:
                    62:9b:e3:0e:d9:7d:2d:4a:a3:17:20:00:f5:9b:72:
                    b3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7D:85:C2:8F:78:0C:1B:B3:AD:E6:D6:50:EB:48:DE:06:67:27:AC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33354A50B0E011F1A910AFF7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.192.0-154.92.198.255

    Signature Algorithm: sha256WithRSAEncryption
         75:f9:56:8a:ac:ad:f4:af:4b:9f:b1:0b:c5:73:00:a0:f0:04:
         05:ae:2d:97:b3:47:ae:68:2b:95:64:7d:4a:94:26:e5:00:7b:
         5f:d6:28:2a:12:ea:6c:7e:f2:4b:0c:eb:6a:63:18:15:51:d4:
         0f:9d:90:1d:8c:2b:5e:f6:e5:94:00:ba:2d:d4:c6:c0:51:b1:
         7c:de:e1:fe:af:a1:01:c6:ca:72:3d:9e:ae:e7:36:d6:c5:27:
         f4:0e:35:3b:6d:a6:91:1a:81:f5:99:7e:89:f1:5d:2a:39:c9:
         45:d0:be:4a:45:7f:e2:d8:b5:65:b9:a9:97:b3:8a:54:97:52:
         65:84:dc:bc:dd:fe:cc:ed:d6:03:46:21:8e:f9:6b:e1:64:f9:
         73:f3:3d:49:bf:12:9b:07:65:90:0f:34:ab:38:e8:7b:a1:0a:
         c3:59:fd:8c:4b:33:ea:1c:af:f8:f4:c3:76:a7:c3:25:ba:bf:
         68:35:3f:c7:42:6f:a1:2e:0a:b7:5a:c4:e0:a7:a2:47:5a:5e:
         d1:be:de:ab:b8:cf:52:85:45:6d:2b:13:0b:cb:0c:3f:c7:7c:
         50:07:f4:2b:0d:c4:94:ee:b8:b2:95:32:58:b5:fd:ec:c0:9d:
         42:2c:7b:66:15:de:82:59:a0:39:f4:0f:3d:17:c0:61:75:d4:
         f2:9f:07:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----