Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CC157449A1011F180D1FA0DCF1D38B0.roa
File:                     3CC157449A1011F180D1FA0DCF1D38B0.roa (raw, json)
Hash identifier:          ATAq0WGqr2kTHxScINB0wUQJMI78+Z51BFt/XIQf+Pk=
Subject key identifier:   9F:BE:6F:7E:18:AA:C6:B2:A2:EE:2A:79:BE:BC:C8:2A:AE:99:C8:DC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DF6F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CC157449A1011F180D1FA0DCF1D38B0.roa
Signing time:             Mon 17 Aug 2026 07:49:56 +0000
ROA not before:           Mon 17 Aug 2026 07:49:52 +0000
ROA not after:            Tue 17 Aug 2027 07:49:52 +0000
asID:                     60171
IP address blocks:        154.202.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122735 (0x1df6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 17 07:49:52 2026 GMT
            Not After : Aug 17 07:49:52 2027 GMT
        Subject: CN=6a82bd24-de3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:78:de:72:16:5a:2c:72:10:4c:0f:26:ce:75:
                    aa:1d:f1:4f:28:6f:75:aa:f5:7e:34:0b:1e:5b:b4:
                    0c:4e:8e:e5:2b:27:06:1a:c7:06:ab:50:30:ae:2c:
                    2d:e6:2f:45:47:1a:63:96:f2:c0:54:fe:04:88:88:
                    b0:7b:c6:16:6f:51:72:5c:8b:bb:a0:02:c1:13:bc:
                    6b:01:39:21:a4:b2:18:ee:dd:f0:06:06:85:2c:d9:
                    54:dd:4a:b5:a4:0d:75:93:48:69:92:60:59:5c:c9:
                    fb:ce:c4:76:d2:79:ed:2b:26:65:f2:e3:42:9e:d6:
                    c9:b7:e9:10:95:81:f9:2f:05:0d:e7:3d:47:64:2c:
                    36:95:ed:49:1e:90:61:f3:e7:66:46:88:d9:ee:50:
                    47:c5:35:b6:01:70:72:fc:45:24:13:8e:5b:93:06:
                    82:7c:18:1f:2a:56:12:ea:e5:db:8a:d3:55:64:5d:
                    9d:6b:67:ea:98:cc:bd:e3:ea:00:f9:04:14:8e:2e:
                    48:81:b6:72:57:23:0e:5c:ed:5d:03:cf:2d:4c:54:
                    d2:2b:a6:0e:89:b7:1f:7e:24:32:f7:df:84:b1:b5:
                    70:a8:c6:6e:87:bb:83:b5:48:07:e3:f7:88:6c:85:
                    d7:4c:7b:ff:9d:a4:8a:44:17:15:3d:94:8d:11:96:
                    59:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BE:6F:7E:18:AA:C6:B2:A2:EE:2A:79:BE:BC:C8:2A:AE:99:C8:DC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CC157449A1011F180D1FA0DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:f8:5d:ae:3b:3b:a4:67:55:bd:8b:00:c2:51:b1:48:de:5b:
         9d:11:5c:6b:49:89:b1:04:89:ef:6b:18:98:23:15:92:59:26:
         0b:1d:d1:e2:a1:ab:0d:ba:e4:2b:c0:82:aa:fa:d1:7e:1f:a8:
         48:ae:3d:b9:ae:b8:13:86:27:de:94:f3:5d:ad:8e:5f:bf:97:
         a0:94:8e:0b:2a:cf:7a:1e:fc:0d:87:70:9b:dc:46:08:4c:ca:
         ea:33:90:24:0d:17:1b:0c:51:b0:e6:3f:a0:97:0f:ec:ab:2c:
         6b:3a:15:3a:ed:1d:bd:4c:c8:cb:2c:1b:2d:b2:c6:04:ac:f9:
         e5:80:67:b2:99:de:dc:7c:2d:e2:13:b9:71:de:e0:f2:ca:0c:
         d7:86:fd:ea:9b:b1:98:9c:ba:28:c0:af:c7:8e:cb:e4:3d:c7:
         6a:8f:2a:5a:df:a6:b5:18:7d:58:a9:b7:de:ca:3f:14:14:4f:
         eb:24:77:16:0e:18:9d:82:de:b5:2f:ad:48:cc:2a:6f:a0:a0:
         cf:9f:cb:47:0d:1d:d3:a9:3b:e4:9a:d7:64:4f:62:43:3f:e1:
         e3:c0:14:b4:11:61:39:ea:33:65:8d:04:d5:8a:33:ae:04:c1:
         36:d7:38:45:77:0c:a1:85:fa:d2:60:e3:a4:b9:f6:f9:74:e0:
         5b:7d:1c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----