Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AB151EAB5A611F19305EE1ACF1D38B0.roa
File:                     4AB151EAB5A611F19305EE1ACF1D38B0.roa (raw, json)
Hash identifier:          sAKOtXDu3pdWc2bk8R2JrrRXCZiaTa879CX2nfahOK0=
Subject key identifier:   E4:53:A4:16:5B:6D:50:5C:E0:D8:9A:21:23:79:8E:B1:0B:92:98:37
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E99E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AB151EAB5A611F19305EE1ACF1D38B0.roa
Signing time:             Mon 21 Sep 2026 10:22:05 +0000
ROA not before:           Mon 21 Sep 2026 10:22:01 +0000
ROA not after:            Tue 05 Jan 2027 10:22:01 +0000
asID:                     18229
IP address blocks:        154.210.155.0/24 maxlen: 24
                          154.210.156.0/24 maxlen: 24
                          154.210.157.0/24 maxlen: 24
                          154.210.158.0/24 maxlen: 24
                          154.210.159.0/24 maxlen: 24
                          154.210.160.0/24 maxlen: 24
                          154.210.161.0/24 maxlen: 24
                          154.210.162.0/24 maxlen: 24
                          154.210.185.0/24 maxlen: 24
                          154.210.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 11:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125342 (0x1e99e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 21 10:22:01 2026 GMT
            Not After : Jan  5 10:22:01 2027 GMT
        Subject: CN=6ab1054d-0d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:88:97:90:6b:33:57:9c:20:fc:2c:71:bc:08:
                    09:9f:a1:b5:02:c4:42:b0:9a:46:17:8c:65:2c:1a:
                    30:32:ea:18:9e:24:b2:9e:ab:35:97:3c:cb:21:31:
                    bd:71:50:4f:11:33:b1:b9:88:69:45:36:51:62:76:
                    54:6d:2c:8b:e4:36:e2:51:3a:d1:48:ef:34:9d:65:
                    a0:37:cd:82:a6:93:f9:2b:18:e4:a4:aa:06:13:1a:
                    46:4f:44:23:06:35:d4:28:11:47:5c:ca:8e:50:b9:
                    20:f2:55:fe:75:8e:b9:70:fe:84:03:24:65:aa:f1:
                    ec:cb:f0:60:83:37:00:63:ab:5c:32:ff:f8:37:8e:
                    65:c8:f5:40:73:cc:ef:1c:be:31:d2:b9:25:20:4f:
                    45:ce:02:07:8f:a5:19:70:ab:f8:38:db:1d:47:0d:
                    4d:45:80:62:a9:df:f3:e7:56:a6:6c:b8:da:4f:92:
                    4e:b8:6f:15:d0:10:73:3c:c6:39:f2:24:6d:2b:de:
                    dc:47:6a:f2:d6:47:e2:ef:13:36:ca:b6:c1:be:f5:
                    73:44:fe:bd:02:c8:ef:e3:80:99:ac:97:1a:95:06:
                    20:d2:03:5b:bf:30:5c:4c:99:0e:9e:f4:cd:57:4c:
                    75:24:2e:b6:49:07:31:39:27:74:1d:58:79:ec:b9:
                    e3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:53:A4:16:5B:6D:50:5C:E0:D8:9A:21:23:79:8E:B1:0B:92:98:37
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AB151EAB5A611F19305EE1ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.155.0-154.210.162.255
                  154.210.185.0/24
                  154.210.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:e0:37:bd:b2:8e:c4:46:ee:38:f6:5d:4e:ba:f3:d8:b8:de:
         f7:cd:ba:ea:fe:b5:b9:80:6d:61:07:ba:8b:36:91:27:2e:0e:
         15:d2:41:8b:07:c1:a3:87:5d:db:35:e7:c4:36:0c:0d:98:9b:
         af:a6:46:c5:cf:3b:c4:29:14:25:69:ce:4d:64:e0:b4:98:d8:
         00:0b:7a:a9:11:b9:f7:aa:9a:fa:80:5a:88:15:c7:ac:12:37:
         c0:fe:2c:21:76:4a:22:21:8b:5e:fe:52:2d:ea:4d:82:7e:09:
         74:33:37:5a:9f:56:d3:7a:d0:d6:e7:88:e6:e8:5f:86:f3:66:
         5e:ea:42:7f:92:9b:08:f9:91:24:e4:5c:dc:bf:4f:3a:92:9a:
         e8:63:62:3b:5b:19:52:d2:6c:bd:d1:e3:3f:cf:b5:61:9d:7b:
         36:bd:ff:fe:01:cb:11:d1:af:d3:3a:70:a6:03:77:d0:fb:41:
         35:cc:1e:12:9d:04:c4:d3:46:db:0f:56:1a:12:cd:04:0b:f6:
         9b:c7:53:a7:27:bd:b7:df:98:21:08:d5:d2:4a:6b:f6:f2:e5:
         c8:29:09:ec:bb:1e:f2:b3:99:17:78:87:7c:0a:00:21:2b:31:
         f1:55:2d:2f:56:54:04:db:51:ba:99:f3:5c:3a:d5:0d:ef:70:
         ef:42:8b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----