Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58EA2182CA0111F1B3E44102CF1D38B0.roa
File:                     58EA2182CA0111F1B3E44102CF1D38B0.roa (raw, json)
Hash identifier:          jT50py+MVjl3B4bvt7DllzLb9ZkI+WkVDHwqBcT8ut0=
Subject key identifier:   1D:3A:1F:6C:DA:A8:E3:15:42:60:97:10:A0:11:85:4B:EB:B4:A4:FB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE99
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58EA2182CA0111F1B3E44102CF1D38B0.roa
Signing time:             Sat 17 Oct 2026 08:04:16 +0000
ROA not before:           Sat 17 Oct 2026 08:04:12 +0000
ROA not after:            Tue 24 Nov 2026 08:04:12 +0000
asID:                     395886
IP address blocks:        154.202.117.0/24 maxlen: 24
                          154.202.120.0/21 maxlen: 24
                          154.217.234.0/23 maxlen: 24
                          154.217.236.0/22 maxlen: 24
                          154.217.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126617 (0x1ee99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 17 08:04:12 2026 GMT
            Not After : Nov 24 08:04:12 2026 GMT
        Subject: CN=6ad32c00-b3df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:67:35:e4:43:3c:d7:12:99:71:62:82:c6:e2:
                    f5:ca:ec:24:b2:8d:fc:d3:c0:f3:c3:47:74:d8:80:
                    34:ee:35:5c:37:0e:74:d1:d2:a7:ed:6e:f6:0f:bd:
                    fa:8b:a4:17:d9:b8:db:a9:dd:8e:3e:73:d5:ce:93:
                    f8:ba:45:1f:53:cc:c2:cd:30:bb:78:aa:e9:9e:c2:
                    73:26:77:fc:e7:64:4e:e6:21:26:37:7f:9f:5d:7c:
                    f3:b4:c2:8a:14:f9:3c:f4:b8:ab:75:10:f4:00:fd:
                    24:4b:9d:8f:81:39:4e:7a:5b:9c:a3:5e:24:73:45:
                    f2:5b:ff:46:d2:37:6a:67:40:89:60:f6:02:c7:54:
                    c9:10:d0:e4:69:a1:0a:92:01:e1:e2:63:a0:4a:a3:
                    79:b5:ec:89:2c:96:4e:e9:7c:8d:a0:5b:09:fd:ab:
                    68:4b:03:54:4a:c4:d8:eb:a5:26:8c:eb:cf:ed:52:
                    9f:16:18:43:10:7b:72:e2:2c:6f:71:ee:46:49:31:
                    82:ee:0d:4d:2b:de:39:42:ad:03:5e:8b:99:6c:54:
                    2d:f7:e4:96:05:2e:1b:bb:a1:14:de:51:47:2c:b4:
                    a4:a8:e6:a5:f2:0f:3d:12:f1:ed:83:6d:a3:c5:c8:
                    bf:c7:68:b5:00:e7:bd:2c:c5:90:24:7d:16:a8:e8:
                    d4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3A:1F:6C:DA:A8:E3:15:42:60:97:10:A0:11:85:4B:EB:B4:A4:FB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58EA2182CA0111F1B3E44102CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.117.0/24
                  154.202.120.0/21
                  154.217.234.0-154.217.255.255

    Signature Algorithm: sha256WithRSAEncryption
         29:29:7c:e4:db:a8:9f:db:d1:c9:0f:be:ed:2d:bd:b1:f1:a6:
         e8:89:e4:10:9a:b0:24:65:71:c9:01:25:0f:cc:19:ad:93:5e:
         45:68:e9:eb:7e:12:ba:f9:09:72:ba:08:88:a4:4c:fd:57:d4:
         e2:62:d1:34:89:78:a0:65:46:69:71:c7:aa:b5:bb:71:52:bb:
         4e:13:69:c9:20:4a:04:af:ca:75:89:97:e5:c7:2c:26:d6:4b:
         11:01:65:5c:4a:a5:29:3f:fc:a3:2d:29:5b:d9:6c:f0:a8:23:
         b0:2c:c1:f7:a8:11:0e:c2:e4:46:f5:d1:4c:0f:81:c4:30:c0:
         96:92:7c:ca:cf:c1:37:4d:e0:4a:5c:d7:77:68:d7:08:fb:12:
         75:43:64:74:ea:45:13:65:3a:64:11:e8:30:92:b9:0f:cb:c9:
         5e:04:82:81:af:93:61:88:5f:b7:51:78:fd:d9:6b:bb:85:c8:
         43:b5:5c:a2:ed:c8:6b:ae:6a:b8:7a:6b:e3:13:e0:23:bf:2e:
         20:cb:e9:42:92:1b:35:40:7a:aa:a3:12:aa:10:4c:56:6e:52:
         f7:a0:35:b8:1a:38:2e:c2:3d:7c:81:f3:31:74:1d:4c:4a:5c:
         30:85:b1:eb:e6:05:37:e4:b5:7d:8f:4c:4e:f2:17:f7:bb:9b:
         b6:7b:67:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----