Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D38861AB5A811F19AC21BAACE1D38B0.roa
File:                     5D38861AB5A811F19AC21BAACE1D38B0.roa (raw, json)
Hash identifier:          eagFlWaLa0RyKzniorsP74/s+P1DcmoLo9cB3iNvXK0=
Subject key identifier:   7B:58:26:F7:15:69:F3:1F:2C:F5:7A:7E:CD:29:DE:9A:B6:BE:CA:3F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E9A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D38861AB5A811F19AC21BAACE1D38B0.roa
Signing time:             Mon 21 Sep 2026 10:36:55 +0000
ROA not before:           Mon 21 Sep 2026 10:36:51 +0000
ROA not after:            Tue 05 Jan 2027 10:36:51 +0000
asID:                     18229
IP address blocks:        154.210.177.0/24 maxlen: 24
                          154.210.184.0/24 maxlen: 24
                          154.210.206.0/24 maxlen: 24
                          154.210.207.0/24 maxlen: 24
                          154.210.208.0/24 maxlen: 24
                          154.210.209.0/24 maxlen: 24
                          154.210.210.0/24 maxlen: 24
                          154.210.211.0/24 maxlen: 24
                          154.210.212.0/24 maxlen: 24
                          154.210.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 14:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125352 (0x1e9a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 21 10:36:51 2026 GMT
            Not After : Jan  5 10:36:51 2027 GMT
        Subject: CN=6ab108c7-3668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:46:ef:86:3f:e3:1a:4b:19:ab:94:49:34:91:
                    95:13:1e:03:ef:3b:9d:d4:80:aa:a0:b1:38:be:25:
                    45:2f:20:bb:1f:10:8e:09:64:bc:40:bb:56:8d:91:
                    03:39:4a:b8:5a:25:29:2f:6d:d9:40:5c:1a:12:4a:
                    6a:01:b9:f3:00:36:bf:99:a3:2c:9e:40:d4:b8:2f:
                    a1:e7:03:6c:2d:f6:d3:cb:e3:c3:54:d7:9d:6a:8c:
                    34:b5:01:f8:38:fc:6d:05:8a:fc:2c:08:3b:11:3f:
                    72:41:7f:be:c3:9f:46:59:b3:0c:db:9e:f8:6c:d5:
                    ab:46:5b:e0:b4:16:98:cc:0a:82:0d:81:84:f2:c3:
                    2a:b1:c2:c8:57:92:7a:f1:13:00:3e:30:aa:1b:48:
                    10:2d:7c:3f:84:c0:71:69:79:e6:b2:6f:44:f6:94:
                    77:78:99:c6:44:1d:0e:cf:08:ab:fb:ac:02:c8:3a:
                    e1:60:cb:c6:be:ff:bf:2a:f9:ad:55:98:07:82:ce:
                    9e:44:0c:81:c8:71:4f:c2:17:ac:e8:17:c9:00:ca:
                    08:42:d7:e9:0f:d9:23:1c:d5:39:da:43:13:28:b8:
                    1e:c5:c5:9d:5a:a0:a7:ed:cb:33:bd:91:1a:89:0b:
                    05:4d:fd:5f:40:11:59:c3:5f:0a:1b:80:dc:11:34:
                    6d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:58:26:F7:15:69:F3:1F:2C:F5:7A:7E:CD:29:DE:9A:B6:BE:CA:3F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D38861AB5A811F19AC21BAACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.177.0/24
                  154.210.184.0/24
                  154.210.206.0-154.210.213.255

    Signature Algorithm: sha256WithRSAEncryption
         1f:36:59:a4:cf:37:93:61:98:02:30:49:4c:57:96:f8:70:00:
         05:4c:6a:55:dd:f7:cf:73:d4:41:6d:3b:27:a2:3d:e8:43:45:
         9a:c9:38:c4:68:b1:30:de:ac:4b:16:91:7a:53:85:75:2b:4f:
         5c:ad:3e:a3:c3:ae:fc:5f:f4:62:1d:27:01:03:35:20:2d:ba:
         94:c5:b4:a8:73:8e:b1:b6:89:ee:90:c3:57:fe:8b:3b:14:3b:
         42:c8:ad:b4:9c:b6:ab:3d:ad:66:2c:60:ce:0c:10:3f:a0:d8:
         fc:c9:cf:49:cf:f8:d1:9b:ca:6f:35:f6:38:4a:d5:75:94:c7:
         63:74:75:b1:bc:70:21:a6:e6:79:11:df:2c:85:5b:f3:69:0c:
         eb:6c:a0:b5:fb:cd:af:7b:5f:00:00:ac:ca:0f:9d:07:f9:ae:
         44:52:73:6f:a8:87:d0:da:33:ac:70:3d:19:f3:58:bc:ee:ef:
         b4:32:38:4d:e8:03:ed:45:b7:43:ab:0c:bc:4f:ee:e3:63:b5:
         e5:91:82:44:6e:f3:7c:ff:f7:a3:91:25:84:8c:a9:d9:2c:23:
         e2:90:d5:83:0b:ce:34:c8:e6:91:4c:db:23:1e:22:bf:97:61:
         64:d6:46:68:74:d0:f6:43:7d:e9:aa:9b:0f:59:ac:60:79:6f:
         b4:b7:57:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----