Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67D2682EA6A411F1BF71F1FCCE1D38B0.roa
File:                     67D2682EA6A411F1BF71F1FCCE1D38B0.roa (raw, json)
Hash identifier:          74VovSWy/RezE/pXcSE7xEyemLFgECLogRcmTjn5jzQ=
Subject key identifier:   E3:B3:24:10:23:D7:5E:67:F5:E7:0F:8B:3E:D7:17:ED:91:56:0A:BD
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E485
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67D2682EA6A411F1BF71F1FCCE1D38B0.roa
Signing time:             Wed 02 Sep 2026 08:00:47 +0000
ROA not before:           Wed 02 Sep 2026 08:00:43 +0000
ROA not after:            Sat 01 Sep 2029 08:00:43 +0000
asID:                     17561
IP address blocks:        154.91.74.0/24 maxlen: 24
                          154.91.75.0/24 maxlen: 24
                          154.91.76.0/24 maxlen: 24
                          154.91.77.0/24 maxlen: 24
                          154.91.78.0/24 maxlen: 24
                          154.91.79.0/24 maxlen: 24
                          154.91.80.0/24 maxlen: 24
                          154.91.81.0/24 maxlen: 24
                          154.91.82.0/24 maxlen: 24
                          154.91.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 12:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124037 (0x1e485)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  2 08:00:43 2026 GMT
            Not After : Sep  1 08:00:43 2029 GMT
        Subject: CN=6a97d7af-855c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a5:2a:47:a4:d9:ad:da:29:40:f4:f7:68:28:
                    0c:ae:33:3b:55:85:38:09:e2:2d:a3:fa:63:4f:3e:
                    10:13:ba:c0:e9:7d:1e:5b:58:ac:e0:1b:67:b0:06:
                    8a:3c:77:0c:56:e3:8e:66:ad:8d:67:4c:2c:1c:bb:
                    94:c2:2d:57:25:84:97:fa:29:b8:f6:16:47:d0:9d:
                    cb:0b:6e:c7:fe:b3:6c:42:0b:b0:6c:ce:b8:26:49:
                    11:e0:d0:5f:3d:7a:e0:26:62:d5:aa:d3:5a:a1:cf:
                    c2:61:a8:91:7f:cf:3a:92:a2:93:cf:5a:f0:90:a0:
                    4a:7b:4e:72:85:0d:56:3c:96:f3:6a:79:66:18:fd:
                    4d:d9:a4:af:30:b7:d3:08:84:15:b4:55:a6:ff:a1:
                    40:21:86:62:02:a2:8c:4d:3a:1b:b4:b1:86:2b:58:
                    8c:9c:ec:2d:00:5e:e4:59:46:16:b5:6f:31:97:26:
                    b6:bf:94:fb:cb:e4:a2:02:20:10:dd:c2:83:71:1d:
                    b2:4e:07:17:16:95:b0:ba:c0:dd:89:93:0b:20:b7:
                    8a:75:70:ea:54:43:4a:00:57:08:09:f5:e9:36:46:
                    82:a2:08:75:cc:85:84:c0:ea:8a:ee:78:50:f6:0f:
                    df:3d:11:22:f7:14:3f:a0:b5:98:8b:b2:ca:b1:3f:
                    93:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B3:24:10:23:D7:5E:67:F5:E7:0F:8B:3E:D7:17:ED:91:56:0A:BD
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67D2682EA6A411F1BF71F1FCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.91.74.0-154.91.83.255

    Signature Algorithm: sha256WithRSAEncryption
         a5:5a:1f:ab:b2:1e:54:a0:bd:82:b2:e0:f0:25:75:b9:e0:6a:
         1f:df:ee:d4:d8:03:af:dd:72:14:6f:ed:9b:80:48:b1:96:53:
         02:92:e2:c1:10:18:ec:2d:c3:04:b7:58:cb:37:d5:28:4a:82:
         0d:d1:61:0f:f6:e4:f8:a7:18:9a:f4:50:7d:b0:eb:44:17:15:
         59:4f:08:53:10:71:dd:86:d6:c4:b1:6b:77:10:a4:62:7a:ea:
         02:a7:2d:50:53:60:89:ba:32:30:14:f1:a5:f7:8d:b2:dc:88:
         11:0a:37:94:da:51:bc:ee:59:71:57:ef:72:5e:62:d5:21:b7:
         76:e3:2d:27:05:0e:5e:34:c9:d4:0f:7f:b9:da:c3:db:a5:90:
         8a:01:c2:08:26:c9:6d:1e:aa:cf:d1:c9:24:05:b9:69:ea:25:
         87:d0:16:83:71:00:24:0c:6d:80:da:14:2e:07:18:89:74:e3:
         7f:23:0c:92:a9:2b:27:29:80:87:a1:4d:9e:ab:cd:7a:c0:17:
         dd:19:a2:91:85:1b:18:8c:93:ee:e9:92:15:0a:e0:8a:1d:0d:
         1b:51:b3:07:2f:64:7f:c3:31:90:00:95:f0:9f:e4:fb:b8:a1:
         d3:0f:92:d8:46:3f:b8:61:69:7f:74:c7:c4:91:ec:12:af:de:
         2b:70:37:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----