Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7074F4E0B4ED11F18D2E00E0CE1D38B0.roa
File:                     7074F4E0B4ED11F18D2E00E0CE1D38B0.roa (raw, json)
Hash identifier:          bTTvD4AoPhruvN0V49BkQN59Y64wrPWXoZ6rAbJGBK4=
Subject key identifier:   41:8B:6E:6A:C7:A6:52:32:9C:EC:40:ED:BB:D7:7D:E6:ED:73:EE:BB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E931
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7074F4E0B4ED11F18D2E00E0CE1D38B0.roa
Signing time:             Sun 20 Sep 2026 12:18:51 +0000
ROA not before:           Sun 20 Sep 2026 12:18:47 +0000
ROA not after:            Tue 27 Oct 2026 12:18:47 +0000
asID:                     63139
IP address blocks:        154.93.77.0/24 maxlen: 24
                          154.93.78.0/24 maxlen: 24
                          154.93.79.0/24 maxlen: 24
                          154.93.80.0/24 maxlen: 24
                          154.93.81.0/24 maxlen: 24
                          154.93.82.0/24 maxlen: 24
                          154.93.83.0/24 maxlen: 24
                          154.93.95.0/24 maxlen: 24
                          154.93.123.0/24 maxlen: 24
                          154.94.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125233 (0x1e931)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 20 12:18:47 2026 GMT
            Not After : Oct 27 12:18:47 2026 GMT
        Subject: CN=6aafcf2b-ecb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c3:e2:57:8a:13:85:63:30:b4:1e:fe:b7:44:
                    c0:4e:5c:b2:18:62:c9:bc:1d:11:bb:87:f7:03:16:
                    ab:09:9b:03:55:75:dc:b0:65:c2:a4:22:66:bb:90:
                    03:eb:a1:2b:39:f0:0d:45:7b:45:21:2c:49:f6:db:
                    10:00:cd:48:d0:95:58:34:68:34:25:3a:74:ea:94:
                    f1:2f:a5:21:38:e6:03:f4:be:2f:f3:24:c3:6b:99:
                    39:57:42:62:69:5a:f4:62:28:70:8e:57:bc:cc:c9:
                    66:44:62:d5:95:e4:4f:01:0f:65:7c:0e:42:0a:11:
                    7c:f6:07:45:72:5f:54:1c:c3:81:80:11:88:6b:c7:
                    93:4b:97:9b:cd:c7:d4:77:6d:07:a0:1f:e2:ea:7d:
                    2a:84:b9:4a:75:c5:2c:20:4d:cd:70:40:e0:1a:53:
                    0b:d2:d4:33:ff:57:a9:44:10:4f:52:c0:50:f7:c6:
                    5b:82:bf:38:c2:e3:e0:24:e4:34:8d:49:fe:d4:20:
                    0a:c7:d7:cb:83:1f:f9:f6:6a:dc:65:25:6b:c7:94:
                    c4:a2:62:31:06:6d:cb:c7:8f:b2:e2:2d:70:72:31:
                    c1:75:18:b1:29:12:49:41:81:55:87:1d:4e:cc:d2:
                    7d:5b:65:5d:a6:a9:96:48:c3:e3:6a:c9:86:9f:4a:
                    30:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8B:6E:6A:C7:A6:52:32:9C:EC:40:ED:BB:D7:7D:E6:ED:73:EE:BB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7074F4E0B4ED11F18D2E00E0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.93.77.0-154.93.83.255
                  154.93.95.0/24
                  154.93.123.0/24
                  154.94.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:6b:05:b1:51:33:95:9a:cc:06:36:95:60:55:29:3f:45:60:
         51:48:8b:58:fa:ef:61:13:35:06:ed:3e:b3:f7:c8:fb:50:91:
         e3:30:a4:38:62:29:9d:51:0c:e2:8f:f0:f8:35:d6:1c:49:e8:
         f3:d9:dc:5a:9f:df:f4:4f:4a:cf:59:c2:aa:c2:df:5d:0a:e2:
         cb:ca:f9:57:a7:d2:8e:3e:26:9c:39:d8:48:41:e4:01:85:a9:
         97:21:c9:3d:64:a2:a9:e2:4c:d5:4d:60:61:3b:63:7b:6d:4b:
         ea:64:97:95:88:86:49:51:7f:37:6d:16:71:1d:31:87:b6:11:
         59:e9:41:fc:60:90:d3:da:75:07:8b:f5:8b:a1:0c:27:48:eb:
         39:06:4d:8d:5b:ec:20:fd:ca:b2:54:b5:4f:d4:7f:c5:1c:d6:
         2d:17:84:66:6b:51:85:37:d7:30:f2:4f:6a:47:a0:6c:e4:5a:
         5b:74:bb:b6:b9:a9:e0:9a:a5:e5:6b:c5:1b:fc:e4:59:73:34:
         57:e3:31:a1:26:1d:7b:73:31:43:0e:90:38:71:ae:bc:e4:e9:
         26:33:e7:9b:26:71:3d:1a:fd:fa:2d:b9:21:53:45:ff:e9:38:
         1d:1a:d0:ae:94:7e:d5:13:17:c5:18:a4:ec:46:ad:66:cf:6c:
         04:b8:5e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----