Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CEB4596A6A311F187C28EF8CE1D38B0.roa
File:                     8CEB4596A6A311F187C28EF8CE1D38B0.roa (raw, json)
Hash identifier:          FFiWf8YKXzleq5OeMtT7Z+La1xvt5M5roJOtB8pZJyE=
Subject key identifier:   D4:4A:1A:10:FA:6C:C3:88:43:DB:F2:20:AF:8C:1D:43:26:ED:CA:D6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E483
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CEB4596A6A311F187C28EF8CE1D38B0.roa
Signing time:             Wed 02 Sep 2026 07:54:40 +0000
ROA not before:           Wed 02 Sep 2026 07:54:36 +0000
ROA not after:            Sat 01 Sep 2029 07:54:36 +0000
asID:                     17561
IP address blocks:        154.91.64.0/24 maxlen: 24
                          154.91.65.0/24 maxlen: 24
                          154.91.66.0/24 maxlen: 24
                          154.91.67.0/24 maxlen: 24
                          154.91.68.0/24 maxlen: 24
                          154.91.69.0/24 maxlen: 24
                          154.91.70.0/24 maxlen: 24
                          154.91.71.0/24 maxlen: 24
                          154.91.72.0/24 maxlen: 24
                          154.91.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124035 (0x1e483)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  2 07:54:36 2026 GMT
            Not After : Sep  1 07:54:36 2029 GMT
        Subject: CN=6a97d640-fdae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0a:a2:d9:0f:95:ea:89:74:8c:44:17:ae:03:
                    62:5d:00:b9:53:22:06:cb:3c:7d:38:4a:0f:74:6d:
                    ec:da:bd:8c:10:49:53:ec:94:b3:54:8f:67:b1:d9:
                    c2:3c:6d:a5:dc:c9:c6:0e:5f:5b:c5:f5:81:78:dd:
                    d6:d6:b8:d4:2d:00:7e:ca:0f:5b:a7:50:48:f1:d4:
                    24:13:50:4f:ef:30:e7:7d:b2:2c:e7:19:a9:1b:85:
                    72:61:78:9c:e2:70:52:89:b3:c4:55:59:e3:f0:e6:
                    d9:35:ce:f7:92:1d:99:15:ea:d1:9c:a3:17:07:b3:
                    ea:4d:76:36:23:86:f7:d2:27:3b:6e:ba:c2:ff:23:
                    72:dc:7d:bf:8e:bd:97:a0:5e:2e:f4:cd:a2:a7:f3:
                    77:e7:f2:24:23:94:9d:56:0a:cc:79:9f:07:2b:30:
                    3a:21:4d:11:c9:4f:48:29:08:09:cb:94:16:39:42:
                    89:4e:88:bb:07:ea:0a:cb:43:aa:0b:14:de:17:96:
                    23:aa:44:03:c3:b8:86:41:ec:c0:6f:89:bc:ea:1b:
                    eb:d5:01:85:32:0f:42:8f:23:e3:08:65:37:86:1a:
                    f2:de:56:4f:1c:f3:7b:2a:b3:96:df:70:e2:e3:db:
                    89:24:7a:63:56:ae:98:7e:98:c6:84:38:a4:73:f1:
                    79:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4A:1A:10:FA:6C:C3:88:43:DB:F2:20:AF:8C:1D:43:26:ED:CA:D6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CEB4596A6A311F187C28EF8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.91.64.0-154.91.73.255

    Signature Algorithm: sha256WithRSAEncryption
         97:11:e4:66:b1:9d:c8:69:21:f0:2c:73:b4:ef:6e:b0:b1:9f:
         8e:27:74:72:bf:d7:e6:2c:3e:ac:38:7d:85:e9:85:69:f2:0a:
         ce:06:47:e8:d1:ce:90:e1:98:e9:28:5b:7d:4d:12:3b:6a:f0:
         7f:68:0f:44:52:2f:eb:e5:1d:da:90:40:a6:04:05:fb:c9:57:
         84:20:45:d6:a5:b3:1c:d9:bc:68:d8:0c:d5:f2:2f:48:98:5e:
         32:3c:db:f5:ad:4c:00:58:56:61:9c:02:6b:8b:82:95:aa:21:
         01:4a:ed:ac:f1:f6:3d:be:28:5d:01:83:5e:67:81:18:99:b3:
         b5:60:60:c1:77:b0:8c:b5:94:7f:97:26:bc:5b:17:23:21:57:
         1a:9a:e8:da:da:33:44:5f:29:d7:e5:c5:60:8e:60:7e:a8:43:
         ef:21:68:a8:2a:78:77:8d:b8:c3:49:b4:cf:9b:08:33:7b:b2:
         29:a2:dd:f1:f2:93:3d:da:ad:6b:ed:a9:dc:2c:2c:3d:41:14:
         5b:a6:f8:79:73:94:aa:ca:27:99:f3:ed:8c:eb:ff:e6:f5:94:
         53:2e:b4:bb:e8:cc:f7:e7:29:2f:5b:49:92:4e:c8:b7:31:66:
         a5:c2:6e:08:bf:a1:44:86:07:7b:8a:bf:23:80:17:89:20:6d:
         39:94:63:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----