Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E081354C87811F1B316B4FFCE1D38B0.roa
File:                     8E081354C87811F1B316B4FFCE1D38B0.roa (raw, json)
Hash identifier:          lenlks6LPgVdKkI9WbHHr7oRzy1q4gKoRQSBl2ujuQI=
Subject key identifier:   BB:DD:27:44:0E:86:D5:E1:4B:36:FC:7B:5F:19:8D:BF:67:8D:62:B0
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EE41
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E081354C87811F1B316B4FFCE1D38B0.roa
Signing time:             Thu 15 Oct 2026 09:12:33 +0000
ROA not before:           Thu 15 Oct 2026 09:12:29 +0000
ROA not after:            Fri 20 Nov 2026 09:12:29 +0000
asID:                     11404
IP address blocks:        154.200.112.0/20 maxlen: 24
                          154.205.48.0/20 maxlen: 24
                          154.206.32.0/20 maxlen: 24
                          154.207.144.0/20 maxlen: 24
                          154.207.160.0/20 maxlen: 24
                          154.211.192.0/20 maxlen: 24
                          154.215.16.0/20 maxlen: 24
                          154.216.16.0/20 maxlen: 24
                          154.222.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126529 (0x1ee41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 15 09:12:29 2026 GMT
            Not After : Nov 20 09:12:29 2026 GMT
        Subject: CN=6ad09901-ba53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c7:b0:9f:1d:4e:d5:2b:47:2c:40:0f:d6:c7:
                    b4:d1:29:a9:42:bc:ab:87:71:05:e4:76:ab:c6:b6:
                    79:4e:e2:cd:2a:05:c8:43:c2:c1:7a:57:12:ca:21:
                    79:d2:c0:2a:eb:3b:e7:c7:e1:1e:ac:7a:ff:65:9f:
                    6a:31:6e:8d:6e:a4:b9:b1:fd:4a:aa:1a:ee:d9:8e:
                    56:1c:a3:69:e1:b0:50:1c:80:a7:e1:90:51:ec:d3:
                    81:8f:83:e9:5d:4c:7c:28:b3:91:ce:ac:b7:c5:e1:
                    e7:21:bd:ea:21:f5:8e:f8:02:a5:de:3d:81:4e:56:
                    c4:38:7a:1c:17:8f:e4:eb:d6:60:76:a9:e0:ae:54:
                    8e:16:87:09:ed:8d:b3:fa:78:61:f9:db:d8:15:dd:
                    b1:94:62:1a:7e:a6:cd:26:4c:19:2e:f0:f5:e0:18:
                    c5:72:a2:2f:1b:41:8f:6f:e4:bc:03:82:0e:a4:0e:
                    24:b1:37:56:d8:89:fc:76:83:7b:16:1f:ae:0b:96:
                    bc:12:4c:d3:a1:82:cb:3b:79:60:ab:63:ff:0a:09:
                    42:28:23:e7:dd:e7:e6:ba:c6:b5:44:b0:02:89:a2:
                    89:87:96:85:d6:11:6b:fe:dd:7e:70:02:0c:a1:8e:
                    ba:09:dd:2b:2d:0b:98:f2:67:59:17:96:e5:f4:d1:
                    c0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DD:27:44:0E:86:D5:E1:4B:36:FC:7B:5F:19:8D:BF:67:8D:62:B0
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E081354C87811F1B316B4FFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.112.0/20
                  154.205.48.0/20
                  154.206.32.0/20
                  154.207.144.0-154.207.175.255
                  154.211.192.0/20
                  154.215.16.0/20
                  154.216.16.0/20
                  154.222.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c8:f8:f5:cf:5b:19:99:a4:00:ab:c3:03:27:f7:d9:01:35:41:
         ab:02:c6:24:6a:26:7e:df:8b:58:d5:17:d6:c2:29:16:0e:ea:
         b1:d1:9e:4b:1b:d0:b0:c5:de:3f:a2:93:4b:58:22:6b:24:86:
         c9:e6:24:90:68:f4:c3:ad:40:64:df:fb:07:df:d2:eb:6f:99:
         63:9c:30:b7:84:e4:e6:38:50:ea:2e:83:aa:74:e8:1d:f3:8d:
         9f:d2:10:1a:84:d5:12:c0:53:fa:5f:4d:c1:65:89:2e:e2:2e:
         a0:99:87:25:f4:d1:b4:ff:21:47:2c:5c:55:7c:79:68:fe:84:
         ce:49:b5:09:94:1e:22:74:bc:ea:9d:7d:7c:88:bc:2f:cc:f7:
         b2:a8:7d:2e:e5:b2:44:bd:b7:c4:a9:76:a9:c3:75:64:c0:3f:
         67:ee:f8:92:64:1a:b5:3c:1a:0d:7d:f3:5c:3a:e8:0e:3f:0a:
         cd:df:e0:c3:a1:59:76:be:3a:43:e7:e4:31:8f:0d:09:ce:9c:
         d6:74:07:22:ce:eb:97:d3:b1:e4:a3:5d:fa:1b:27:e7:4c:71:
         64:80:e8:d9:80:ef:4e:46:1e:ba:2f:aa:ee:a9:e7:e2:90:6c:
         b6:6c:f0:4d:be:d5:43:3d:d2:d2:7b:04:9e:28:e7:07:0e:bb:
         7a:e3:90:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----