Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CAE29FCB4DC11F1B6BBFFF4CE1D38B0.roa
File:                     9CAE29FCB4DC11F1B6BBFFF4CE1D38B0.roa (raw, json)
Hash identifier:          95K43frwsCeQFDEGw07MTtqHNfI6lyWVdMXHxXbYOkQ=
Subject key identifier:   0E:E5:77:1B:A2:81:C6:20:0B:28:B8:20:A0:48:FB:C4:A8:8C:02:9A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E913
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CAE29FCB4DC11F1B6BBFFF4CE1D38B0.roa
Signing time:             Sun 20 Sep 2026 10:18:24 +0000
ROA not before:           Sun 20 Sep 2026 10:18:20 +0000
ROA not after:            Tue 27 Oct 2026 10:18:20 +0000
asID:                     138915
IP address blocks:        154.206.100.0/23 maxlen: 24
                          154.206.102.0/23 maxlen: 24
                          154.206.104.0/23 maxlen: 24
                          154.206.106.0/24 maxlen: 24
                          154.206.107.0/24 maxlen: 24
                          154.206.108.0/23 maxlen: 24
                          154.206.110.0/23 maxlen: 24
                          154.206.112.0/23 maxlen: 24
                          154.206.114.0/23 maxlen: 24
                          154.206.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125203 (0x1e913)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 20 10:18:20 2026 GMT
            Not After : Oct 27 10:18:20 2026 GMT
        Subject: CN=6aafb2f0-461b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f0:43:a6:b2:0f:38:5f:aa:af:e4:89:d3:88:
                    ff:ec:bc:b9:68:3c:16:e0:9e:c7:ad:82:c8:b8:c0:
                    20:24:ff:fc:8e:d8:14:b6:da:58:78:f6:e2:63:9d:
                    9d:d7:e6:35:13:3e:07:55:99:2a:ae:39:77:fd:96:
                    f8:43:82:20:bf:62:ae:de:ea:37:c1:8b:3e:b6:28:
                    0c:7c:8b:fb:9f:e0:56:fe:7e:b2:89:fa:3e:5c:1c:
                    f8:c1:29:08:5f:c6:19:3c:56:d1:25:df:55:22:d6:
                    49:c0:09:ba:d3:b3:14:d5:99:ce:35:70:98:09:74:
                    cf:8a:d2:7c:e2:0f:72:2d:23:72:20:f6:ab:38:a5:
                    2f:8f:87:20:13:59:ec:7c:fe:cb:af:bd:8a:a0:cc:
                    25:9a:89:b9:53:3e:97:6f:a8:82:23:17:81:e0:89:
                    cb:0a:75:39:b4:5e:29:0c:45:e8:f4:f2:df:37:a7:
                    e3:1c:c1:6c:01:d2:68:9c:26:91:92:aa:80:6c:8b:
                    f9:92:0a:02:b0:08:85:4d:3d:6d:f5:48:49:a4:18:
                    80:9d:91:5e:52:ed:e8:10:b8:ca:5d:c2:c5:b3:10:
                    c4:f4:40:00:1f:5b:df:22:36:43:2a:96:ac:53:17:
                    6a:e5:2d:f8:b9:ee:ce:5a:ce:5f:c1:00:41:67:23:
                    cf:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E5:77:1B:A2:81:C6:20:0B:28:B8:20:A0:48:FB:C4:A8:8C:02:9A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CAE29FCB4DC11F1B6BBFFF4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.206.100.0-154.206.117.255

    Signature Algorithm: sha256WithRSAEncryption
         0a:e8:79:5f:a7:18:64:11:f8:a8:ce:e7:4b:68:f9:7b:64:03:
         6b:a2:78:a9:3a:fe:3c:e7:93:0f:4b:c1:c5:a0:96:d8:84:8a:
         b1:f4:bf:58:f9:72:4d:d9:e5:d5:d1:e8:43:a1:60:8c:fe:89:
         1a:eb:43:03:11:32:dd:3b:e8:09:5a:0a:a9:a8:e3:38:a7:b0:
         10:66:c0:2a:d4:f2:e6:10:cd:8e:20:4c:97:e2:01:73:ee:94:
         97:08:78:5c:fe:fa:be:76:6a:5d:72:29:66:36:09:e6:4f:aa:
         0d:0b:4a:13:86:e3:a4:47:51:17:f8:9e:b0:c6:bf:28:8d:9a:
         37:ea:df:ae:0d:29:09:ad:55:d8:ce:45:bb:2a:54:1f:6d:65:
         72:8d:cb:84:5e:a3:5b:41:22:bc:af:96:e6:7b:e1:c3:34:9a:
         c5:71:c2:16:7e:57:2a:3c:f1:80:66:55:21:4f:68:ae:57:46:
         94:55:b5:13:8c:f8:d5:65:17:79:cf:65:e4:27:6b:05:b6:f7:
         d1:8c:23:a3:25:4e:ef:a0:ec:85:33:14:55:b2:39:97:f3:d4:
         2c:0b:ac:e5:82:3e:e8:2b:6b:75:b2:36:a1:50:0a:dc:b4:70:
         23:37:42:d2:5c:06:19:b4:55:67:1a:72:0e:66:b5:09:72:e3:
         b6:a5:28:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----