Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A189CB78B5A611F19BE2F51ACF1D38B0.roa
File:                     A189CB78B5A611F19BE2F51ACF1D38B0.roa (raw, json)
Hash identifier:          HClKQd6OLVxL3GTqTiRWblHzr7umFQ+RR9OtAIQDOAQ=
Subject key identifier:   79:E9:32:32:57:FF:7D:5F:A6:07:62:ED:F1:51:8C:0D:77:06:44:80
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E9A2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A189CB78B5A611F19BE2F51ACF1D38B0.roa
Signing time:             Mon 21 Sep 2026 10:24:31 +0000
ROA not before:           Mon 21 Sep 2026 10:24:27 +0000
ROA not after:            Tue 05 Jan 2027 10:24:27 +0000
asID:                     18229
IP address blocks:        154.210.137.0/24 maxlen: 24
                          154.210.138.0/24 maxlen: 24
                          154.210.139.0/24 maxlen: 24
                          154.210.140.0/24 maxlen: 24
                          154.210.141.0/24 maxlen: 24
                          154.210.142.0/24 maxlen: 24
                          154.210.143.0/24 maxlen: 24
                          154.210.144.0/24 maxlen: 24
                          154.210.145.0/24 maxlen: 24
                          154.210.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 08 Oct 2026 12:47:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125346 (0x1e9a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 21 10:24:27 2026 GMT
            Not After : Jan  5 10:24:27 2027 GMT
        Subject: CN=6ab105df-b119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:52:58:ec:a9:a5:91:ba:1a:99:52:c8:a3:23:
                    83:fc:4d:63:98:f6:32:a8:69:6d:bb:be:06:88:58:
                    5d:f5:ab:49:fa:54:a8:7b:d5:15:3f:4c:7d:4c:3a:
                    e5:c4:95:39:15:df:05:06:13:e6:bf:66:1a:ea:84:
                    58:52:99:a5:fb:7a:a4:68:69:5d:0a:07:14:e2:da:
                    a5:f1:4c:25:33:fd:1d:55:62:7c:38:cb:36:d7:1b:
                    db:15:39:08:c5:49:92:c8:dc:d5:56:94:56:81:bd:
                    1a:2a:be:bf:97:a6:80:75:5b:13:9e:37:3e:72:f3:
                    d7:76:ce:7e:d2:20:ee:e6:90:2c:ca:75:18:7f:a0:
                    8f:61:02:2b:80:65:f4:7d:98:76:54:d9:64:e5:52:
                    4e:24:7d:01:8a:79:55:2f:fd:23:65:59:21:0a:44:
                    18:6c:66:9b:3b:95:6b:33:28:03:bf:84:50:89:0e:
                    67:4d:90:1d:51:74:7b:71:40:96:d5:2f:d4:a3:a1:
                    9a:c1:dc:8d:a4:c1:76:f3:94:7f:49:bd:a9:d5:db:
                    05:1e:f0:3c:e7:db:fa:76:39:85:f6:33:c5:3a:ce:
                    3a:16:d7:1c:9a:1d:b4:d5:09:af:c1:26:55:50:26:
                    bb:bf:82:fc:10:58:bb:b1:d0:db:6f:e8:85:01:6e:
                    fc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E9:32:32:57:FF:7D:5F:A6:07:62:ED:F1:51:8C:0D:77:06:44:80
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A189CB78B5A611F19BE2F51ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.137.0-154.210.146.255

    Signature Algorithm: sha256WithRSAEncryption
         5f:64:7f:94:9b:ca:a6:d7:91:d3:1b:45:5f:e2:e2:10:75:4b:
         d4:28:5e:5c:df:db:52:2a:b2:1c:fc:e9:4b:a6:ae:6a:4d:a4:
         76:43:21:c7:ac:43:6a:4f:0b:c7:e8:cb:75:45:d2:0f:a9:cb:
         c9:4b:91:70:a8:7d:ba:cd:31:d5:f2:b3:a1:5d:dd:28:9e:8a:
         bf:d6:ab:6c:5c:77:d6:00:e0:74:e3:7e:1d:65:d1:93:2e:f1:
         bf:0c:2e:be:c8:77:d3:69:a2:f8:e0:28:e6:ea:2b:1e:2c:40:
         50:5a:12:cb:79:7b:58:6e:1b:19:ab:03:f2:93:0c:15:c6:8c:
         2e:30:76:df:39:aa:17:11:2c:0d:d5:64:d0:ce:66:8b:c8:e7:
         78:dc:59:13:f4:cc:7c:d4:51:5e:42:0d:ed:35:8e:9a:75:6d:
         af:98:67:98:2c:69:4a:96:71:67:67:db:1d:57:d1:68:ce:bd:
         91:a1:82:a1:5b:87:10:9a:34:0d:57:6a:51:fb:2e:c0:70:8d:
         32:2b:82:39:18:d0:ea:fc:e0:b2:e6:ff:f5:c4:8e:72:35:9c:
         79:3c:86:1c:c1:87:cf:36:50:17:bb:9d:b4:22:87:34:71:8c:
         a1:ed:3d:aa:9b:06:2d:db:bb:9c:fe:3b:d3:e1:60:89:0d:5d:
         06:9c:c3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----