Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCFB9854AA6B11F1BB36C7D2CE1D38B0.roa
File:                     CCFB9854AA6B11F1BB36C7D2CE1D38B0.roa (raw, json)
Hash identifier:          VCmxiKqQaH+NSQ4ts6+GE93ZHsX6EoJUV0nEWHBNFMg=
Subject key identifier:   C5:9F:BA:E8:A4:26:2C:24:3B:39:35:8E:37:46:F2:EE:44:80:99:F1
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E60E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCFB9854AA6B11F1BB36C7D2CE1D38B0.roa
Signing time:             Mon 07 Sep 2026 03:25:40 +0000
ROA not before:           Mon 07 Sep 2026 03:25:37 +0000
ROA not after:            Tue 06 Oct 2026 03:25:37 +0000
asID:                     152698
IP address blocks:        154.203.200.0/24 maxlen: 24
                          154.203.201.0/24 maxlen: 24
                          154.203.202.0/24 maxlen: 24
                          154.203.203.0/24 maxlen: 24
                          154.204.32.0/24 maxlen: 24
                          154.204.33.0/24 maxlen: 24
                          154.204.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124430 (0x1e60e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  7 03:25:37 2026 GMT
            Not After : Oct  6 03:25:37 2026 GMT
        Subject: CN=6a9e2eb4-0dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a7:98:15:b4:26:d5:96:b9:83:9c:45:41:e2:
                    31:84:14:48:31:fd:6d:81:b5:4d:6b:e0:7b:0b:55:
                    2b:0d:8a:6b:17:cc:16:09:df:35:43:e6:6f:84:a9:
                    5e:c2:4b:e3:91:cb:8c:f5:9e:c4:7a:ba:d8:7c:92:
                    fe:b9:4e:7c:d5:41:d2:7d:c1:19:2c:37:d7:dd:93:
                    2f:ca:8d:dd:d2:83:9f:47:c9:9b:90:e5:0d:6d:fd:
                    87:72:36:ac:c1:c6:50:32:fa:88:64:bf:3f:8b:50:
                    db:19:03:a0:15:dd:14:3f:63:2c:c4:af:42:90:3e:
                    f0:b0:54:6c:ab:6f:aa:70:57:99:92:6b:26:fb:2c:
                    22:37:89:27:44:bc:20:52:f0:23:ff:9d:bf:a0:95:
                    2f:09:93:c7:44:e4:0b:da:d7:c1:7d:f9:14:a0:0b:
                    d4:5b:16:61:37:f0:f1:5e:e4:3b:bf:33:e4:91:77:
                    40:84:c9:b4:c9:34:0a:70:9b:84:09:a0:54:10:9f:
                    79:58:05:32:bc:e5:ae:2e:7c:85:85:50:7f:3f:46:
                    14:6c:a5:03:ce:2d:52:34:cd:1c:ba:b1:f6:c9:50:
                    ba:5b:08:80:7a:a9:ca:d2:03:3b:b3:41:c8:00:b2:
                    17:24:4d:fc:01:85:0f:07:31:b7:b7:46:7a:ed:73:
                    93:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9F:BA:E8:A4:26:2C:24:3B:39:35:8E:37:46:F2:EE:44:80:99:F1
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCFB9854AA6B11F1BB36C7D2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.200.0/22
                  154.204.32.0-154.204.34.255

    Signature Algorithm: sha256WithRSAEncryption
         6a:3a:04:64:e4:87:7d:e9:8d:16:28:a6:aa:00:1f:8c:7f:8d:
         19:8c:d7:e5:08:68:71:b1:f5:e6:0f:1b:ce:3d:9b:dd:7d:c7:
         d8:2c:85:42:83:2d:4a:c6:23:84:4c:0d:85:70:39:f9:dd:cf:
         b7:1b:83:a6:f2:9e:61:fe:be:44:fb:b2:cf:da:20:2a:a5:f5:
         c1:96:38:87:14:21:3d:58:50:9e:7d:9d:e7:57:bb:32:12:a2:
         36:6d:64:a6:71:fb:90:6e:68:1b:b3:51:97:30:e3:15:06:9f:
         9d:76:e5:1c:69:6e:6c:5b:01:4a:71:ca:0c:0d:97:aa:89:16:
         53:ed:2c:7f:30:59:45:be:94:bd:95:a9:21:93:90:71:d7:01:
         a9:f1:25:32:ef:0c:61:1b:74:98:34:b1:d3:12:53:5f:c9:c3:
         68:88:ef:91:1c:5f:27:94:76:32:6e:40:82:2d:d0:4e:e3:f5:
         01:c1:33:06:5c:5d:79:87:9a:8a:c6:29:85:76:de:0c:0d:20:
         21:1a:e2:3f:8f:f6:58:11:e1:33:a2:99:5c:87:14:a8:53:27:
         c0:c9:83:7c:6b:cd:52:b8:53:84:e4:f1:5a:e6:67:8a:16:21:
         d9:6f:0e:34:37:1d:a2:4f:41:0b:1a:8e:6d:b5:b1:45:26:89:
         80:33:38:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----