Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01EDD4BE9D4211F18302F8E9CE1D38B0.roa
File:                     01EDD4BE9D4211F18302F8E9CE1D38B0.roa (raw, json)
Hash identifier:          B5N6ojRj2bkai7bVeBeRhLhyxgPH7faqYT/37UeU6Gg=
Subject key identifier:   82:B9:14:31:81:33:1F:89:FB:C7:69:99:2B:7C:8F:A7:75:FC:E0:71
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E17E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01EDD4BE9D4211F18302F8E9CE1D38B0.roa
Signing time:             Fri 21 Aug 2026 09:23:45 +0000
ROA not before:           Fri 21 Aug 2026 09:23:41 +0000
ROA not after:            Thu 08 Oct 2026 09:23:41 +0000
asID:                     401783
IP address blocks:        154.223.246.0/24 maxlen: 24
                          154.223.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Sep 2026 00:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123262 (0x1e17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 21 09:23:41 2026 GMT
            Not After : Oct  8 09:23:41 2026 GMT
        Subject: CN=6a881921-d186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a6:81:1f:4a:11:55:d0:da:d7:e9:af:f3:2d:
                    f3:5e:5a:42:8e:08:0e:b4:33:fe:47:94:0a:a7:c2:
                    16:80:50:98:98:36:af:df:9e:bd:40:b1:37:82:8b:
                    5a:5a:88:23:fd:50:40:d9:66:36:be:a3:5f:50:57:
                    40:e1:ae:1e:15:58:66:a1:02:95:d8:45:ca:f3:09:
                    19:ab:26:d3:ee:d5:d0:5b:95:cf:98:23:8d:cf:21:
                    f7:6b:84:34:2d:19:a1:0f:e4:0b:c7:bd:8d:9e:8e:
                    53:df:3f:fb:c5:ef:81:65:04:1f:e9:89:32:60:e3:
                    92:19:9a:db:b8:b3:0c:3b:26:fd:96:b1:87:ab:d5:
                    83:24:83:5c:88:d0:76:87:bc:3e:5d:a3:96:31:54:
                    1d:4b:24:1a:44:25:a4:54:8c:ce:ed:38:f6:2a:7a:
                    2c:59:11:74:61:26:c9:32:8b:fc:41:9c:5a:ce:f1:
                    49:cc:b8:46:2e:91:e8:06:4a:a7:da:f8:7c:4e:62:
                    fd:c5:4e:36:f9:5f:aa:1e:5c:10:7a:af:8e:d6:8e:
                    ca:2e:e2:62:aa:82:9d:02:bc:01:b6:62:6a:a4:eb:
                    59:35:3c:c7:7f:19:95:e0:34:df:98:00:82:e8:86:
                    25:d3:04:b7:f2:6a:c6:c1:de:b7:99:85:6b:3e:15:
                    e1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B9:14:31:81:33:1F:89:FB:C7:69:99:2B:7C:8F:A7:75:FC:E0:71
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01EDD4BE9D4211F18302F8E9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.223.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:fd:4f:c4:af:25:4e:02:cf:de:54:8c:e7:1e:81:cc:ba:13:
         ae:4d:79:11:9c:60:95:66:24:1c:25:27:1b:4e:76:f8:07:d9:
         89:35:3f:10:7f:e7:30:bf:9d:e0:1a:62:58:2c:4e:ca:7d:3a:
         5b:c2:83:6f:f9:a5:c2:e2:f7:77:6a:24:64:92:11:d9:2d:43:
         d8:21:b8:63:69:d8:27:31:fd:b6:a0:88:44:73:61:08:c0:a7:
         ee:94:6a:9a:4f:4d:75:75:e1:c6:40:b7:14:cb:01:f6:19:60:
         25:a1:72:91:8b:9f:2b:34:e4:ff:bb:ca:d9:2f:8b:2c:62:9c:
         bd:df:9f:a0:02:7b:81:28:2c:41:bc:aa:d9:3c:a6:57:da:8f:
         76:74:1c:78:ef:22:01:be:aa:d6:88:7c:d4:40:db:03:46:4a:
         31:bb:f9:6d:a4:d1:21:22:4c:48:62:7b:05:82:16:73:87:3b:
         8a:8d:3f:28:9d:4c:fa:46:18:9d:83:90:14:90:56:44:2b:5b:
         cf:42:cd:8b:a0:05:b3:e4:fe:86:e6:bd:c2:19:55:ed:e2:d6:
         57:71:29:3c:70:b6:92:af:c9:a8:98:19:2b:09:8a:0f:ce:06:
         97:91:0b:f8:2b:03:9b:af:ab:bd:79:9e:bb:a3:1b:a0:cf:d6:
         44:8a:6c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----