Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08A04214989311F19FEF7A03CF1D38B0.roa
File:                     08A04214989311F19FEF7A03CF1D38B0.roa (raw, json)
Hash identifier:          Cs20ddQJDDCE6ItEEbDXg3b+mMVkbcJq3Z/ZPbgdvkg=
Subject key identifier:   BA:79:A6:C9:4D:B4:80:68:6F:9F:2A:B5:10:04:C0:26:CD:20:B6:E5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DF37
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08A04214989311F19FEF7A03CF1D38B0.roa
Signing time:             Sat 15 Aug 2026 10:21:10 +0000
ROA not before:           Sat 15 Aug 2026 10:21:06 +0000
ROA not after:            Tue 22 Sep 2026 10:21:06 +0000
asID:                     17561
IP address blocks:        154.85.28.0/22 maxlen: 24
                          154.86.192.0/18 maxlen: 24
                          154.91.224.0/19 maxlen: 24
                          154.93.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122679 (0x1df37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 15 10:21:06 2026 GMT
            Not After : Sep 22 10:21:06 2026 GMT
        Subject: CN=6a803d96-26f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c8:db:b6:51:de:71:46:52:47:22:af:2b:d2:
                    77:ea:ca:f0:85:7d:c8:f4:92:0e:3f:36:cf:6e:02:
                    85:ad:37:a0:9d:3a:47:99:c6:0c:b3:e9:55:ff:8e:
                    b1:70:5b:14:ae:6f:04:ff:99:0d:49:4b:ef:f6:fc:
                    d5:cb:16:c3:5f:5d:d0:f8:26:94:74:e0:63:b7:6f:
                    44:80:65:8b:de:f8:00:81:76:f2:97:03:28:4d:e7:
                    83:2e:8e:14:d5:f4:c1:8c:b0:30:31:cd:ee:1a:d1:
                    cc:87:9a:ba:a5:0f:48:82:06:98:0a:e9:4e:8f:fc:
                    f7:96:61:81:97:fa:36:73:9b:4c:a1:67:c8:61:1c:
                    11:a7:32:6f:a0:a0:8a:49:7f:90:04:fa:d9:ec:68:
                    8b:ce:e0:1e:cb:64:d5:c3:39:aa:16:e5:5c:03:16:
                    b1:74:73:4a:4f:ca:75:e5:a1:aa:81:75:14:fd:5a:
                    46:7a:e1:38:3b:da:ea:44:13:e8:50:7a:23:40:d1:
                    fe:d9:c5:4b:77:19:84:00:8b:67:01:a4:f2:2d:30:
                    8f:bf:03:e7:04:2a:93:1b:5e:dd:30:6e:63:50:71:
                    8e:54:5d:eb:2f:01:3c:b0:e1:ec:1a:b8:e5:85:57:
                    6b:61:aa:6f:35:47:96:41:79:78:fc:ac:ba:bf:16:
                    4d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:79:A6:C9:4D:B4:80:68:6F:9F:2A:B5:10:04:C0:26:CD:20:B6:E5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08A04214989311F19FEF7A03CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.85.28.0/22
                  154.86.192.0/18
                  154.91.224.0/19
                  154.93.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         94:0f:1c:ad:6b:36:ca:02:b3:30:31:5c:24:6c:d6:8d:da:74:
         25:cf:e6:c7:85:c5:4d:9d:c3:40:e5:dc:86:c4:80:e5:9b:a9:
         81:1e:33:32:5a:51:fa:86:0f:85:89:0e:d8:a0:b0:d9:95:13:
         a2:d5:d9:96:31:29:c4:54:61:67:0c:5a:a5:50:d4:a5:68:a3:
         d4:42:b4:e3:ea:bf:07:8f:26:e2:93:e1:62:48:88:f0:be:41:
         bb:e4:44:69:d6:08:cc:10:6f:18:f3:6d:4a:a1:bb:5b:0f:78:
         e0:5e:3a:6e:4b:3b:67:b7:6b:26:f2:2a:0d:b7:88:e0:6e:4f:
         7d:af:47:99:e4:cd:f9:e6:85:42:75:5d:66:fa:c8:e6:1f:ca:
         a4:d7:1e:37:48:43:00:65:55:dc:5c:60:0c:58:16:e7:f5:28:
         9d:14:a1:6d:83:50:e1:89:c1:70:b1:2c:15:0a:71:e9:2c:81:
         f7:6a:39:17:ba:43:6f:a9:82:f6:84:8d:40:26:bc:6e:02:3c:
         11:76:45:c7:27:41:46:d6:57:ec:ef:e1:e4:92:24:9e:8d:26:
         b1:de:30:c0:0e:34:71:07:f0:fe:c4:b7:8e:14:44:d2:9f:80:
         54:d4:6d:67:26:2b:af:b7:11:45:66:90:1f:17:dc:0f:2c:40:
         b7:20:82:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----