Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09D915AEAC7311F1A62B481BCF1D38B0.roa
File:                     09D915AEAC7311F1A62B481BCF1D38B0.roa (raw, json)
Hash identifier:          iSCI2LQQNCvI7dOCUpv9O0Vyp2ZZ8SPoCsbniwUmboc=
Subject key identifier:   81:6B:A8:64:ED:AC:12:A5:0C:35:94:27:82:43:4F:AE:02:67:23:EA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E6BA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09D915AEAC7311F1A62B481BCF1D38B0.roa
Signing time:             Wed 09 Sep 2026 17:22:31 +0000
ROA not before:           Wed 09 Sep 2026 17:22:27 +0000
ROA not after:            Mon 30 Nov 2026 17:22:27 +0000
asID:                     399077
IP address blocks:        154.211.104.0/24 maxlen: 24
                          154.211.105.0/24 maxlen: 24
                          154.211.106.0/24 maxlen: 24
                          154.211.107.0/24 maxlen: 24
                          154.211.108.0/24 maxlen: 24
                          154.211.109.0/24 maxlen: 24
                          154.211.110.0/24 maxlen: 24
                          154.211.111.0/24 maxlen: 24
                          154.211.112.0/24 maxlen: 24
                          154.211.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 07:35:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124602 (0x1e6ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  9 17:22:27 2026 GMT
            Not After : Nov 30 17:22:27 2026 GMT
        Subject: CN=6aa195d7-1acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2b:72:86:94:6d:12:47:14:d6:f2:85:76:10:
                    c6:52:90:72:26:2a:35:45:81:55:82:59:41:f0:0e:
                    71:92:68:08:b8:46:89:65:1d:cb:15:d1:9b:ae:9a:
                    31:22:0d:23:42:0e:d4:01:b3:bf:ba:08:e5:4f:0f:
                    48:03:a2:bd:78:95:96:93:6c:c0:ee:82:4f:0f:cc:
                    6f:27:c0:7f:8e:da:1d:df:bf:26:12:bb:78:58:4d:
                    30:8a:ae:da:b4:7b:f7:50:2c:2b:82:24:28:55:ea:
                    1e:e6:59:0d:49:32:cd:b0:2b:ab:fb:12:3f:83:cf:
                    bd:79:7e:0b:04:52:23:39:56:41:88:eb:0a:4e:69:
                    11:fb:f5:f4:2f:80:aa:7f:25:ff:67:cc:c0:5d:35:
                    42:c4:87:f9:21:82:48:9a:02:fe:e0:8f:bf:2e:73:
                    a8:56:bd:4d:eb:dc:2f:5c:2e:e2:96:7a:ac:12:03:
                    39:a6:ec:43:0a:4e:82:d3:04:cb:89:39:6d:82:af:
                    67:b9:31:de:26:32:0c:22:8b:ea:f7:ac:37:92:19:
                    f2:9a:41:95:99:6b:76:1f:83:31:ec:40:13:cc:27:
                    71:72:1d:e6:2d:d4:dc:06:5b:13:c3:2b:d8:51:a6:
                    4e:1d:0e:8c:45:7b:aa:84:75:7a:95:f3:8a:0a:01:
                    9a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:6B:A8:64:ED:AC:12:A5:0C:35:94:27:82:43:4F:AE:02:67:23:EA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09D915AEAC7311F1A62B481BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.211.104.0-154.211.113.255

    Signature Algorithm: sha256WithRSAEncryption
         65:5c:88:44:57:20:69:a2:60:91:04:7e:dc:10:2e:05:11:28:
         bd:7b:3e:5a:d9:33:c8:af:66:6f:47:5c:90:ee:90:e9:06:49:
         10:f6:cb:fe:0b:0e:8c:5f:19:9a:bb:4d:c4:8c:6e:65:bf:2d:
         42:d2:5a:6b:7d:c0:e4:7e:bd:22:38:cc:f5:3f:0a:ad:5d:47:
         02:ff:20:01:f3:fd:7c:d2:fe:7b:b9:a8:cf:de:91:52:4a:cb:
         70:61:79:90:b2:4c:51:f9:77:1b:c7:75:ec:2f:a3:c6:f5:f7:
         e6:df:11:e0:48:7d:39:1e:f9:c5:82:dc:8f:59:e8:c4:c2:b9:
         9e:da:d5:b2:28:e7:37:23:3c:5a:d4:e3:6d:a6:aa:fc:24:ad:
         66:1d:04:0c:63:3b:6e:93:56:4a:c5:1a:71:0b:ff:94:16:61:
         60:bc:57:9c:e4:0c:53:4c:b4:19:8d:50:93:ff:d1:c5:51:ba:
         d6:63:9e:1d:eb:c3:c6:67:aa:c1:8f:a6:74:9b:92:b6:ec:6b:
         cb:c8:5d:e0:de:18:7c:3e:9f:b8:f2:56:d0:e5:30:89:64:39:
         7e:3b:7b:ad:1a:15:c3:b8:ca:ad:17:25:24:75:d6:bf:b8:03:
         84:42:ce:f3:8f:58:cf:ff:8d:26:eb:14:36:aa:b0:2d:15:74:
         0f:4f:21:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----