Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BDE428A96EC11F1A2CAF3FCCE1D38B0.roa
File:                     0BDE428A96EC11F1A2CAF3FCCE1D38B0.roa (raw, json)
Hash identifier:          zbW7/OlhS5eIfF7NFSeZkOpfzXyhbmmerbHMEjv6Xw8=
Subject key identifier:   D6:B4:8D:92:F6:70:44:03:22:88:09:30:AD:0D:F8:72:75:09:9F:F1
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DEDB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BDE428A96EC11F1A2CAF3FCCE1D38B0.roa
Signing time:             Thu 13 Aug 2026 07:53:18 +0000
ROA not before:           Thu 13 Aug 2026 07:53:14 +0000
ROA not after:            Thu 17 Sep 2026 07:53:14 +0000
asID:                     153671
IP address blocks:        154.81.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 11 Sep 2026 18:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122587 (0x1dedb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 13 07:53:14 2026 GMT
            Not After : Sep 17 07:53:14 2026 GMT
        Subject: CN=6a7d77ee-2601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a2:e8:a0:73:a4:25:c1:13:d4:0a:e6:ff:f1:
                    78:26:22:63:f8:f5:1d:3a:2b:29:45:8c:b4:4b:36:
                    5b:bf:4d:4f:80:cf:99:15:17:40:dc:6b:f8:bf:f9:
                    c4:8b:cd:c0:66:d6:ff:26:d0:89:4b:01:3d:e2:19:
                    2a:ae:4d:6a:e5:66:82:9f:8f:d7:1d:10:6e:46:ff:
                    8c:a5:23:8d:36:9b:ec:12:93:2a:80:3f:79:3a:40:
                    28:15:0a:b5:20:ce:70:6a:a0:4f:af:e7:9b:39:be:
                    59:86:86:5c:8d:fa:7b:f4:f2:d7:f9:57:12:7c:98:
                    a5:a2:fc:cf:06:12:56:44:e3:d0:1a:37:69:4b:30:
                    19:9a:7a:46:b6:34:95:b8:ee:4d:81:03:1c:fe:ac:
                    24:7b:8d:e0:ce:c3:b6:3d:dc:f6:1f:42:76:9e:3a:
                    4e:93:43:70:2d:4c:5c:34:d9:ba:b5:2d:ef:de:f4:
                    7a:30:24:a1:1a:f5:bc:a5:98:2d:42:c4:d3:2e:10:
                    62:e0:37:2d:b4:ad:79:31:69:a9:f1:b2:49:a5:f3:
                    e3:70:11:b9:86:ae:75:c3:e0:ad:1a:67:71:79:fb:
                    ef:e8:38:37:72:89:07:80:12:31:53:93:92:ed:4a:
                    87:70:b0:59:b3:2a:f1:81:81:9d:43:57:42:17:be:
                    28:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B4:8D:92:F6:70:44:03:22:88:09:30:AD:0D:F8:72:75:09:9F:F1
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BDE428A96EC11F1A2CAF3FCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:26:d8:2c:85:cb:c2:f1:05:dc:96:ef:d7:6f:10:e9:ca:25:
         ed:a6:cb:18:1c:3e:46:c1:19:a4:a5:7b:f6:3e:00:1d:8c:ed:
         6c:a9:f1:bf:a9:aa:07:e7:35:f6:68:c2:26:06:07:1b:a6:ed:
         ff:bd:30:58:4a:85:25:bc:f8:da:ae:aa:09:23:a5:b8:bf:cc:
         5f:0c:46:40:99:1e:51:f1:03:7f:04:9c:74:4d:19:eb:70:76:
         9b:ba:dc:0f:33:3e:33:25:fa:70:db:d5:ee:1e:e2:12:80:1f:
         12:77:3f:ef:ce:4b:52:1a:d5:97:2b:e8:61:b9:0e:5d:13:39:
         99:c1:4a:ac:cb:d1:4f:12:25:64:93:66:68:60:0b:00:95:4f:
         ea:5a:d9:62:86:36:8a:da:e8:f5:bb:07:e6:f2:62:f5:00:18:
         b7:f1:fb:a2:e6:9e:18:f3:b0:e3:90:e0:97:50:3d:00:a8:cc:
         24:50:e8:fa:e7:bd:e3:de:28:30:71:8e:89:e3:e9:62:1e:f8:
         fe:66:2c:4c:e0:97:d3:ac:ca:92:2d:c4:0a:be:aa:66:a3:02:
         6d:ed:a2:1b:90:56:f0:3f:4e:d6:b4:ef:37:df:b6:15:d2:56:
         34:22:cf:c1:33:ef:51:c2:34:a6:d7:d9:7b:b2:46:e8:93:65:
         f8:2f:d3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----