Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FA5FE20A83611F1A470EDFDCE1D38B0.roa
File:                     0FA5FE20A83611F1A470EDFDCE1D38B0.roa (raw, json)
Hash identifier:          4+kwHPiVk5cVmELsmDfwwVbYJkyjFpiDWrelBXZlVYg=
Subject key identifier:   60:B0:1F:F9:83:B2:8C:1E:48:1E:78:5E:B3:EB:38:9B:18:A1:2B:BC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E552
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FA5FE20A83611F1A470EDFDCE1D38B0.roa
Signing time:             Fri 04 Sep 2026 07:55:57 +0000
ROA not before:           Fri 04 Sep 2026 07:55:53 +0000
ROA not after:            Fri 09 Jul 2027 07:55:53 +0000
asID:                     137263
IP address blocks:        154.86.4.0/24 maxlen: 24
                          154.86.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 10:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124242 (0x1e552)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  4 07:55:53 2026 GMT
            Not After : Jul  9 07:55:53 2027 GMT
        Subject: CN=6a9a798d-5d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ba:04:dc:f5:87:fd:d1:28:b3:f4:ef:ce:61:
                    de:4a:57:3c:fc:9c:e5:29:38:8d:d2:06:9b:83:de:
                    6b:c0:94:2f:90:27:7b:c4:23:e0:72:fc:4f:fb:83:
                    d6:b6:bf:f0:7d:bb:8e:93:f6:d3:94:0d:9a:2a:62:
                    00:44:30:48:41:1c:c8:24:80:50:49:4d:1c:b8:d1:
                    82:b0:75:17:fa:fd:7f:b4:24:03:22:cb:63:55:f4:
                    34:c2:dc:04:bc:6d:8f:7a:53:95:70:3b:ac:a5:44:
                    83:34:65:5b:72:4d:bb:51:f3:2e:d4:c2:ab:f1:2c:
                    58:e4:95:85:e4:b6:16:c9:6e:cf:4f:c8:94:ea:a9:
                    05:bb:2e:58:ef:dd:94:a9:48:45:52:e5:f3:c0:cf:
                    40:2f:ec:ce:a2:af:0e:d0:cc:e1:1f:1e:8a:ce:41:
                    24:4c:a6:4d:fe:31:40:ff:cf:56:2c:e2:b3:ac:e8:
                    6b:d9:ac:37:7b:cd:bb:4b:f0:a2:35:e3:30:6d:22:
                    8a:34:90:52:e2:ae:b9:e0:5e:ce:ff:f8:61:77:b3:
                    31:3d:b6:de:8b:ab:b0:20:b4:8b:11:7f:80:81:bd:
                    91:e3:81:fd:4b:cf:ca:ea:e6:69:72:b4:57:cb:52:
                    34:67:7e:0c:9a:4b:a6:38:9c:c7:20:d7:b3:73:0d:
                    cc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B0:1F:F9:83:B2:8C:1E:48:1E:78:5E:B3:EB:38:9B:18:A1:2B:BC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FA5FE20A83611F1A470EDFDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:16:4c:53:c4:b8:89:1d:9b:14:69:fc:30:30:c3:86:f4:f2:
         ef:92:c0:49:4d:e1:53:2e:4c:fa:f9:97:d5:22:3e:0a:a6:e9:
         de:68:ea:f3:05:d4:d6:d6:3c:d1:5a:6d:95:50:4d:9b:8d:b4:
         33:7e:42:0f:3c:8c:cf:7a:04:e4:10:e1:55:43:b1:fa:ef:13:
         0f:cb:0d:13:82:88:df:51:45:70:e6:69:67:5d:a9:88:a1:db:
         a3:c1:1f:ab:7b:db:88:ce:34:53:e8:52:8e:a4:17:af:a1:70:
         3c:dd:1a:28:fd:3b:29:39:af:c9:a2:04:8c:04:b2:f1:05:8c:
         fc:67:0e:50:e3:7c:71:67:e1:df:f1:11:21:4b:a3:90:af:5d:
         62:46:06:e4:f2:ac:29:40:b3:f9:b8:b4:cd:ac:99:02:39:6b:
         94:a3:bb:c5:19:8a:37:10:fc:2b:65:32:f8:6c:78:19:a4:a2:
         cc:6d:e3:fb:11:4f:e6:c6:cc:be:5b:1d:a4:8a:ab:a0:00:69:
         7f:53:d8:9c:ec:68:d7:cb:8d:5c:16:33:57:b6:03:5a:86:56:
         61:a7:e3:a6:93:e5:b3:23:aa:4d:c6:f1:89:13:0b:eb:a9:29:
         83:a0:47:3c:5b:1e:96:e5:85:41:ad:9a:04:78:bf:84:24:33:
         87:88:46:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----