Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28B9328EBC9E11F1ADF90211CF1D38B0.roa
File:                     28B9328EBC9E11F1ADF90211CF1D38B0.roa (raw, json)
Hash identifier:          WKB9CEJHkq9x7xG8PrsA6i2yBuhzWQbDMGUYxtNyssM=
Subject key identifier:   38:6D:5A:10:D2:02:16:1E:1C:7A:BD:0E:84:9F:C7:CF:EC:E3:9C:07
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EB80
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28B9328EBC9E11F1ADF90211CF1D38B0.roa
Signing time:             Wed 30 Sep 2026 07:11:30 +0000
ROA not before:           Wed 30 Sep 2026 07:11:26 +0000
ROA not after:            Fri 06 Nov 2026 07:11:26 +0000
asID:                     44559
IP address blocks:        154.209.198.0/24 maxlen: 24
                          154.209.199.0/24 maxlen: 24
                          154.209.200.0/24 maxlen: 24
                          154.209.201.0/24 maxlen: 24
                          154.209.206.0/24 maxlen: 24
                          154.219.23.0/24 maxlen: 24
                          154.219.25.0/24 maxlen: 24
                          154.219.30.0/24 maxlen: 24
                          154.219.31.0/24 maxlen: 24
                          154.219.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125824 (0x1eb80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 30 07:11:26 2026 GMT
            Not After : Nov  6 07:11:26 2026 GMT
        Subject: CN=6abcb622-3b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:19:4c:49:4b:40:9d:23:3d:24:59:d6:65:eb:
                    1d:55:b3:18:83:62:8d:5e:c0:96:c0:f9:77:e5:37:
                    fd:09:51:c0:ac:dc:17:de:f6:1a:be:06:80:fd:5e:
                    c1:2c:d2:ce:01:6b:de:52:9d:2a:f2:58:e4:83:22:
                    19:8a:1d:a6:76:02:0b:b8:b4:1f:17:11:cd:16:8e:
                    78:cb:d5:77:4c:cd:4a:68:e2:5c:c0:c3:ea:bd:bd:
                    17:7e:cd:8f:90:5f:63:f1:86:71:8e:f9:49:f8:48:
                    c3:0c:7e:06:76:99:ed:0f:d8:ea:fd:b6:4b:32:80:
                    3a:6d:b7:48:09:72:ab:75:d9:44:11:63:eb:18:11:
                    92:5d:4f:04:bc:98:d4:dd:dd:40:02:f2:e7:60:71:
                    75:91:62:f7:f9:13:4f:c0:a1:42:02:38:ba:ec:63:
                    3f:4a:7d:88:6c:cb:c0:33:b0:52:5b:8b:00:fa:4e:
                    f2:d1:0e:e4:42:2a:51:dc:64:7d:79:fd:df:a1:04:
                    58:4c:5a:a1:0d:e2:18:0e:08:34:62:b2:07:17:40:
                    06:19:7d:77:b4:73:84:24:d1:ec:b2:63:70:89:30:
                    3d:3a:38:8f:f8:80:54:fc:5a:27:b2:91:4a:a1:3c:
                    f6:d7:19:23:91:61:53:04:d8:0b:c3:0c:21:e5:85:
                    34:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6D:5A:10:D2:02:16:1E:1C:7A:BD:0E:84:9F:C7:CF:EC:E3:9C:07
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28B9328EBC9E11F1ADF90211CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.209.198.0-154.209.201.255
                  154.209.206.0/24
                  154.219.23.0/24
                  154.219.25.0/24
                  154.219.30.0/23
                  154.219.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:3e:85:4e:31:fb:52:30:9e:06:46:2f:42:14:fa:89:51:16:
         92:ee:4f:8c:b3:0f:96:07:d0:30:0f:7e:75:a6:8d:72:ce:70:
         dd:f0:31:56:11:4b:48:78:c1:72:df:fc:82:dd:4e:50:35:93:
         5f:be:38:ff:78:a6:e8:f1:4c:b1:01:68:f4:c1:02:5a:f9:86:
         f2:da:4c:b2:bb:24:41:a2:a5:f0:aa:68:8b:43:fc:a1:b6:2a:
         31:d7:c6:52:80:0e:77:94:e9:98:e5:45:63:8b:c1:6c:24:69:
         88:a8:f1:71:4a:f5:d2:1d:ef:c2:34:73:a5:87:eb:64:d7:ea:
         d1:46:bb:df:4d:19:1b:20:cf:8c:c1:31:9f:5c:37:51:5c:93:
         ef:a2:cc:d5:5a:03:7b:35:7f:ab:c8:e9:92:19:3d:de:a7:88:
         cb:23:65:fd:be:eb:40:93:da:3c:df:c2:39:2a:ea:74:41:0f:
         c4:87:e0:0f:d6:9f:2a:12:d0:42:ea:a5:b0:78:94:71:d7:44:
         f6:44:24:40:4f:af:bc:ca:6b:f4:83:df:29:4b:1d:0d:cc:e7:
         ff:94:8a:ba:31:76:41:1d:27:4c:07:70:0a:48:b6:5d:aa:2f:
         7e:1d:c0:18:83:ec:74:f5:9a:01:74:26:75:22:03:ef:f7:ff:
         a3:84:5b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----