Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A31856E9D4311F1BDE5F8F1CE1D38B0.roa
File:                     2A31856E9D4311F1BDE5F8F1CE1D38B0.roa (raw, json)
Hash identifier:          wfAIm2lQ8KAqwjFZE3xSx1VBKzdDLDhEr4rv5/Xnxpw=
Subject key identifier:   5E:E3:04:20:A5:2B:55:7E:30:2A:67:13:F8:3B:5F:0E:48:40:D6:23
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E182
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A31856E9D4311F1BDE5F8F1CE1D38B0.roa
Signing time:             Fri 21 Aug 2026 09:32:02 +0000
ROA not before:           Fri 21 Aug 2026 09:31:58 +0000
ROA not after:            Sat 28 Nov 2026 09:31:58 +0000
asID:                     401701
IP address blocks:        154.219.96.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123266 (0x1e182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 21 09:31:58 2026 GMT
            Not After : Nov 28 09:31:58 2026 GMT
        Subject: CN=6a881b12-8b73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:14:11:e4:61:21:58:72:37:31:11:f7:44:64:
                    a6:a0:8c:09:f2:da:2a:02:3c:c8:1f:e1:71:54:ae:
                    77:65:f5:e9:a9:98:4f:22:0e:8b:e6:d6:ad:1d:8b:
                    8e:a4:57:f0:ff:fb:d6:24:f7:f9:3d:6f:a2:0c:fd:
                    38:2b:28:fe:86:22:64:4a:ce:4b:dd:2a:fd:a1:50:
                    f8:73:8a:48:11:cb:9b:51:81:fd:18:9f:49:92:55:
                    92:9a:97:fb:2f:3a:9c:4d:98:db:23:af:c6:5a:c8:
                    c7:a9:a9:99:38:7d:76:86:8e:8f:9e:a5:26:02:30:
                    f6:d5:7c:3d:ad:9e:70:30:66:9e:cf:10:c4:a1:bb:
                    b6:25:8c:76:db:f2:c3:58:1c:dc:7c:f3:32:45:ac:
                    5c:ab:a1:8b:76:c7:8c:c9:46:33:2d:13:1d:9b:13:
                    49:40:9c:b6:96:1e:ee:13:c6:da:af:d8:cd:af:dc:
                    ce:c3:fd:8d:26:55:61:73:2f:23:35:68:16:e0:7f:
                    e3:e2:13:ff:7b:84:97:39:d9:1c:0b:cb:7d:58:dc:
                    b8:54:46:c5:d3:ec:38:4b:c4:bc:25:f2:8c:a2:0b:
                    56:19:c1:4b:ee:08:d2:0c:ba:21:b3:7b:5a:fc:5d:
                    ae:4e:dc:b0:11:7f:72:bd:6f:43:c4:d1:21:5b:75:
                    4c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E3:04:20:A5:2B:55:7E:30:2A:67:13:F8:3B:5F:0E:48:40:D6:23
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A31856E9D4311F1BDE5F8F1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.219.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c5:5f:3e:d7:04:ec:97:8f:6c:6e:a2:9a:19:58:a0:03:68:73:
         0e:d9:88:57:ba:df:b7:da:6b:33:2b:c1:03:61:99:28:c1:2e:
         70:80:5a:0c:02:2b:ea:9f:13:5a:2f:96:11:af:b1:10:67:a3:
         4c:70:49:60:e0:28:5a:6c:f9:f0:53:40:ae:34:cc:97:a4:10:
         f1:31:87:78:bb:4a:d3:54:20:c0:e0:78:5e:37:d2:1e:ea:63:
         de:dc:28:9f:e7:7b:c5:96:a4:9b:65:76:e6:2f:2c:8e:45:28:
         b3:25:be:61:af:ff:87:8d:99:6f:fd:bf:79:ed:a7:01:e4:aa:
         d2:ae:86:0a:da:44:b9:60:82:f9:ee:54:ed:59:48:de:72:0f:
         a2:db:b5:ce:15:51:7a:7f:aa:a4:85:d0:88:d8:9b:2d:0e:6c:
         23:25:8b:91:47:1d:5d:1d:2c:12:26:6d:49:ec:68:ec:97:c6:
         67:9a:11:c3:a9:05:90:eb:bf:ac:26:75:a0:79:08:e2:12:6e:
         73:ea:38:42:5d:ff:61:aa:2d:fe:df:ad:38:d7:36:75:d1:47:
         ef:e0:06:4b:21:6d:43:0d:ff:65:f6:b1:37:04:05:8c:52:e7:
         b6:54:25:85:6b:1f:c6:2c:8b:9a:72:bb:fe:3a:2b:67:c8:22:
         68:4f:58:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----