Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CBBF3DA9FA211F18A881809CF1D38B0.roa
File:                     2CBBF3DA9FA211F18A881809CF1D38B0.roa (raw, json)
Hash identifier:          lIHztWOJBJsYU1Bo8zWDNS9QLvms1zzUs7zZ5vKxHrE=
Subject key identifier:   8A:0A:66:86:72:1C:FF:3E:F4:8C:AC:3E:C4:88:90:3B:A1:1B:E8:65
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E23D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CBBF3DA9FA211F18A881809CF1D38B0.roa
Signing time:             Mon 24 Aug 2026 09:57:11 +0000
ROA not before:           Mon 24 Aug 2026 09:57:07 +0000
ROA not after:            Wed 30 Sep 2026 09:57:07 +0000
asID:                     401701
IP address blocks:        154.201.64.0/19 maxlen: 24
                          154.201.94.0/23 maxlen: 24
                          154.201.94.0/24 maxlen: 24
                          154.201.95.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123453 (0x1e23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 24 09:57:07 2026 GMT
            Not After : Sep 30 09:57:07 2026 GMT
        Subject: CN=6a8c1577-e870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:64:dd:0d:3e:34:e9:29:65:94:83:23:b5:1c:
                    a1:f3:4f:c8:0f:68:e7:4f:8f:5a:9a:ab:c9:5e:b4:
                    3d:7e:26:f2:07:08:f4:37:cc:d3:16:c8:48:b0:e0:
                    26:c5:3d:ef:9e:b6:40:35:1e:e5:21:f5:5c:36:5a:
                    79:99:b1:db:9e:1b:73:b7:e1:4e:83:2f:8f:3c:2c:
                    8a:84:de:79:1d:40:62:db:42:36:41:11:d0:b7:45:
                    2f:e7:20:73:fa:70:23:83:d4:a4:7e:d7:68:db:ca:
                    27:c1:66:25:88:1b:9d:1c:b4:87:c3:d0:d2:47:83:
                    99:b3:7e:27:24:a2:fe:52:95:6b:84:82:ad:f1:60:
                    fe:12:6a:6e:28:18:8f:17:83:2c:9f:fd:2e:66:4e:
                    16:4b:32:5e:42:8e:23:3c:e2:2c:06:af:00:6b:48:
                    d2:a1:46:46:77:6b:f7:4f:24:63:da:20:a8:32:2b:
                    58:01:ac:d6:d0:fc:74:18:49:e5:2d:86:7f:64:d0:
                    f6:0a:84:68:db:52:ef:93:0f:a3:fb:2c:d9:6e:33:
                    2f:7f:c4:70:5e:7a:0e:2a:41:c2:57:fc:4e:29:03:
                    53:c6:5c:48:31:ed:9d:d0:a5:fb:1c:5c:41:a8:f7:
                    4e:c6:b3:e5:33:e3:3e:12:74:32:83:61:6c:82:ff:
                    ef:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:0A:66:86:72:1C:FF:3E:F4:8C:AC:3E:C4:88:90:3B:A1:1B:E8:65
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CBBF3DA9FA211F18A881809CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         75:0b:1e:29:5c:e5:a4:3a:ae:dd:5e:82:a9:a9:02:26:a8:6c:
         16:51:7c:ab:0b:97:3d:43:72:95:d4:41:7a:df:5d:56:c8:f9:
         c2:0a:ab:bc:9a:5a:8a:e9:f5:50:e0:7a:86:07:c6:b1:98:14:
         19:87:94:c4:b6:51:1c:bf:d4:f4:20:02:26:68:93:a1:73:ae:
         55:1a:75:9c:bc:32:43:de:d5:e8:cb:c3:f9:42:fe:fc:f5:5c:
         6f:8b:1b:e2:ed:41:5b:0e:25:da:d7:55:0b:03:dc:13:85:54:
         e1:04:d9:36:10:e2:77:7f:75:76:cc:04:99:8d:67:ef:08:f0:
         23:33:0a:23:1b:32:8d:60:f3:b8:8b:67:bb:45:2d:ea:6e:e7:
         ba:f2:19:c1:6c:ef:1c:70:56:2e:cc:19:98:2e:3c:69:19:6e:
         e4:d5:be:ae:82:83:c8:30:a5:fa:32:21:a4:f8:4d:82:f8:47:
         06:4f:20:1b:0a:34:96:44:22:79:0e:f2:5e:e7:26:bf:10:08:
         8d:f4:be:17:2f:50:a8:e0:b9:28:34:60:e0:f1:51:f2:e6:d9:
         44:a7:2c:c2:7d:0a:a9:8e:cf:b7:cb:2c:09:2e:fe:bb:5f:10:
         46:67:3e:44:43:af:64:4f:2f:28:52:42:45:0e:02:ea:61:1b:
         19:87:0f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----