Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F8338EAA46511F19A32CFE5CE1D38B0.roa
File:                     2F8338EAA46511F19A32CFE5CE1D38B0.roa (raw, json)
Hash identifier:          KS8dJeGq7A6qZnzeEVNzzUHleT7IXzz1YUo1E4rXz0s=
Subject key identifier:   AD:F7:E4:9E:08:19:1E:09:C2:2D:D8:44:60:96:DC:B5:3C:BB:AA:21
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E436
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F8338EAA46511F19A32CFE5CE1D38B0.roa
Signing time:             Sun 30 Aug 2026 11:23:12 +0000
ROA not before:           Sun 30 Aug 2026 11:23:08 +0000
ROA not after:            Tue 06 Oct 2026 11:23:08 +0000
asID:                     401362
IP address blocks:        154.91.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123958 (0x1e436)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 30 11:23:08 2026 GMT
            Not After : Oct  6 11:23:08 2026 GMT
        Subject: CN=6a9412a0-9901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b8:f5:17:22:68:e3:8f:c9:e8:ce:73:87:a7:
                    4a:a7:45:df:4e:fc:12:95:b1:b1:32:3d:76:cf:f4:
                    59:e0:75:62:45:b9:4f:9e:7c:25:94:8f:ed:d6:e9:
                    5f:e1:b1:1e:3d:c6:6f:10:0b:65:91:42:2a:77:54:
                    8c:4f:a2:38:b3:95:94:62:ab:11:8e:de:7f:52:f6:
                    fb:37:5a:5a:8f:a6:41:41:8a:be:cd:0d:7d:19:f7:
                    66:a2:6a:f1:08:07:65:29:08:20:0a:d3:3a:a0:03:
                    4c:52:5e:27:7d:2d:d2:5c:46:7d:0e:b4:10:95:93:
                    ad:de:32:c1:70:4c:09:fe:6c:5a:79:a8:a7:23:e9:
                    cc:5a:9a:44:c7:55:3a:1c:d2:f7:91:f8:4d:75:0b:
                    cf:26:f8:5e:1f:d4:57:ec:e7:4b:f7:e3:9d:67:8c:
                    fd:fb:3a:ca:bc:ff:05:18:2f:8a:6b:61:e8:3c:45:
                    17:4c:65:d6:68:0f:a4:c1:4c:ed:e7:bd:d7:f3:35:
                    69:70:08:4c:f8:76:ea:d1:38:d8:95:fb:a4:a4:30:
                    54:60:d5:80:20:8f:d7:45:e7:3d:af:62:92:ef:49:
                    75:9a:ff:58:0f:f5:5f:57:ea:0a:86:c0:ef:f9:fa:
                    0a:38:66:82:31:f8:f9:83:ec:c9:87:25:b5:92:91:
                    9b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F7:E4:9E:08:19:1E:09:C2:2D:D8:44:60:96:DC:B5:3C:BB:AA:21
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F8338EAA46511F19A32CFE5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.91.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:51:29:e2:e4:80:d2:41:13:a9:76:d1:04:1d:fe:28:d2:66:
         6a:8d:0a:74:8d:92:25:95:cd:cc:43:48:2d:80:69:a4:dc:5a:
         b0:37:1d:ed:26:8c:f3:48:cf:98:99:ab:1b:ca:71:91:d7:b9:
         2a:a1:30:42:34:1c:b1:3c:fc:c3:19:34:a3:92:a0:e1:16:61:
         b0:66:81:e1:64:5e:50:a2:85:f6:2c:b0:3f:3a:7a:f5:aa:15:
         f8:f5:83:c4:0f:22:b6:6a:f7:cd:4a:1f:d2:27:8d:18:77:36:
         6f:b4:57:40:95:f6:bb:67:14:d8:3c:cf:43:95:72:21:29:f7:
         85:46:76:b6:61:db:dc:72:c2:81:8b:f1:39:1a:5d:72:1a:77:
         b8:17:68:5e:91:75:48:7e:3f:aa:36:e4:cd:55:88:be:f4:d1:
         97:20:d6:8a:78:74:6c:b2:38:e1:e6:97:b0:b1:fc:17:7c:ab:
         28:c4:87:22:6e:2b:37:fe:86:b3:86:80:53:0b:c4:0e:43:7f:
         37:ae:b6:c0:48:cd:2e:dd:8d:65:01:47:8d:bc:62:54:63:f6:
         f3:b2:f0:09:bb:f2:90:d4:ce:ea:cf:2b:2c:6a:06:86:5a:3c:
         da:af:82:c4:ee:74:96:4e:0d:15:56:b2:dd:2c:4b:25:db:d0:
         bd:1d:9b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----