Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3014E1FA96FA11F1ADAAAAD4CE1D38B0.roa
File:                     3014E1FA96FA11F1ADAAAAD4CE1D38B0.roa (raw, json)
Hash identifier:          sX89Ao1MRooSYlKFj9D3ntGyLNTQb92liiOwcVt+tgA=
Subject key identifier:   16:71:CA:55:BB:9D:0C:E0:DE:7A:E9:F1:BE:12:B3:63:FE:D7:DE:B6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DEEF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3014E1FA96FA11F1ADAAAAD4CE1D38B0.roa
Signing time:             Thu 13 Aug 2026 09:34:32 +0000
ROA not before:           Thu 13 Aug 2026 09:34:28 +0000
ROA not after:            Mon 21 Sep 2026 09:34:28 +0000
asID:                     63099
IP address blocks:        154.222.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122607 (0x1deef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 13 09:34:28 2026 GMT
            Not After : Sep 21 09:34:28 2026 GMT
        Subject: CN=6a7d8fa8-33c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c1:a3:52:30:56:60:ef:7d:8c:be:76:f6:d5:
                    b0:ee:54:80:67:e2:99:15:b0:4c:13:64:a9:3d:4c:
                    7f:25:57:66:4a:7b:09:75:65:b5:fb:6f:d8:82:19:
                    92:b9:5c:e3:90:0f:50:29:c1:a5:ba:a7:4c:ef:78:
                    84:82:80:60:72:a4:61:e5:8a:dc:bf:a8:03:34:ec:
                    9a:51:b2:ac:b8:86:20:cc:e5:63:d0:54:b8:65:7b:
                    06:ed:af:df:1a:0d:12:32:92:d0:ef:f4:57:06:6f:
                    76:fb:e6:da:1d:8e:d6:ec:06:b2:95:ec:f5:51:a3:
                    15:bb:ea:47:c8:db:7c:3f:01:ea:63:1b:78:f0:3f:
                    62:2f:22:5b:79:0e:00:f9:3c:55:75:42:98:06:68:
                    1a:e5:dd:f2:8e:29:b9:66:cd:f1:e9:75:5d:b1:ff:
                    83:1d:90:71:18:ab:9c:57:03:fd:65:e9:7a:f9:f0:
                    27:c1:3b:e9:86:77:b9:24:9f:9c:9b:93:6d:d7:4a:
                    3c:ce:c7:52:e8:74:da:e0:33:dc:8f:72:e8:47:21:
                    d7:8f:87:0b:83:ff:c4:3c:9e:a3:ff:1e:09:9d:04:
                    14:74:e9:a0:21:e4:97:79:01:c8:e4:d1:fe:b3:23:
                    37:7e:6c:31:71:43:21:44:55:99:8c:a3:12:4e:5e:
                    0c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:71:CA:55:BB:9D:0C:E0:DE:7A:E9:F1:BE:12:B3:63:FE:D7:DE:B6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3014E1FA96FA11F1ADAAAAD4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:29:95:b7:7f:af:4f:db:d6:54:24:a7:cd:50:ea:13:4d:41:
         e4:1e:45:ab:36:09:ad:7c:06:d8:58:ef:8b:44:70:47:08:53:
         ec:48:cf:50:d5:b6:b8:b3:9a:52:16:17:01:54:27:47:e6:de:
         a7:41:de:c8:4b:6b:22:d4:c5:40:2a:0f:b3:92:a1:05:3b:32:
         91:29:ad:bc:03:29:c5:8e:f8:81:2e:97:c5:3b:a3:7e:40:5c:
         f8:dc:8b:95:bd:e4:00:ec:bc:56:ec:d9:97:d4:53:71:65:3d:
         e0:b9:8b:d9:ff:0e:94:6f:8e:a0:c3:dc:14:f6:15:1f:db:f2:
         88:5f:37:37:5e:93:89:c0:14:f2:00:5d:77:e0:52:38:1e:0c:
         ac:6f:19:a1:7a:02:4b:ff:f9:c6:e9:18:18:c2:35:3b:8f:5d:
         d9:0e:8e:51:3f:83:d2:e8:4a:d0:5f:31:f5:b6:8a:2f:7f:72:
         e8:76:10:4c:93:b2:15:1f:35:d7:9f:ed:b4:a8:04:c7:d6:53:
         19:65:47:b4:cc:87:fa:2e:34:ef:7b:8f:df:49:e0:dc:03:13:
         95:16:32:12:94:b1:64:f8:91:31:3f:66:04:21:9d:f8:d5:94:
         d7:4e:8a:39:2a:2b:b1:90:f5:2a:28:25:06:01:1b:d7:c1:b7:
         d7:ad:da:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----