Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B2E0700B7EE11F1BD74EE00CF1D38B0.roa
File:                     3B2E0700B7EE11F1BD74EE00CF1D38B0.roa (raw, json)
Hash identifier:          98X3pW90XUFQSAI/jp5LoIoPNWQrXyqvLqnwrqLo0kY=
Subject key identifier:   5D:0C:F7:2B:94:43:AD:C2:2D:D8:F5:3D:D5:28:C9:63:F7:F6:1D:5B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EA9B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B2E0700B7EE11F1BD74EE00CF1D38B0.roa
Signing time:             Thu 24 Sep 2026 08:02:05 +0000
ROA not before:           Thu 24 Sep 2026 08:02:01 +0000
ROA not after:            Tue 03 Nov 2026 08:02:01 +0000
asID:                     198652
IP address blocks:        154.83.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 11:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125595 (0x1ea9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 24 08:02:01 2026 GMT
            Not After : Nov  3 08:02:01 2026 GMT
        Subject: CN=6ab4d8fd-a47e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bf:37:23:61:ca:e2:c5:ee:8d:e6:4d:a8:7e:
                    db:5d:37:cf:4f:d3:3d:25:d7:65:30:34:ef:f5:48:
                    20:9f:fa:ce:b7:97:f8:02:2f:7c:2a:77:e4:4d:87:
                    43:74:04:83:c3:dd:50:3c:54:25:ec:cb:a8:cb:05:
                    3c:23:8d:50:a7:c4:43:9a:80:9f:3e:89:66:d3:f5:
                    c4:f8:8a:f9:5c:58:8a:e1:7f:f4:ba:30:b5:9f:5b:
                    03:30:d8:a6:67:91:98:08:2b:3d:f3:c6:a5:9b:18:
                    4f:50:22:46:f5:4a:44:40:03:6d:99:89:d2:4d:a6:
                    2a:a6:38:e4:46:05:db:1e:5f:b2:84:2a:18:bc:72:
                    c8:df:12:b7:9b:81:33:e6:7a:a2:63:b6:fc:8d:8b:
                    bd:a4:42:03:07:b3:f0:b2:91:6f:80:5e:81:2f:ae:
                    a1:45:48:d3:08:cd:03:a8:6b:61:5d:0d:31:5f:a0:
                    86:c3:05:e4:b5:1e:f6:48:1f:04:a1:f4:81:55:c2:
                    0e:d4:92:14:f4:f2:9d:a4:c5:60:7b:82:3b:cc:cb:
                    48:a0:a0:3c:11:1b:2e:5a:47:59:a2:5e:03:0e:94:
                    10:34:2e:da:6f:e7:e1:9f:33:53:41:42:84:85:90:
                    74:71:89:48:85:87:f9:ae:d7:d6:7b:ca:d9:0a:c3:
                    12:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0C:F7:2B:94:43:AD:C2:2D:D8:F5:3D:D5:28:C9:63:F7:F6:1D:5B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B2E0700B7EE11F1BD74EE00CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:30:3e:d6:b4:64:0c:c2:61:e1:15:5c:f4:62:eb:33:2d:ca:
         39:0a:98:4f:14:b0:fe:c4:98:35:90:f4:ad:ad:f7:bc:56:8c:
         01:92:65:43:1e:31:6d:30:41:16:11:6f:e0:84:05:89:f8:13:
         52:2f:93:1d:09:8c:02:9f:33:62:e0:f4:0e:2e:58:ca:6c:c7:
         ed:a4:a0:ad:88:d1:61:a3:34:fc:0a:2c:46:1c:cc:2b:98:d0:
         17:1b:d0:25:9e:9c:11:e4:8d:aa:70:1c:be:15:b8:a0:36:99:
         e2:3c:50:65:b0:54:99:79:9f:2e:a0:52:b4:81:4b:71:65:c5:
         12:3f:e9:66:17:4b:e9:3a:82:c4:3b:84:54:c0:3e:3d:0b:57:
         43:2b:17:32:47:f1:09:af:72:d5:58:3e:83:c5:ad:39:f9:99:
         04:a8:b9:d1:99:d0:c2:7d:f9:b9:f2:16:e0:36:f8:64:dc:6b:
         01:00:66:ff:29:40:08:d8:d6:ea:7c:1b:c6:fd:13:3d:0f:34:
         05:1a:34:6e:40:67:2e:36:87:33:41:b9:39:ef:73:70:e9:03:
         bc:46:c4:bd:e9:39:e6:44:be:26:87:7d:2b:f4:79:0d:3f:a5:
         69:5c:ba:65:0a:89:e5:09:cc:a9:b1:bd:3f:d6:7c:17:6c:95:
         1b:2d:4c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----