Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D08ABDAA6B711F19B58C6EECE1D38B0.roa
File:                     4D08ABDAA6B711F19B58C6EECE1D38B0.roa (raw, json)
Hash identifier:          Wn+p/oEEDVyWBx8RmMrDif8F1OR8+SpVynpsXNXqSfQ=
Subject key identifier:   7B:85:AF:D7:61:87:5C:3A:BF:86:81:79:58:8C:F4:6B:BD:86:12:2E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E4B1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D08ABDAA6B711F19B58C6EECE1D38B0.roa
Signing time:             Wed 02 Sep 2026 10:16:03 +0000
ROA not before:           Wed 02 Sep 2026 10:15:59 +0000
ROA not after:            Fri 09 Oct 2026 10:15:59 +0000
asID:                     401362
IP address blocks:        154.222.78.0/24 maxlen: 24
                          154.222.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124081 (0x1e4b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  2 10:15:59 2026 GMT
            Not After : Oct  9 10:15:59 2026 GMT
        Subject: CN=6a97f763-c53b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e3:ae:50:e2:aa:0c:31:54:ae:1e:83:52:b9:
                    4c:a2:08:51:b9:15:06:42:95:cc:93:c5:e5:56:01:
                    77:7c:16:34:8b:4f:b7:10:f7:41:2c:9f:66:57:e6:
                    71:0c:fc:49:21:a7:3c:81:0c:c7:b2:ee:77:d9:97:
                    d2:8f:b7:55:53:9b:4b:77:49:3d:d7:d3:6f:ac:45:
                    f4:dc:5a:d2:02:e1:27:de:5c:0d:9a:69:cf:5b:96:
                    23:23:02:0b:54:1a:84:e5:4b:1a:40:5c:1d:f7:0e:
                    77:6a:d3:31:b7:e7:3d:ca:b0:1a:33:b7:d8:66:3a:
                    b5:37:94:ea:ae:f8:f7:ed:d1:ad:e8:15:37:be:cd:
                    df:82:28:54:01:0d:5e:cd:4f:77:f6:f6:0a:e0:02:
                    7c:a7:9f:b9:eb:ce:fb:32:ba:24:8b:34:d4:cb:a9:
                    1d:78:82:ba:6d:97:f8:86:02:6e:34:1f:c5:02:71:
                    39:60:d5:ab:09:e0:c6:56:55:bd:5c:78:ee:a5:ee:
                    30:f4:e9:25:8b:10:81:0d:93:b7:36:1e:ea:3a:1a:
                    4a:a5:2e:ee:69:86:4c:c8:2a:a7:8b:f6:05:bd:bb:
                    26:4c:e3:7a:b4:cd:f3:a2:be:39:69:1c:aa:8c:20:
                    fa:24:02:0a:14:20:1b:c7:2d:21:be:cb:c6:ce:af:
                    90:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:85:AF:D7:61:87:5C:3A:BF:86:81:79:58:8C:F4:6B:BD:86:12:2E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D08ABDAA6B711F19B58C6EECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.78.0/24
                  154.222.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:4c:ad:12:7a:e5:91:ec:8b:eb:4e:16:53:01:88:70:1e:d4:
         45:bf:d5:ec:8b:98:c7:3f:1a:70:57:41:59:2d:26:6b:c1:da:
         93:89:86:86:f9:c4:c5:4d:48:81:5a:32:be:a4:25:f7:60:41:
         06:1c:af:da:2e:84:51:95:f8:bb:d5:d6:58:f9:00:4b:5e:eb:
         16:e8:ae:16:99:27:c2:11:b3:f5:d2:5c:0b:be:00:38:06:6e:
         8f:30:bf:33:dc:a8:26:aa:f6:5d:b8:93:c3:96:cb:64:a7:8b:
         94:c7:23:66:95:d2:b0:95:c7:0b:bc:77:34:bd:b9:7e:fc:66:
         e7:02:c3:8e:2a:47:92:d7:d6:8f:60:f7:10:68:77:2f:e8:c1:
         44:0e:fd:a6:5e:ce:56:75:af:0d:d6:f5:a1:67:cc:1b:2b:13:
         9f:c5:34:c2:b5:c4:81:2b:2f:02:25:64:e0:2a:7e:42:87:bf:
         b3:dd:d3:26:d6:30:f7:0d:43:b7:3c:a3:ad:60:10:d6:31:02:
         0c:5d:7e:6d:53:14:4b:e4:2a:1f:f9:86:56:20:65:83:5b:16:
         bb:5f:55:4d:18:86:49:0e:a0:03:a8:b5:8d:18:60:db:00:66:
         0a:f6:ac:51:67:56:f1:23:f4:57:f2:b3:5d:94:37:2a:02:87:
         6d:a9:a5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----