Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58BCDF889BAD11F1B016B4D2CE1D38B0.roa
File:                     58BCDF889BAD11F1B016B4D2CE1D38B0.roa (raw, json)
Hash identifier:          W9iIbiihTYPaP/c14FH+hcHFZNeXWrNNcVoQ4xhMsK0=
Subject key identifier:   D9:55:29:42:77:13:E0:C4:89:59:45:A6:0B:54:16:D0:96:F2:9E:B2
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DFF7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58BCDF889BAD11F1B016B4D2CE1D38B0.roa
Signing time:             Wed 19 Aug 2026 09:07:05 +0000
ROA not before:           Wed 19 Aug 2026 09:07:01 +0000
ROA not after:            Thu 19 Nov 2026 09:07:01 +0000
asID:                     55020
IP address blocks:        154.210.16.0/20 maxlen: 24
                          154.213.64.0/20 maxlen: 24
                          154.222.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122871 (0x1dff7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 19 09:07:01 2026 GMT
            Not After : Nov 19 09:07:01 2026 GMT
        Subject: CN=6a857239-f005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:11:1a:cb:b6:a1:50:9c:f2:a2:70:29:27:b2:
                    ba:32:d8:a2:c5:a9:da:c4:8b:a0:a5:9d:73:c0:cd:
                    13:6a:52:56:64:bb:a6:4e:39:3f:99:36:40:dd:da:
                    ee:1e:97:ad:5b:63:3d:5b:4e:70:11:c2:7d:c9:43:
                    38:ed:ba:31:c9:ad:de:cd:04:f7:30:1c:75:3b:c0:
                    d1:70:eb:d3:fd:8d:da:a3:2c:3f:a5:e9:a3:10:b9:
                    fe:9b:63:3b:31:ef:e6:20:55:82:6d:58:98:2c:32:
                    dd:21:d8:3b:d7:ef:2e:9c:06:5f:9b:bd:2b:98:60:
                    7a:9d:e7:3b:04:77:41:73:98:f6:6c:0f:a1:a0:26:
                    70:4d:a3:b6:46:46:5f:a4:ec:a3:71:bb:a3:21:c2:
                    10:b4:4d:f4:4b:8f:65:72:19:53:52:2a:f8:0d:e2:
                    3b:8a:58:f7:28:85:48:ab:13:b1:6e:9c:ca:f5:f8:
                    99:58:3c:92:02:0a:f0:75:12:73:97:f5:78:d5:db:
                    c9:2b:4a:c4:e4:13:47:fc:e1:c2:4f:f2:cc:9d:ba:
                    02:83:a1:03:b2:84:99:a0:f2:60:6e:1a:24:f8:55:
                    96:c3:f0:f8:7f:d0:d5:6f:84:0c:11:d8:e2:03:e5:
                    ca:af:e3:99:95:22:a5:60:eb:3d:68:dc:2a:e1:77:
                    5d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:55:29:42:77:13:E0:C4:89:59:45:A6:0B:54:16:D0:96:F2:9E:B2
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58BCDF889BAD11F1B016B4D2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.16.0/20
                  154.213.64.0/20
                  154.222.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:f3:83:62:5c:62:96:81:a2:7c:e6:ac:ac:3f:94:55:a5:f4:
         69:1d:ab:c9:b4:57:0e:bc:45:d9:80:a9:21:75:2a:57:29:e3:
         23:4b:77:cf:80:11:f3:13:1f:9a:17:38:79:96:82:b1:f2:ad:
         32:5b:66:a1:32:bb:93:d7:2d:33:1e:b8:ab:c8:35:57:3b:93:
         26:d7:a5:66:b5:eb:58:d6:ec:2c:85:7f:cb:51:39:a0:50:8e:
         8b:65:49:6f:6e:3d:1c:18:d6:70:3a:f0:79:34:0d:f6:55:00:
         73:4d:f1:b7:58:71:bb:9f:6c:ba:65:47:d2:c7:fa:6e:7f:8c:
         a3:b3:55:82:b5:e1:a1:56:f5:38:52:cd:ee:ee:c3:bc:83:4e:
         41:45:d9:2f:22:f2:b8:59:66:f6:16:d4:49:49:35:ef:bf:4a:
         fa:85:06:d4:73:34:84:bb:7f:b9:92:f1:ed:e4:06:09:67:bd:
         86:41:44:8c:95:69:91:26:0f:51:bd:fd:c5:3d:8e:81:24:4f:
         aa:c2:c1:ca:9a:7b:06:9f:5d:5d:79:60:1b:b2:40:99:be:95:
         f1:9b:ea:23:b5:66:f9:e8:9f:06:42:e8:ef:b5:e7:7d:b7:0d:
         59:5c:f4:ab:05:1a:f6:4d:86:db:66:cb:5d:a4:f6:31:fa:99:
         81:4a:aa:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----