Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65953114A06811F193E7F1BCCE1D38B0.roa
File:                     65953114A06811F193E7F1BCCE1D38B0.roa (raw, json)
Hash identifier:          9hNZNVBBZttxDiu12i1bb1Y6Emil+b9hK9Ny+ZrL9Nk=
Subject key identifier:   01:FE:B4:44:FE:5B:76:94:5C:6A:60:81:FE:71:70:8D:38:9D:AF:9A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E2D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65953114A06811F193E7F1BCCE1D38B0.roa
Signing time:             Tue 25 Aug 2026 09:36:07 +0000
ROA not before:           Tue 25 Aug 2026 09:36:03 +0000
ROA not after:            Fri 02 Oct 2026 09:36:03 +0000
asID:                     202656
IP address blocks:        154.203.230.0/24 maxlen: 24
                          154.203.231.0/24 maxlen: 24
                          154.203.250.0/24 maxlen: 24
                          154.203.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123606 (0x1e2d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 25 09:36:03 2026 GMT
            Not After : Oct  2 09:36:03 2026 GMT
        Subject: CN=6a8d6207-4f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4d:05:86:6e:89:ae:e3:f9:9f:d9:a9:be:48:
                    d1:07:2d:8b:d5:de:af:41:28:f1:b2:38:86:3b:dc:
                    5c:a5:f3:8c:15:94:7f:89:4d:f0:81:93:92:c5:9e:
                    2c:fa:c0:fa:c1:a6:75:9b:9e:7e:cd:c2:40:7b:b4:
                    a4:ad:f3:9d:ec:40:8b:4d:1d:61:56:23:55:b4:43:
                    cd:5f:2e:ad:a0:12:8d:d3:de:5c:d2:4e:73:f0:7d:
                    f6:4f:36:af:18:99:1c:53:a2:e6:ed:4b:f3:5a:75:
                    fe:27:84:50:54:61:ef:48:5d:72:9d:2c:cc:1b:98:
                    51:da:5a:dd:9c:7d:36:a5:38:26:37:37:6a:63:ad:
                    7a:5e:e5:9e:71:22:f8:f7:85:dc:79:33:26:ec:b6:
                    36:01:e7:90:07:89:ba:34:3d:0a:a6:21:76:66:2d:
                    f4:a1:e9:b7:22:30:df:b1:08:8d:c9:8d:7e:fd:1b:
                    be:14:ff:18:a0:e9:77:13:fe:35:e6:bb:d6:ff:4b:
                    15:fd:98:45:93:d9:26:d1:e8:fe:20:eb:eb:d4:61:
                    ec:32:e9:fe:d8:3c:ea:f7:93:db:71:37:c3:b1:64:
                    25:f0:bc:23:bf:2e:08:aa:26:cd:87:2f:f4:6d:c5:
                    d4:db:e4:f4:d2:92:2c:04:4e:50:d5:8d:23:60:e4:
                    68:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FE:B4:44:FE:5B:76:94:5C:6A:60:81:FE:71:70:8D:38:9D:AF:9A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65953114A06811F193E7F1BCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.230.0/23
                  154.203.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d2:09:29:71:2a:e8:06:f6:e9:2e:6c:1c:53:1a:59:9d:d3:ce:
         50:bf:29:3c:2f:66:1c:3c:48:68:ff:0a:31:72:1e:46:20:5e:
         75:f8:05:43:fb:05:df:aa:f3:a0:b0:f0:30:a3:05:76:3c:bd:
         6e:27:41:1b:4a:c4:b8:f9:2c:98:a0:90:4f:48:9b:84:2f:95:
         71:39:09:05:69:54:e9:c2:a5:e4:8d:7b:46:83:32:04:62:33:
         51:95:c0:74:91:da:bb:3d:51:2b:ae:ab:c4:48:2c:5f:61:04:
         f9:1c:82:42:92:18:d8:0f:4a:83:c1:7a:54:12:9d:28:e1:c2:
         cf:28:0a:37:8d:7b:54:47:03:c6:4c:87:29:2e:06:87:5c:dc:
         9f:b6:ed:fb:b0:1c:ce:ef:63:92:26:45:63:69:01:a7:ea:a9:
         94:8e:3e:0a:b3:80:b1:03:a8:a2:d6:fb:3d:9f:9c:87:95:04:
         63:ca:39:11:c6:1b:35:ec:92:39:c7:e1:b0:61:b2:36:44:e7:
         54:f4:9a:f0:5e:79:d2:4e:0d:31:a1:77:8e:22:70:09:ef:16:
         43:30:1a:09:04:b9:86:e5:43:53:c9:7e:c7:c4:2f:af:7b:17:
         46:08:6c:73:df:72:ec:1e:80:f9:78:3b:3c:3b:63:cc:34:1c:
         b9:85:bb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----