Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A907E60B29911F1A79B0CE1CE1D38B0.roa
File:                     6A907E60B29911F1A79B0CE1CE1D38B0.roa (raw, json)
Hash identifier:          3A2nUt+Kithgk7vIJWJedz0AOJiXWuYoDc90oqMNn2E=
Subject key identifier:   A1:B3:1D:96:15:97:D5:D8:BC:C8:33:AC:6B:B2:F6:26:45:23:32:74
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E8AE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A907E60B29911F1A79B0CE1CE1D38B0.roa
Signing time:             Thu 17 Sep 2026 13:12:22 +0000
ROA not before:           Thu 17 Sep 2026 13:10:49 +0000
ROA not after:            Thu 24 Sep 2026 13:10:49 +0000
asID:                     131618
IP address blocks:        154.222.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 13:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125102 (0x1e8ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 17 13:10:49 2026 GMT
            Not After : Sep 24 13:10:49 2026 GMT
        Subject: CN=6aabe735-8807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:31:39:94:08:da:a6:8c:ee:7b:ad:0e:6f:51:
                    e9:29:d7:1e:2b:d1:9e:e3:78:04:35:4d:31:b8:a4:
                    f2:61:ec:c8:a7:c4:9a:b8:46:50:49:a7:ae:db:78:
                    90:6c:0d:6c:19:2f:57:92:ee:b4:07:2a:61:fb:75:
                    70:1a:25:32:f7:50:34:81:f2:8c:2d:a2:69:a4:a5:
                    18:6e:43:36:d0:67:f9:0b:90:7b:95:69:6d:ce:5b:
                    1c:50:e7:8c:3f:e3:72:f4:12:93:75:f5:0e:76:e4:
                    81:1d:c2:33:2d:07:70:80:d4:b9:92:50:68:53:cb:
                    6b:89:8b:ff:57:ce:b6:54:a7:49:08:57:7e:45:8f:
                    4f:84:fd:25:c9:83:45:d5:f0:7d:74:f8:64:72:85:
                    62:22:b3:6d:ba:7a:fb:86:45:52:6d:bd:2a:97:30:
                    7f:0d:bf:e4:03:ea:18:1a:a2:27:5b:50:00:8d:f1:
                    74:18:05:a9:db:7d:36:4d:a4:c5:12:2c:a5:32:bc:
                    01:21:9d:21:e0:aa:72:c1:c2:6c:0b:37:f9:5e:e3:
                    e2:ba:12:03:fd:27:a7:d2:f3:49:55:72:a8:30:9f:
                    23:82:fc:8c:74:eb:b4:c4:8c:8f:1f:9a:53:3b:8b:
                    66:f1:f1:38:75:bd:c8:81:73:b0:00:b3:61:4f:b9:
                    bd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B3:1D:96:15:97:D5:D8:BC:C8:33:AC:6B:B2:F6:26:45:23:32:74
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A907E60B29911F1A79B0CE1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:24:ca:0c:80:aa:42:1d:46:2f:84:ac:8e:18:b0:b3:09:af:
         04:28:71:f2:4f:7d:ff:bc:e0:a2:91:b2:52:96:33:02:82:8d:
         36:cd:34:c3:6e:a5:63:59:86:ed:f3:1b:f6:ce:d4:32:19:ee:
         b5:f3:f8:fa:f8:6a:b8:94:d4:6c:85:28:d0:0e:54:b6:a9:3d:
         0f:4b:4c:a1:a7:68:3f:50:4d:55:11:cd:78:b7:e6:48:31:d0:
         ee:9f:d0:62:41:9d:f9:38:14:19:19:75:b9:a8:ec:c0:90:96:
         95:a6:af:74:6f:42:44:2c:e4:46:77:8d:a9:dc:67:7f:9c:c0:
         13:91:b5:d2:f7:18:7a:f8:61:08:e4:19:f4:42:71:b3:5f:d2:
         ad:5e:5c:b6:1b:be:51:d4:c4:03:c9:41:b8:44:df:da:6d:5b:
         d7:53:6e:f7:ea:e6:9c:85:c1:1e:6e:9e:83:00:94:79:8d:48:
         e1:a3:67:b1:00:68:ce:17:75:fd:4c:08:f8:8f:9e:30:c1:1d:
         69:3d:e4:df:71:48:64:ef:c3:6d:b3:d6:cf:ad:99:3e:ad:28:
         9a:ed:4e:ba:ad:ee:ab:38:f2:d0:29:a6:c7:47:ef:3b:a0:16:
         e1:ad:ea:f3:54:22:a8:a3:c0:6a:af:a3:d4:19:56:dc:73:da:
         09:ed:c4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----