Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B0F03C4993B11F199A51D06CF1D38B0.roa
File:                     6B0F03C4993B11F199A51D06CF1D38B0.roa (raw, json)
Hash identifier:          rCN1Ox9zTiq0Kub3OpJxfrMLY1m1Rnl6YGjFdh9V1nU=
Subject key identifier:   09:E6:D8:8B:46:52:84:07:29:4B:CE:EA:B9:5D:5C:A5:3F:DC:84:56
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DF44
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B0F03C4993B11F199A51D06CF1D38B0.roa
Signing time:             Sun 16 Aug 2026 06:26:31 +0000
ROA not before:           Sun 16 Aug 2026 06:26:27 +0000
ROA not after:            Wed 23 Sep 2026 06:26:27 +0000
asID:                     215224
IP address blocks:        154.83.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122692 (0x1df44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 16 06:26:27 2026 GMT
            Not After : Sep 23 06:26:27 2026 GMT
        Subject: CN=6a815817-7e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fd:33:96:cb:7f:fb:8a:2b:95:f5:20:53:09:
                    7c:0d:c7:ed:98:4a:dd:64:e7:54:1b:98:c6:36:93:
                    ee:0d:eb:3b:c9:af:cc:b9:22:70:28:07:7b:bb:29:
                    51:37:07:16:51:48:b6:92:3f:00:49:b3:74:16:67:
                    32:46:61:e3:06:58:63:3b:a4:f7:b0:e6:58:aa:c6:
                    c0:2c:c9:30:f5:8a:24:55:c8:9c:ce:95:0f:30:f5:
                    00:0b:9a:3a:6a:cc:69:f5:02:9b:20:1d:40:6e:41:
                    48:b8:27:01:37:3b:e1:93:c0:4a:68:1b:cb:62:1d:
                    93:ee:12:bb:05:f5:1c:b6:e0:ee:bc:f5:70:31:f4:
                    b8:58:03:34:44:6b:14:ce:16:9e:56:45:e8:d3:ca:
                    b2:bf:13:5a:79:0d:f6:9e:d0:55:8a:8a:dd:a2:df:
                    fd:e1:7a:e1:f7:db:70:3c:b1:56:e6:c8:2f:59:d1:
                    42:f1:c1:c4:49:37:de:b1:5e:22:cc:e2:35:36:d5:
                    31:92:bd:9c:95:9c:28:8f:65:74:56:52:aa:23:1f:
                    c0:c6:fc:7d:16:a6:f2:fd:1e:9c:db:ba:7a:23:c5:
                    40:0d:c8:87:86:2b:30:53:e1:f9:70:71:b8:6e:63:
                    b8:11:41:8d:63:af:61:56:56:17:2b:63:45:f0:2a:
                    c8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E6:D8:8B:46:52:84:07:29:4B:CE:EA:B9:5D:5C:A5:3F:DC:84:56
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B0F03C4993B11F199A51D06CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:41:3c:87:9b:e9:bf:bf:14:48:ba:07:76:ee:ec:a0:da:fa:
         df:1b:73:d0:8a:b4:25:0f:ff:c3:6f:22:b8:19:78:34:0e:da:
         91:89:00:b8:f1:78:fd:79:39:05:55:5f:09:e1:c9:c5:a8:9e:
         c9:5f:e8:a6:a4:da:c4:6c:ac:c8:72:b7:5c:27:4f:31:b3:3c:
         d7:73:2f:17:77:dd:dc:98:77:e4:90:00:6f:c6:c3:c6:51:5f:
         b8:65:9f:6f:cb:ac:20:9b:cc:d6:75:b0:be:5a:d3:a6:43:7a:
         ab:77:b2:02:a7:88:e8:57:f4:33:95:97:47:82:7d:ba:d9:36:
         58:b3:ae:ae:f3:5e:c5:90:9b:34:cf:d3:fa:2f:95:a1:ea:0e:
         30:e6:9b:c9:0c:6e:94:4f:83:97:8f:d5:62:63:54:74:5e:5d:
         b1:10:60:07:69:06:15:1d:b7:54:46:0c:b1:1b:43:40:ec:f8:
         46:5b:1c:72:07:40:6d:8a:b3:be:61:92:9d:c5:69:23:a1:53:
         4a:84:95:51:1b:d8:34:5f:7c:e3:a4:99:92:7a:d0:5a:b0:6f:
         2f:81:98:dd:8a:81:5e:07:15:05:de:92:a3:15:17:49:0f:56:
         4c:96:38:2b:f3:c6:bb:83:34:bd:85:f6:8c:d3:bd:ab:f3:a7:
         43:88:50:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----