Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E292E889F9211F191F292AACE1D38B0.roa
File:                     6E292E889F9211F191F292AACE1D38B0.roa (raw, json)
Hash identifier:          L/ZTyqkaG3MXE905Gv+rAfu0lBL+MX1Nd4ViHGY15YM=
Subject key identifier:   7D:8E:86:F3:7B:3D:BF:68:66:AA:90:BF:76:5F:92:7C:04:4B:88:26
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E213
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E292E889F9211F191F292AACE1D38B0.roa
Signing time:             Mon 24 Aug 2026 08:04:29 +0000
ROA not before:           Mon 24 Aug 2026 08:04:25 +0000
ROA not after:            Tue 22 Sep 2026 08:04:25 +0000
asID:                     142032
IP address blocks:        154.94.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123411 (0x1e213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 24 08:04:25 2026 GMT
            Not After : Sep 22 08:04:25 2026 GMT
        Subject: CN=6a8bfb0d-053e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:29:3b:4f:c0:9c:e7:3e:93:97:38:26:f5:2b:
                    e6:2d:cf:4b:b5:d8:9b:f1:7c:57:5f:a4:71:b6:a8:
                    02:44:99:6f:9e:d2:a2:06:c3:89:9c:8d:74:50:43:
                    19:e7:9e:d7:9a:99:f8:3f:8f:eb:5b:3e:be:db:6c:
                    fb:cc:fa:c8:df:df:b2:6a:e6:39:5f:a3:e1:bb:f3:
                    97:86:72:f0:2c:e4:da:3a:77:d1:6e:e1:6a:81:e8:
                    35:02:8f:6c:b3:19:9f:4d:c7:c5:3d:3b:a8:d0:3e:
                    68:01:44:dc:c4:15:1a:9a:f7:35:7a:0c:e9:bc:ef:
                    e6:c8:c2:70:99:07:cb:6f:79:e1:ab:d4:6c:a4:f5:
                    7d:cc:fe:a4:2a:ed:4f:fe:76:16:51:31:84:aa:6f:
                    74:29:85:4d:75:d9:05:21:6e:99:32:e7:54:90:72:
                    8f:4c:09:f4:33:74:09:61:b5:18:59:c1:56:26:d6:
                    13:39:40:b5:f9:1a:44:a9:cd:68:fa:2b:37:11:3a:
                    13:7c:02:82:a2:57:1b:26:fc:6d:63:d6:cb:bc:c8:
                    ae:5d:c1:6b:da:90:43:23:9d:ed:c7:9f:84:4b:9a:
                    14:b4:1b:53:c9:e9:19:e4:33:95:4b:23:ea:39:31:
                    e7:8f:37:90:39:2b:6d:84:1c:2b:fe:b9:03:18:ca:
                    00:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8E:86:F3:7B:3D:BF:68:66:AA:90:BF:76:5F:92:7C:04:4B:88:26
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E292E889F9211F191F292AACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3d:f5:e8:9a:c5:03:65:fd:e9:65:a5:75:b8:34:2b:f1:05:93:
         9d:77:d2:c2:39:b5:83:aa:e1:45:21:16:14:03:7f:66:fa:85:
         71:80:d3:74:6e:fa:7b:3b:0f:d4:5a:b7:68:e9:6e:46:68:77:
         03:ce:3a:1e:a0:49:dd:c0:68:d6:27:d6:75:f7:c2:6b:b5:23:
         4d:f4:c2:65:62:f1:80:f7:84:09:55:53:84:9a:6e:d3:b3:49:
         29:49:15:20:fc:c8:a4:e6:1c:ee:87:59:68:12:c3:d0:8b:bf:
         de:54:a3:6a:4e:3b:ca:42:c2:08:30:ab:dc:4b:ff:2a:d4:a3:
         5b:1c:14:90:8c:1d:aa:b8:c4:1d:23:aa:2b:12:e4:c3:fe:47:
         5e:1e:a8:ac:db:c1:8d:98:2e:e0:08:fb:3a:45:ec:da:a0:89:
         76:51:63:15:0f:e4:6f:78:ba:8d:72:0f:80:1a:30:15:fd:c3:
         da:37:85:4a:dd:ff:19:89:ca:3f:86:fe:18:c5:d8:88:74:e2:
         08:57:ac:05:14:b2:ca:f8:c6:db:bb:d1:fc:40:df:28:22:df:
         c5:60:63:08:3d:16:01:e7:df:f3:78:d4:35:20:61:ab:2f:c1:
         bc:ca:25:c3:0c:86:5f:d9:db:7a:32:a4:bc:1a:62:a6:e3:27:
         7b:9c:96:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----