Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83F230E6BCA411F1BD8117BCCE1D38B0.roa
File:                     83F230E6BCA411F1BD8117BCCE1D38B0.roa (raw, json)
Hash identifier:          38dhBuArpkA/YJCt+OElC20ZC6UDB8g0MHuugmO8w3k=
Subject key identifier:   31:C6:01:D3:34:9C:17:FE:C0:D2:06:8D:F7:DA:07:04:91:C4:FC:99
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EB9F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83F230E6BCA411F1BD8117BCCE1D38B0.roa
Signing time:             Wed 30 Sep 2026 07:57:00 +0000
ROA not before:           Wed 30 Sep 2026 07:56:56 +0000
ROA not after:            Tue 10 Nov 2026 07:56:56 +0000
asID:                     212238
IP address blocks:        154.222.69.0/24 maxlen: 24
                          154.222.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125855 (0x1eb9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 30 07:56:56 2026 GMT
            Not After : Nov 10 07:56:56 2026 GMT
        Subject: CN=6abcc0cc-ce74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1b:c8:53:f0:9b:aa:d2:af:4a:19:fc:48:ad:
                    4f:0c:6d:6a:ce:b8:ad:a6:da:e9:0e:17:f6:87:d2:
                    b2:8d:14:13:94:ff:44:a7:0a:3b:22:e3:97:3f:9d:
                    3a:5a:50:c1:cf:f3:d2:08:06:d0:af:4e:dc:cf:12:
                    c2:5b:a6:77:5c:76:29:93:44:4b:a0:83:a1:04:d3:
                    6d:fc:d1:4d:b5:3c:33:df:d7:5f:9c:e3:fc:82:87:
                    7f:c3:00:70:fd:9c:f1:69:62:e5:95:98:73:4e:b1:
                    b4:2c:15:76:0f:51:a8:43:08:d1:64:28:be:f9:9b:
                    df:67:ea:01:a0:4b:28:a9:03:ff:6a:bd:f7:9b:7c:
                    bd:a9:54:a3:58:10:b4:40:e9:3e:fb:e6:32:30:ad:
                    b1:58:58:1c:2f:c4:54:73:72:a5:70:38:fb:5e:a2:
                    ed:3e:98:ce:45:20:ce:e6:3a:de:cd:00:57:85:95:
                    fa:f3:cd:8c:0d:63:5c:7b:05:df:f6:15:9e:5b:bf:
                    0e:24:cb:a0:6f:b0:bb:86:e7:c8:5d:17:1f:15:30:
                    e5:9a:17:1b:43:a7:9d:b2:e9:bc:23:aa:5c:67:a6:
                    0e:32:a2:b8:c0:99:44:49:73:99:c3:9c:a7:c4:a8:
                    90:af:df:3e:e4:f7:cc:09:1a:ac:30:e6:fe:08:d4:
                    10:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C6:01:D3:34:9C:17:FE:C0:D2:06:8D:F7:DA:07:04:91:C4:FC:99
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83F230E6BCA411F1BD8117BCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.69.0/24
                  154.222.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:87:52:15:8c:ba:54:d3:27:6c:a9:ff:78:6c:16:27:72:79:
         2b:53:cc:bf:70:39:a5:2b:cf:21:b8:37:77:43:56:d1:38:c8:
         ed:1d:f8:8b:1f:12:5d:ae:98:ba:f0:33:fa:95:86:aa:81:9f:
         90:9f:a3:fa:99:69:01:1d:18:33:c0:c8:db:18:70:90:c7:d1:
         b8:30:a3:6e:5f:b0:85:9e:a1:13:9a:11:d3:c8:e1:06:e6:f9:
         d7:48:b1:9e:61:c6:85:5b:d9:d0:1a:04:31:70:63:5e:46:4e:
         b6:98:75:e6:36:cf:37:ba:da:9b:bf:b5:b7:c0:83:5f:6c:ff:
         38:b6:ba:79:da:23:63:de:ba:8b:6f:38:e7:a8:e3:16:54:70:
         18:64:63:25:a3:f1:08:40:69:54:07:13:b2:c8:81:dd:ce:50:
         a1:ab:ac:e0:c2:4e:1e:a0:a1:23:c8:64:e8:ee:0e:d7:a5:5b:
         0f:5c:8e:d0:c4:e7:5e:5f:ed:e6:36:dc:4b:ea:5f:6c:ca:c3:
         f5:7d:fa:69:ca:8c:24:56:6b:29:a9:30:c2:ad:df:ce:73:4a:
         bb:57:19:d5:43:cc:15:95:80:ad:53:35:78:ef:48:7f:8d:40:
         17:06:12:c7:d1:89:dc:35:68:19:22:87:06:c5:1b:e1:35:cd:
         5f:61:8c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----