Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90D30178B4F711F1917EA1A1CE1D38B0.roa
File:                     90D30178B4F711F1917EA1A1CE1D38B0.roa (raw, json)
Hash identifier:          qvmSVzG1UlFNmuQJpV5/dRQFyzdzA6TCtrSJeOSmEe4=
Subject key identifier:   9C:16:89:13:D6:5C:31:35:C1:45:49:8E:07:C2:17:E4:1E:DD:B6:AB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E949
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90D30178B4F711F1917EA1A1CE1D38B0.roa
Signing time:             Sun 20 Sep 2026 13:31:21 +0000
ROA not before:           Sun 20 Sep 2026 13:31:17 +0000
ROA not after:            Mon 28 Sep 2026 13:31:17 +0000
asID:                     209242
IP address blocks:        154.193.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125257 (0x1e949)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 20 13:31:17 2026 GMT
            Not After : Sep 28 13:31:17 2026 GMT
        Subject: CN=6aafe029-d6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3e:60:c8:c1:d5:f0:46:c3:ac:cf:22:95:2a:
                    cd:2b:0e:e4:91:a0:37:e2:0d:8a:13:75:87:b0:93:
                    6d:90:a5:ff:cc:3b:75:a0:ef:b1:29:00:c4:94:67:
                    d7:60:70:2c:97:9d:ee:0d:a4:6f:3d:ca:0a:33:9e:
                    d5:ae:32:73:48:14:5b:b0:cf:02:4f:00:cb:26:4c:
                    32:79:2e:0d:c8:95:06:99:e9:66:e5:67:e8:11:d6:
                    da:c3:8e:20:c4:4e:8e:73:f2:70:bf:87:11:7c:ee:
                    d9:90:a7:3e:a9:2e:07:87:02:4b:48:17:2a:df:66:
                    ab:b6:5a:a9:4a:d6:86:6a:e8:7e:12:6f:ab:a9:0b:
                    7c:1d:8c:81:e8:bd:df:5a:68:c0:1e:31:ca:c8:85:
                    97:08:dc:cd:bd:4c:72:ca:16:8b:0c:f4:54:e1:be:
                    74:2c:9e:de:5c:c6:0a:2a:08:da:de:ac:b5:52:83:
                    d9:75:b6:ff:5b:47:cd:e0:73:56:7c:1b:c8:02:a3:
                    5b:9b:03:2f:a9:6d:43:b0:db:96:43:4e:e6:5d:4e:
                    19:6e:19:e3:9f:5e:e2:3e:86:c8:34:36:90:f2:aa:
                    ea:33:4b:2a:ec:7f:43:c4:f6:17:d3:16:26:c1:6d:
                    dc:ab:61:62:ec:01:0e:29:2e:2a:68:0e:52:f4:1d:
                    c8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:16:89:13:D6:5C:31:35:C1:45:49:8E:07:C2:17:E4:1E:DD:B6:AB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90D30178B4F711F1917EA1A1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:a2:7a:b5:6d:f2:5d:fd:e8:25:c3:7e:15:07:a5:b0:94:9a:
         60:76:40:e4:f9:15:d2:ec:08:73:3b:13:61:df:91:88:de:28:
         95:9c:09:f4:da:8f:de:a8:b8:a9:b0:cb:d0:29:c9:27:0a:26:
         72:a7:a1:c2:89:53:c2:30:5a:e6:2b:77:58:3c:1c:24:68:a1:
         fb:86:e8:f2:95:17:7e:f5:69:e2:98:73:67:41:7b:ba:5e:13:
         ea:71:d6:09:52:48:24:63:b6:c9:18:4b:95:99:d5:cd:bd:d9:
         ec:0b:1c:79:80:d5:e0:c5:08:12:ca:93:89:74:d5:a8:d3:45:
         16:ee:07:f3:ef:55:4a:6d:c3:49:f2:3c:e7:0a:2e:be:5d:62:
         f0:09:2f:9c:de:45:b8:c9:67:1a:48:88:40:d3:9c:30:28:b8:
         9a:b3:23:ce:fa:0f:8c:71:f1:ca:99:14:17:a0:16:1d:48:1a:
         d3:66:11:c9:7f:3c:54:ea:c7:50:d6:83:36:b6:79:83:b5:ec:
         75:33:39:2a:e0:37:2d:1c:1a:84:e1:4b:16:7f:fb:bb:36:b0:
         f3:8c:03:07:99:4a:e5:83:92:c2:3e:e5:f1:3f:7e:ff:75:76:
         1e:93:52:7c:05:84:14:d4:2a:5c:bf:b6:a6:0d:90:06:b1:86:
         59:02:9f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----