Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9220DD70B0EC11F1814FA3C0CE1D38B0.roa
File:                     9220DD70B0EC11F1814FA3C0CE1D38B0.roa (raw, json)
Hash identifier:          68Q0kK2Fu/8T6azfi0JY9Do35Tg0x5NqO5jqhHKyb98=
Subject key identifier:   82:C2:3E:AC:98:1C:44:4F:C9:A2:60:3E:2C:B1:6C:8E:79:33:8C:63
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E867
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9220DD70B0EC11F1814FA3C0CE1D38B0.roa
Signing time:             Tue 15 Sep 2026 10:02:34 +0000
ROA not before:           Tue 15 Sep 2026 10:02:29 +0000
ROA not after:            Wed 21 Oct 2026 10:02:29 +0000
asID:                     63099
IP address blocks:        154.196.214.0/24 maxlen: 24
                          154.222.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125031 (0x1e867)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 15 10:02:29 2026 GMT
            Not After : Oct 21 10:02:29 2026 GMT
        Subject: CN=6aa917ba-c6ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:37:81:49:de:d3:0a:eb:56:10:4f:e2:02:e4:
                    8b:ef:65:00:c3:f3:72:db:d8:95:87:65:16:85:fe:
                    e8:32:af:53:b2:67:52:3e:a5:5c:f1:9b:84:6a:1f:
                    ed:85:7c:22:e4:0e:b7:9d:e3:7a:9a:10:bf:09:4a:
                    9a:e2:47:96:57:8f:6a:17:cf:f1:18:03:00:e2:49:
                    43:e5:3a:73:4b:4f:4a:d4:b3:db:1d:6f:31:f1:31:
                    0d:d7:be:9c:c7:87:5f:96:9c:63:da:6c:16:59:4b:
                    d6:a4:3f:d6:dc:f1:e4:6e:0e:36:11:4c:2a:7a:ff:
                    94:be:3c:13:2b:86:11:eb:01:99:d5:34:18:33:78:
                    d1:c2:27:79:8b:d0:45:e0:bf:1f:40:2f:47:fa:1e:
                    66:32:12:08:c5:6b:f5:1a:af:9c:a5:ad:69:66:74:
                    fb:73:fe:32:6a:62:8d:1a:dc:81:0b:1a:6b:d7:41:
                    66:60:4d:76:c9:8d:b1:a9:0c:ee:9f:e5:46:62:9f:
                    1c:ed:c9:db:8d:54:16:14:04:83:78:d9:21:7e:db:
                    36:05:51:e1:e2:43:d3:da:db:1f:07:43:98:39:d0:
                    08:b7:a9:e5:08:20:83:d7:c9:00:0d:be:12:e8:e9:
                    4f:44:2a:16:ee:f0:88:80:97:25:88:55:e5:17:54:
                    8e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C2:3E:AC:98:1C:44:4F:C9:A2:60:3E:2C:B1:6C:8E:79:33:8C:63
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9220DD70B0EC11F1814FA3C0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.214.0/24
                  154.222.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:ea:07:98:14:f6:cc:1f:6d:35:1f:a0:95:19:8b:d7:2d:31:
         42:af:6d:e9:f2:4b:cb:5b:20:de:a8:76:24:10:e3:1f:48:32:
         e7:e5:bd:23:29:1c:33:48:12:0a:c0:0f:b1:0b:a6:f2:c9:47:
         96:d9:45:71:57:71:91:a8:58:69:cb:db:6d:c2:b9:61:9d:c1:
         b0:39:fd:0e:f9:0f:ee:4d:27:40:73:ba:1b:bd:aa:cf:27:b5:
         51:f7:e0:db:0a:75:8a:06:25:78:63:b8:b1:72:f2:7d:3b:cd:
         51:c2:d9:da:3a:e6:e2:27:19:a9:13:ff:b6:bd:fc:27:7e:ec:
         bb:94:21:cd:83:25:00:6d:15:5f:61:54:6e:f2:91:d0:84:5d:
         b3:19:ea:63:17:90:d1:04:83:54:89:59:1e:ae:de:e9:a8:9d:
         25:f7:ef:12:a5:af:32:53:4f:78:f8:a1:5e:a6:5b:23:b9:56:
         e7:3d:e0:5e:e1:46:29:b6:0b:40:9e:8e:d8:0f:86:79:ce:33:
         b3:da:2b:45:2b:9b:c1:ee:3e:3d:d3:cd:35:db:bf:05:30:39:
         df:c9:40:9f:a1:60:ef:ec:0c:ef:be:16:c2:a0:af:a9:99:fc:
         ab:91:18:5a:b2:5f:ff:9f:bb:4c:e5:de:bc:1c:17:6f:70:fa:
         2a:1e:87:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----