Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9331B6F6934311F1BBAEEACBCE1D38B0.roa
File:                     9331B6F6934311F1BBAEEACBCE1D38B0.roa (raw, json)
Hash identifier:          re/Zay62s/KVErjsd6lnMXO/O3bGvLSY5VjdDjYPmck=
Subject key identifier:   E3:79:F4:3A:64:C7:45:4B:69:44:85:33:A0:FE:B7:0D:AD:55:5E:15
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DD98
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9331B6F6934311F1BBAEEACBCE1D38B0.roa
Signing time:             Sat 08 Aug 2026 16:09:47 +0000
ROA not before:           Sat 08 Aug 2026 16:09:43 +0000
ROA not after:            Sun 13 Sep 2026 16:09:43 +0000
asID:                     154383
IP address blocks:        154.199.0.0/24 maxlen: 24
                          154.200.0.0/24 maxlen: 24
                          154.201.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 29 Aug 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122264 (0x1dd98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug  8 16:09:43 2026 GMT
            Not After : Sep 13 16:09:43 2026 GMT
        Subject: CN=6a7754cb-37ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:44:60:48:9e:be:ea:27:83:19:de:7d:b9:87:
                    a6:77:6a:41:fe:34:77:90:08:63:7c:56:05:9d:95:
                    f2:4c:ef:04:c3:5a:de:8a:18:f3:52:39:e1:6f:af:
                    1f:db:bb:00:d1:fd:ca:c8:02:ef:54:ca:20:a8:ca:
                    b4:0b:d0:b9:48:04:47:bf:14:6a:ae:f9:ca:a9:2c:
                    df:05:01:4f:d1:6c:54:1a:5b:22:66:4f:f9:df:2e:
                    1b:01:b2:f3:40:83:85:98:e8:73:5e:73:c2:72:58:
                    6a:78:f1:71:9b:de:b6:3c:22:2e:02:37:65:c7:74:
                    68:9d:c8:14:5c:c0:96:e1:aa:a9:94:84:ed:91:60:
                    fe:43:c2:d2:55:00:8f:1b:a0:c0:41:7b:59:f8:72:
                    de:3d:bf:b1:d7:9a:b7:eb:b3:40:c8:5f:f8:43:15:
                    1d:7e:ec:3c:2a:60:28:13:6c:be:0a:da:ec:f1:ce:
                    8b:11:88:8d:e4:b3:c5:fc:5b:bf:f1:ef:1a:2e:78:
                    89:02:fb:57:52:a6:87:3a:c1:fc:7d:a3:ef:6b:0a:
                    77:a7:33:12:e4:11:78:fa:e5:cf:e1:c2:7b:80:53:
                    39:f5:cf:c3:5d:2b:c9:cd:f3:72:a0:3e:39:56:23:
                    fa:3d:10:ab:05:83:59:88:e8:3e:36:0e:d3:64:4f:
                    27:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:79:F4:3A:64:C7:45:4B:69:44:85:33:A0:FE:B7:0D:AD:55:5E:15
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9331B6F6934311F1BBAEEACBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.199.0.0/24
                  154.200.0.0/24
                  154.201.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:ec:9b:69:a1:75:a3:a8:d0:bd:87:7c:8e:85:54:2c:ab:0c:
         6d:55:2d:04:bc:6c:01:ed:b0:0e:9e:7e:7e:ca:ce:4f:77:cd:
         53:35:24:5f:a3:64:0d:30:31:2b:a3:29:ff:45:22:4d:d7:42:
         ea:f5:88:15:da:e8:86:b8:ff:9a:d2:d3:bb:d2:d7:58:c1:6e:
         c4:53:de:9b:5b:79:60:27:e1:2f:2b:bc:f9:76:72:60:ba:b6:
         ac:35:6b:f0:d9:6e:b5:73:e0:9e:a5:e7:eb:0c:4f:b7:4d:19:
         97:0f:33:2b:30:00:3b:41:94:4f:ae:dc:b6:d8:5b:e0:c4:4f:
         32:92:9b:ee:66:a9:ea:f3:cc:d2:14:a7:6e:cc:91:e2:ac:48:
         39:7c:3a:89:1d:41:7c:af:9e:38:ee:b0:ee:c0:34:31:6f:09:
         65:dc:cb:5e:2a:19:61:8f:81:b8:08:ca:3b:22:91:06:c8:93:
         ff:d2:53:86:44:4d:28:13:d6:74:b9:50:da:8a:9b:63:3f:9b:
         df:95:b4:c5:5a:02:2d:a8:df:01:6a:b4:43:52:55:9e:1a:3a:
         19:78:12:2c:6c:80:fa:d2:70:13:91:9b:8e:54:18:97:1e:41:
         1d:42:5a:b8:79:62:c5:bc:a2:92:a4:e4:04:6e:ec:8f:39:4b:
         f3:10:f8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----