Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/939D0C90AC6F11F1B9231B07CF1D38B0.roa
File:                     939D0C90AC6F11F1B9231B07CF1D38B0.roa (raw, json)
Hash identifier:          A02mx/dgnfCzD/orD9A7pMqTdkIU5YcsR1/SzBZ1uxw=
Subject key identifier:   5B:0E:9C:14:7B:BE:FA:93:E1:F4:E3:F4:C6:72:B4:0B:CA:85:F3:64
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E6B2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/939D0C90AC6F11F1B9231B07CF1D38B0.roa
Signing time:             Wed 09 Sep 2026 16:57:45 +0000
ROA not before:           Wed 09 Sep 2026 16:57:40 +0000
ROA not after:            Mon 30 Nov 2026 16:57:40 +0000
asID:                     399077
IP address blocks:        154.211.64.0/18 maxlen: 24
                          154.211.64.0/24 maxlen: 24
                          154.211.65.0/24 maxlen: 24
                          154.211.66.0/24 maxlen: 24
                          154.211.67.0/24 maxlen: 24
                          154.211.68.0/24 maxlen: 24
                          154.211.69.0/24 maxlen: 24
                          154.211.70.0/24 maxlen: 24
                          154.211.72.0/24 maxlen: 24
                          154.211.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 07:35:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124594 (0x1e6b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  9 16:57:40 2026 GMT
            Not After : Nov 30 16:57:40 2026 GMT
        Subject: CN=6aa19008-a42d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b5:95:3b:d7:02:90:86:21:95:4b:a3:5e:e5:
                    0d:41:5e:68:aa:45:6c:05:b7:79:35:4e:5c:4f:88:
                    3d:64:61:ee:b8:20:41:6c:0d:ad:2c:77:26:42:82:
                    4b:e4:ac:a0:b2:11:a3:b0:36:b7:55:61:d3:f1:53:
                    87:1c:c8:ad:71:c7:6b:2c:d5:cb:24:db:67:c2:7f:
                    09:4d:f7:d3:de:2b:1a:92:6c:7c:77:82:0a:9c:c7:
                    d8:2c:58:4d:b2:82:4a:27:b1:77:4a:3a:5e:ed:f8:
                    2c:22:e8:63:57:69:84:21:ee:bd:70:2b:b9:41:99:
                    5c:59:de:8a:5d:e0:ef:2d:f3:00:2c:de:e8:19:b4:
                    53:6d:ea:fc:b4:b9:83:fe:22:13:5e:d3:be:f0:e8:
                    79:7a:0d:fc:57:ab:c8:50:18:22:5c:a9:3f:c8:58:
                    14:e2:48:c7:c8:a9:47:60:6c:81:00:b0:1b:93:20:
                    0a:4f:8f:99:ac:2a:3f:60:89:40:14:41:fc:80:29:
                    29:42:aa:42:6d:79:94:94:45:1a:c5:58:ff:21:59:
                    ce:21:b1:1e:5e:70:c0:9f:fc:08:43:bb:26:8f:9e:
                    95:fc:8c:bb:33:42:b9:03:2b:f1:6f:ab:62:de:b3:
                    7a:42:66:20:1c:28:5a:cf:f6:cf:13:35:b2:a4:ac:
                    ad:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0E:9C:14:7B:BE:FA:93:E1:F4:E3:F4:C6:72:B4:0B:CA:85:F3:64
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/939D0C90AC6F11F1B9231B07CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.211.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         af:66:6a:e2:28:12:e9:55:6b:7d:fe:16:b8:34:d6:99:f2:76:
         d7:10:5b:2e:4f:41:60:31:f9:83:e0:98:94:b3:02:6d:9f:d7:
         9a:bb:35:8b:d4:62:38:b6:60:c2:3e:eb:20:ed:e8:c5:d3:32:
         35:4c:a1:b0:77:4f:a2:b3:6b:2d:20:3e:a1:b2:96:92:55:02:
         6b:de:e9:4c:ee:61:92:69:a1:a3:67:a9:a6:f1:3b:dc:b6:f7:
         ce:ff:cb:29:39:3d:cc:3d:82:19:1a:60:1c:9c:35:c3:b6:7f:
         c3:72:66:db:0f:dd:ae:26:a3:6d:00:b7:1f:98:26:fc:c6:99:
         4f:26:29:7f:6b:0e:23:15:5e:88:f5:a8:0e:a6:9d:ce:8e:38:
         31:c4:84:8d:af:69:52:ae:b7:cc:a2:49:3c:5c:69:c1:f6:7c:
         b7:b7:79:d2:5e:9f:2a:ae:24:7e:43:c3:d1:7c:39:d0:58:e0:
         d5:8c:c5:45:26:92:9c:a5:c9:56:29:8f:12:0d:64:7d:a4:8e:
         fb:37:70:97:20:a2:ee:b1:9f:11:a9:e8:0f:d2:72:53:45:45:
         44:f8:00:9d:a5:36:9d:4e:59:0f:72:24:a1:94:6f:49:43:09:
         14:73:71:96:6e:bc:3e:8f:9b:8b:df:d5:e3:f3:6c:46:9b:3e:
         28:de:9c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----