Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A35D2F49FA311F1A6126011CF1D38B0.roa
File:                     9A35D2F49FA311F1A6126011CF1D38B0.roa (raw, json)
Hash identifier:          Wi6ieXQr+nQrMt0uVWgZEmNtR/erLzYLAwlMmCpdnkg=
Subject key identifier:   97:05:C8:6D:D1:DD:8C:67:EF:6E:AB:63:F7:8C:88:2C:C3:45:70:7A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E246
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A35D2F49FA311F1A6126011CF1D38B0.roa
Signing time:             Mon 24 Aug 2026 10:07:24 +0000
ROA not before:           Mon 24 Aug 2026 10:07:19 +0000
ROA not after:            Wed 30 Sep 2026 10:07:19 +0000
asID:                     142032
IP address blocks:        154.201.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123462 (0x1e246)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 24 10:07:19 2026 GMT
            Not After : Sep 30 10:07:19 2026 GMT
        Subject: CN=6a8c17dc-c210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:38:a3:e6:b8:ac:8b:2b:b2:8f:a5:86:62:cc:
                    ed:22:81:5a:3e:ab:e9:5d:4a:7c:85:23:5e:72:e3:
                    0c:f7:f6:eb:83:01:33:89:e6:04:79:a9:67:96:f5:
                    01:14:6a:44:0e:bb:7e:0b:45:7d:75:c5:98:b1:cc:
                    28:43:2e:b3:bc:40:bd:cb:8b:ca:66:2c:68:dc:19:
                    d7:2f:b2:e8:be:4f:de:85:76:61:70:4b:d1:88:75:
                    4b:55:85:95:b1:ce:d0:d1:a1:42:aa:2a:da:eb:b2:
                    c5:a9:cb:03:53:67:74:19:54:16:51:e7:2b:e4:f9:
                    f5:8c:c1:d0:70:4e:e5:d6:5f:47:a0:67:37:53:39:
                    eb:bd:d8:7d:86:d5:7b:4e:4e:91:e0:3b:66:9e:a7:
                    db:78:42:91:e4:91:61:bd:88:6f:4a:a7:ea:46:68:
                    f1:cd:99:2f:b7:64:ae:ba:5f:47:b4:4b:fb:49:cc:
                    07:04:b1:ae:ca:07:fe:34:86:5c:09:ad:41:81:11:
                    dd:b4:be:09:d9:90:bc:e2:b5:c7:42:67:79:9c:17:
                    27:9b:61:82:6b:f5:8e:21:02:57:43:3a:29:d2:ea:
                    4a:c1:d4:2d:c7:f5:74:67:52:d9:59:97:83:bd:e8:
                    2a:db:be:ae:f0:32:fd:7b:47:e6:54:d2:ba:74:c0:
                    d8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:05:C8:6D:D1:DD:8C:67:EF:6E:AB:63:F7:8C:88:2C:C3:45:70:7A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A35D2F49FA311F1A6126011CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         73:f1:0c:b5:7b:c8:7e:39:aa:92:d2:93:05:c8:82:34:b2:79:
         9d:5b:59:1e:c9:ef:5d:f1:84:8c:b8:de:48:8e:c5:38:47:7a:
         04:83:d5:f2:b1:07:3f:80:a8:a5:44:d6:53:29:b7:cc:d5:55:
         8e:0c:a3:c3:d2:52:22:ef:4e:5b:a7:4f:a2:26:94:b1:5c:1f:
         5d:92:d3:65:73:03:f7:6c:db:81:dc:4c:ee:0a:09:bf:99:10:
         12:8d:6a:1d:ac:bd:ef:25:bf:34:c4:4d:86:d4:4b:01:0a:ec:
         3d:59:43:5e:ca:6b:56:d2:f8:f5:87:c1:01:98:a1:2e:c8:b5:
         26:a0:25:fd:48:2a:e4:03:3a:76:de:94:77:e0:50:e3:76:9d:
         2b:c0:ed:70:6a:c5:cf:aa:ad:9d:ea:c4:5b:0e:03:75:36:52:
         57:21:e6:56:03:50:dd:32:82:1e:b9:bf:bd:19:2f:f4:00:46:
         bd:45:6e:d0:58:a6:76:0a:95:e5:bd:a8:59:df:4a:65:b2:d6:
         7b:e6:10:33:08:3e:20:3f:bf:09:1d:69:23:f8:cd:1a:44:dc:
         90:81:81:92:c1:db:c4:32:47:d2:de:66:44:95:30:1d:62:2c:
         ad:85:fe:6a:14:e0:fb:5d:f9:9a:d8:c4:b8:46:b4:90:ec:7f:
         f0:98:9c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----