Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A143B908949A11F19F0CBAECCE1D38B0.roa
File:                     A143B908949A11F19F0CBAECCE1D38B0.roa (raw, json)
Hash identifier:          HlvpeSV175qhR1iMQ2hIj10xbbPLemPGzPVRM35/UfI=
Subject key identifier:   AF:29:1E:F1:E8:90:29:99:CD:9D:1F:A6:4F:54:11:4A:11:DC:A6:6E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DDE6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A143B908949A11F19F0CBAECCE1D38B0.roa
Signing time:             Mon 10 Aug 2026 09:05:28 +0000
ROA not before:           Mon 10 Aug 2026 09:05:24 +0000
ROA not after:            Thu 10 Sep 2026 09:05:24 +0000
asID:                     20473
IP address blocks:        154.196.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 10 Sep 2026 09:05:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122342 (0x1dde6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 10 09:05:24 2026 GMT
            Not After : Sep 10 09:05:24 2026 GMT
        Subject: CN=6a799458-ccb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cf:b5:b1:72:75:17:f0:24:fc:e6:4a:73:c9:
                    5d:fd:7b:3a:9b:bd:7d:6b:04:ff:de:07:74:08:a4:
                    d4:59:f7:1c:40:b3:fc:77:3b:1f:37:d9:8e:0a:d9:
                    2c:84:d1:46:fa:06:49:db:f4:55:b4:57:3e:8d:d0:
                    d3:db:0c:dd:92:fd:fe:d7:8c:d9:8c:e0:d3:6c:3a:
                    fe:19:b1:ec:78:d1:8d:8f:ec:70:df:be:f3:8f:c8:
                    c9:0e:2b:40:5a:1c:26:a8:51:9f:be:b9:c4:1c:af:
                    b2:26:48:3b:0e:1a:83:eb:10:33:ce:4b:4d:10:53:
                    b9:60:58:80:40:20:ab:7c:a4:9d:06:b4:bd:98:33:
                    a4:9e:5a:89:a0:13:d5:c8:2d:91:62:00:60:dd:aa:
                    4d:16:a5:17:12:ad:87:68:28:e3:35:42:df:53:3a:
                    64:81:5e:37:96:66:18:9e:eb:7e:39:28:ed:cb:ab:
                    1c:e8:56:fa:f0:34:e7:36:3e:88:68:5b:b1:1c:69:
                    d3:8f:ce:d2:8b:fb:da:f0:a9:97:41:2d:d9:62:2b:
                    94:76:ee:9f:90:80:7e:bc:33:8d:9f:27:d1:2c:a8:
                    9d:a8:50:7b:22:2c:ba:41:c5:61:20:d3:9d:84:2c:
                    a9:e1:b6:ad:4f:01:d2:0c:07:41:16:e7:e6:9e:46:
                    f5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:29:1E:F1:E8:90:29:99:CD:9D:1F:A6:4F:54:11:4A:11:DC:A6:6E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A143B908949A11F19F0CBAECCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:b3:03:74:90:b0:5b:1a:9d:29:ea:e4:ff:4a:03:34:19:30:
         00:e6:7c:7b:9a:0a:df:46:99:53:ff:e7:bb:60:9e:b7:fc:dd:
         a1:9f:f4:d7:fd:9a:44:75:aa:90:c5:e3:a1:80:01:77:58:4b:
         e7:ac:e6:32:da:a7:d7:2b:bd:89:b0:fa:0b:5f:fd:f9:64:06:
         24:df:76:43:9c:a4:93:06:f0:03:37:b8:7a:a5:d8:74:35:0d:
         21:62:54:e3:a1:a8:57:85:65:74:31:cf:c9:f3:e1:91:d6:88:
         67:42:39:45:e4:af:9f:6b:f5:6a:60:4c:26:eb:fd:3d:4e:4a:
         23:75:3d:03:8d:ec:97:5e:9a:c0:37:54:41:59:e6:58:60:92:
         bc:a1:95:6b:91:12:b1:53:6f:1f:87:1f:3c:dd:ed:47:77:c6:
         d2:cc:fc:c0:92:e3:1b:3a:88:0e:cd:a8:c9:62:6f:4b:c7:48:
         76:0e:ab:e3:5d:ef:cc:95:32:24:89:6c:0f:68:4b:d4:7b:93:
         a4:e7:7f:11:77:1c:ec:f3:25:b8:db:6c:d7:e4:03:6a:5d:c8:
         f4:44:7a:1c:42:4a:d4:2f:25:12:26:c2:a8:04:f6:d7:c6:87:
         b8:2e:d8:f0:4f:8e:79:ac:9e:aa:d0:ab:4e:c1:1a:3e:b0:eb:
         d0:d0:9e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----