Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2997336AC7A11F18A2D89C9CE1D38B0.roa
File:                     A2997336AC7A11F18A2D89C9CE1D38B0.roa (raw, json)
Hash identifier:          jsL4MqUkSDdsCQJ8MOoKYhtD/Sn4ijNikvgfRP+4p/Y=
Subject key identifier:   65:C7:AE:1C:6C:91:ED:59:DF:44:84:FB:F2:D8:BB:BE:D5:4D:9B:B7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E6CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2997336AC7A11F18A2D89C9CE1D38B0.roa
Signing time:             Wed 09 Sep 2026 18:16:54 +0000
ROA not before:           Wed 09 Sep 2026 18:16:50 +0000
ROA not after:            Mon 30 Nov 2026 18:16:50 +0000
asID:                     399077
IP address blocks:        154.91.124.0/24 maxlen: 24
                          154.91.125.0/24 maxlen: 24
                          154.91.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 07:35:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124620 (0x1e6cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  9 18:16:50 2026 GMT
            Not After : Nov 30 18:16:50 2026 GMT
        Subject: CN=6aa1a296-e38c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0e:7e:1e:b9:d1:04:7c:3c:d7:24:e8:fa:15:
                    49:07:2d:6a:fe:3b:e7:18:39:01:f0:b7:ed:74:e8:
                    01:9a:e2:17:2c:e7:3f:54:15:71:51:30:0c:55:f8:
                    cc:b7:ba:55:eb:36:ed:3e:79:2d:89:eb:47:e8:74:
                    51:72:b3:2b:43:d9:c4:0d:b3:ad:4d:ef:26:78:e7:
                    72:23:5d:b6:cb:57:a3:39:2f:7d:19:f7:2c:2d:31:
                    33:6a:8e:9c:b5:a3:2a:14:a0:d8:88:97:2f:46:97:
                    06:2a:20:e3:48:cd:e4:2f:1c:a1:04:ad:f6:31:2f:
                    fb:51:fa:8e:d5:b2:4a:68:6b:c1:2b:28:a2:11:59:
                    d8:c8:d3:2e:44:d7:bd:db:b9:df:20:37:6a:3d:a9:
                    b4:2e:04:a5:27:7e:d0:35:08:5a:ea:b4:ad:28:62:
                    a9:9d:47:0a:0a:37:12:22:11:70:d1:ee:41:bb:6f:
                    7c:e4:d3:63:b5:73:80:32:c7:dd:37:4f:e7:57:e7:
                    8d:a5:d1:cc:cb:00:17:34:40:e0:4b:b3:6e:9a:42:
                    99:f3:81:9d:85:f3:aa:57:87:01:88:fe:9e:43:d5:
                    60:ad:10:4e:22:38:c7:7a:9f:c0:49:14:d0:e3:41:
                    52:e3:38:4f:29:0b:8e:07:e5:a4:1d:a1:70:a9:b2:
                    be:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C7:AE:1C:6C:91:ED:59:DF:44:84:FB:F2:D8:BB:BE:D5:4D:9B:B7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2997336AC7A11F18A2D89C9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.91.124.0-154.91.126.255

    Signature Algorithm: sha256WithRSAEncryption
         52:6e:5a:07:db:f8:d4:f2:5c:50:f2:67:bd:a0:ee:0d:28:9a:
         e1:7d:95:93:f7:9c:cc:9a:73:4c:ff:99:5a:4f:fc:92:75:db:
         ad:81:78:9c:f7:62:f2:31:35:4f:f9:39:e0:f3:e0:dc:f8:23:
         f7:88:44:96:7a:89:31:24:54:a5:66:7e:bd:a4:e3:ff:af:34:
         d2:c7:5f:fa:98:e9:94:d6:c8:8f:59:c4:14:56:89:e9:2a:a8:
         19:e0:fa:90:3a:62:a6:88:09:d6:61:32:d0:5f:0a:2c:20:f1:
         93:b3:12:65:57:0e:ba:d4:e0:42:fa:bb:25:66:ae:db:31:b1:
         b8:de:ff:ad:79:31:9c:92:e5:05:2a:e0:3f:ef:c7:dc:5f:45:
         7b:0b:a8:ae:ec:f1:58:a4:66:46:90:df:e5:15:5c:83:0c:50:
         a2:ea:6b:1b:dd:a7:5b:a3:c8:8e:82:cd:ca:12:9b:a4:bb:81:
         7f:87:bc:6a:bb:c1:51:3c:41:25:ff:6c:ac:d2:52:4e:d6:37:
         0c:4d:8b:1b:33:9e:1d:29:c6:7a:d5:43:5a:98:fc:5d:a7:17:
         2e:e9:00:51:85:b5:27:0d:f6:e6:79:a0:62:2d:81:71:51:c3:
         1c:72:0a:e8:3a:13:37:4e:50:47:89:2e:ab:6f:05:d3:a7:e1:
         ac:21:20:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----