Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2D616909A1111F1AA690B16CF1D38B0.roa
File:                     A2D616909A1111F1AA690B16CF1D38B0.roa (raw, json)
Hash identifier:          1TGUtN7qaPc1o5uD2E+cUiYmaTgw2pd4c/9SyEbesNk=
Subject key identifier:   6C:84:CC:D6:02:EE:53:CD:AB:D3:AE:7B:8F:92:27:64:58:F5:FB:69
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DF71
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2D616909A1111F1AA690B16CF1D38B0.roa
Signing time:             Mon 17 Aug 2026 07:59:57 +0000
ROA not before:           Mon 17 Aug 2026 07:59:52 +0000
ROA not after:            Wed 23 Sep 2026 07:59:52 +0000
asID:                     63969
IP address blocks:        154.89.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 10:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122737 (0x1df71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 17 07:59:52 2026 GMT
            Not After : Sep 23 07:59:52 2026 GMT
        Subject: CN=6a82bf7c-b96f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:28:0c:28:99:05:3a:e4:a3:df:19:5f:9c:ec:
                    fe:b2:0e:bb:1c:3e:cd:52:67:0c:01:de:ce:9f:9c:
                    3e:c6:3b:13:a0:84:57:fc:32:a2:80:6a:e6:0d:82:
                    ee:7e:f8:e6:ec:69:b7:36:73:57:ec:b9:4b:af:65:
                    77:f1:2c:04:b0:35:72:08:dc:9f:23:02:ca:7e:9e:
                    df:74:af:7f:75:a5:23:9a:6d:48:e6:05:d5:66:9d:
                    bf:6d:2b:79:7a:34:0f:ff:11:98:ed:5b:a3:e9:b3:
                    3b:9d:6f:6a:57:f4:c1:a0:8e:af:b7:53:84:8d:39:
                    a2:a1:77:0e:a3:56:7c:77:81:8b:aa:cb:6f:8d:98:
                    e7:8e:ca:ab:c3:30:34:ab:91:5e:ba:5b:6b:a2:a5:
                    61:46:50:1e:62:0c:02:de:3c:16:bc:ab:ae:8e:d1:
                    d9:6d:fc:ea:a9:01:0e:ab:c8:dd:41:44:4f:9b:77:
                    f2:9e:46:a2:c1:0b:8a:60:48:8a:cd:9d:da:3e:34:
                    b9:e1:15:aa:dd:50:55:ee:a5:ce:3b:1e:55:6c:9d:
                    55:a3:29:63:a7:66:b5:b3:5c:b4:44:21:f1:ae:1c:
                    b7:98:9a:7d:37:33:87:80:86:4c:7a:7c:f6:46:4c:
                    07:25:7e:88:f2:5e:57:7d:3b:9b:ac:94:b4:9b:f4:
                    b8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:84:CC:D6:02:EE:53:CD:AB:D3:AE:7B:8F:92:27:64:58:F5:FB:69
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2D616909A1111F1AA690B16CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:c8:01:42:7f:41:19:a5:0b:98:5d:aa:00:ff:5a:7a:ff:8a:
         de:e8:db:7f:7f:9a:32:9f:28:7c:91:2c:df:8d:6d:8e:0f:dd:
         fd:85:e0:45:48:fa:1a:c7:1a:dc:cb:30:a5:52:5c:0b:1e:3f:
         5a:06:59:56:7e:53:86:dc:5d:f5:02:ab:b9:0a:d8:66:bb:53:
         5e:8b:c1:0c:ca:2e:2e:22:4a:26:47:34:c8:56:6f:31:67:58:
         0d:58:c6:89:7f:b2:94:1e:08:3f:27:a6:37:63:01:87:e5:be:
         b3:ba:73:0c:c5:a4:0c:d3:0a:56:d7:ba:f9:fe:59:e9:31:eb:
         01:19:21:9b:b3:14:23:c9:bd:5a:93:34:39:f6:b2:ab:a0:6d:
         11:33:f7:18:a5:f8:9b:d2:aa:a2:69:77:f9:8a:ae:5b:41:c2:
         16:b0:40:c4:05:6f:08:96:06:d0:01:01:cf:1b:1c:89:2f:8f:
         a5:1b:b0:43:be:d1:89:6b:d3:8c:6b:90:b7:6d:14:1b:b5:81:
         b9:0d:77:32:46:fa:c3:42:af:94:b8:e0:0c:c2:41:20:b4:78:
         50:a2:05:27:1f:4a:75:78:94:2b:c1:dc:d3:09:ae:17:f3:2a:
         83:07:22:8f:c3:cb:44:be:b8:7f:18:8d:ad:5b:06:8a:7d:6c:
         3c:45:d6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----