Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC49F552A1EB11F19D956BEFCE1D38B0.roa
File:                     AC49F552A1EB11F19D956BEFCE1D38B0.roa (raw, json)
Hash identifier:          lUp6u689KYLCuxdjw2xmdmoQum4uGxDs49JIYHAP3go=
Subject key identifier:   41:92:F4:AE:82:27:D7:6C:FC:4E:13:D6:E5:91:02:1B:4C:AD:BA:DF
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E3A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC49F552A1EB11F19D956BEFCE1D38B0.roa
Signing time:             Thu 27 Aug 2026 07:48:21 +0000
ROA not before:           Thu 27 Aug 2026 07:48:17 +0000
ROA not after:            Sat 03 Oct 2026 07:48:17 +0000
asID:                     214483
IP address blocks:        154.86.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 14:31:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123808 (0x1e3a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 27 07:48:17 2026 GMT
            Not After : Oct  3 07:48:17 2026 GMT
        Subject: CN=6a8febc5-8ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:90:76:2f:53:5a:32:8a:62:7f:75:42:1a:a2:
                    02:31:99:c9:92:36:3c:47:66:9e:0a:d7:7f:58:57:
                    16:d1:20:bb:54:ff:dd:3c:dc:8a:7e:b2:2b:0a:73:
                    b9:f7:06:d7:37:1e:81:e6:6d:b8:cc:6b:54:c3:b6:
                    31:a4:fb:6d:8a:b0:74:be:d5:32:39:9b:06:c8:6c:
                    d5:7f:8a:64:63:7a:91:5a:8e:79:3d:76:05:aa:39:
                    91:ec:75:3e:8f:50:49:be:c3:45:df:ff:49:94:f1:
                    c7:54:fd:f9:9c:bf:e8:2c:ab:d4:7c:81:8c:fb:27:
                    6e:41:bf:6d:19:aa:d1:2e:e8:7f:6b:a0:b3:ed:04:
                    2e:13:3e:74:37:bb:34:47:ac:22:21:18:6e:db:eb:
                    0f:c3:19:54:99:05:df:17:1b:2a:59:a1:1f:e6:ef:
                    d4:f1:31:8d:12:1f:5d:1d:9c:00:63:f2:16:68:9d:
                    04:77:be:31:1d:66:54:e2:06:4e:61:a6:0a:b4:17:
                    99:23:b5:66:1a:21:4e:5c:65:1a:1b:0f:ba:fe:5b:
                    65:4f:57:04:37:cb:03:b1:b0:e7:60:79:0f:40:21:
                    b0:4d:d4:8f:a7:54:01:b2:3e:54:6d:2e:85:21:3d:
                    59:cb:72:98:95:19:d4:20:5b:58:d0:34:4a:a7:b6:
                    c4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:92:F4:AE:82:27:D7:6C:FC:4E:13:D6:E5:91:02:1B:4C:AD:BA:DF
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC49F552A1EB11F19D956BEFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:33:1a:83:8b:07:11:b4:1a:18:9c:52:42:14:86:43:64:0d:
         fd:26:bf:9a:70:b6:f7:d9:5a:f1:2c:ed:7b:96:e6:c6:bf:59:
         a9:5f:4d:59:bf:54:a8:ae:26:ae:68:53:b9:99:f0:d8:a3:40:
         38:8f:2e:a6:8e:1d:d3:53:77:b1:10:24:3e:4f:b1:f3:21:30:
         4e:8b:77:44:3d:56:6f:a4:ba:60:c2:14:91:ef:aa:14:09:be:
         c4:a0:6e:31:17:ae:d9:36:69:45:24:40:81:f5:0f:5b:e7:d0:
         74:0a:90:76:77:96:31:d0:6b:19:73:46:9a:94:9c:c9:b8:da:
         19:04:20:85:cd:eb:1d:87:af:ca:62:73:e0:f1:16:1d:7c:cf:
         0e:24:75:8f:b5:99:64:9c:a8:d0:5e:bc:3c:de:95:ec:25:86:
         f6:49:4c:94:62:c2:1f:73:55:e5:fa:f3:14:fb:fc:f4:a2:74:
         16:79:a5:7c:00:54:49:63:69:6f:9c:b4:ff:07:2b:9e:0f:99:
         e7:dc:45:99:5d:52:b6:2b:59:e7:bd:c2:d4:85:0f:c4:e7:93:
         e5:fb:8a:b7:35:18:e3:ab:e6:79:a4:36:82:ca:28:62:e2:f5:
         7f:d9:db:cd:4d:3b:aa:06:77:2f:ed:97:80:b4:f8:4c:c3:6c:
         7d:77:60:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----