Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE7938C49CF011F1B2E658E7CE1D38B0.roa
File:                     AE7938C49CF011F1B2E658E7CE1D38B0.roa (raw, json)
Hash identifier:          IrM5DmJsjxLtGDWSze1X1WSpKcfV69O9VlNpgeXUNxE=
Subject key identifier:   9E:5C:0D:12:88:75:1F:61:F3:6D:8B:7D:9E:B7:62:2D:1F:0B:28:AC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E104
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE7938C49CF011F1B2E658E7CE1D38B0.roa
Signing time:             Thu 20 Aug 2026 23:41:36 +0000
ROA not before:           Thu 20 Aug 2026 23:41:32 +0000
ROA not after:            Sat 10 Oct 2026 23:41:32 +0000
asID:                     401783
IP address blocks:        154.196.208.0/24 maxlen: 24
                          154.196.209.0/24 maxlen: 24
                          154.196.210.0/24 maxlen: 24
                          154.196.211.0/24 maxlen: 24
                          154.196.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Sep 2026 00:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123140 (0x1e104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 23:41:32 2026 GMT
            Not After : Oct 10 23:41:32 2026 GMT
        Subject: CN=6a8790b0-1ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:af:6b:8c:d1:2c:a5:e5:46:2b:c7:b3:0b:85:
                    c6:f6:4e:ec:4e:45:80:79:70:33:62:20:f8:be:4f:
                    6f:34:5d:b1:fd:d5:41:43:b9:6c:2b:96:c3:32:53:
                    e2:ad:13:39:a6:a9:95:6a:1f:94:46:b1:9b:69:e6:
                    5e:2a:69:69:50:6e:9b:28:fb:9e:4b:65:86:61:4a:
                    0c:0d:97:6c:bd:be:62:36:03:32:7d:89:89:da:26:
                    79:af:e1:b1:49:b5:1d:8c:e1:a7:61:74:f5:6c:66:
                    55:bc:2e:e8:9d:a8:77:d3:db:7f:11:cf:0c:64:6d:
                    ae:9b:fb:54:3c:6d:4d:49:d1:4c:4c:74:30:4e:3b:
                    96:1d:06:bc:9f:c5:fd:70:e7:1b:75:07:6d:f6:e0:
                    3e:8e:92:bd:63:bd:bb:19:34:f4:c2:3c:3e:34:fd:
                    86:31:ec:fe:8a:e4:75:df:40:5a:35:79:5f:1a:bb:
                    39:fb:4b:2f:c8:3d:36:91:9f:c4:90:6d:b5:27:d5:
                    f8:da:ae:63:9d:ab:ce:83:7b:89:ec:22:7d:4c:fe:
                    81:00:00:83:eb:ea:6e:2b:e2:31:30:4f:3f:8f:37:
                    8c:d7:c9:25:3d:6d:fe:df:6b:7d:32:51:3b:96:c6:
                    f3:01:fb:45:5a:bd:2a:e3:ef:9e:79:76:a0:e3:8e:
                    ee:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5C:0D:12:88:75:1F:61:F3:6D:8B:7D:9E:B7:62:2D:1F:0B:28:AC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE7938C49CF011F1B2E658E7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.208.0-154.196.212.255

    Signature Algorithm: sha256WithRSAEncryption
         c6:ae:62:fc:93:e2:57:bc:6a:e7:0a:cd:14:85:46:14:cb:64:
         ea:6c:03:46:92:3c:53:2f:4d:72:01:ec:5e:04:5a:d6:f3:dd:
         ae:29:3f:cf:d6:e0:4f:12:8e:bc:4d:0f:d4:7e:29:14:a6:94:
         15:53:35:f9:18:ca:be:9f:35:26:ca:55:ca:07:e4:92:39:b2:
         f5:14:27:cd:16:c5:f9:1d:6f:df:34:a4:d4:84:fc:4d:ea:c6:
         d8:14:c4:6a:63:0c:e3:db:df:18:d4:7e:42:60:68:95:37:9d:
         60:a0:e9:9a:56:d3:f9:a8:ac:2b:24:32:e8:4e:1c:e0:7a:2b:
         34:35:26:b2:83:7a:86:c3:56:99:4f:3f:f0:ae:9f:e5:25:e7:
         8e:8c:a3:60:46:ac:66:7e:70:ce:e9:1c:19:1a:47:10:92:54:
         fa:d4:45:af:5d:49:f1:4d:00:5d:ff:f4:3e:e1:b3:8e:ad:82:
         73:78:82:fa:cd:81:b2:f8:3a:be:b2:70:8e:82:4d:20:58:4e:
         91:e6:51:ec:d7:d5:4d:9d:b7:09:aa:52:bf:b1:25:34:45:e0:
         2d:0c:48:47:fd:ab:65:ba:4f:ed:57:57:73:97:b7:05:ee:ca:
         0e:fd:74:0c:83:7f:5b:e1:27:97:6f:dc:6b:d8:32:bc:fe:4b:
         fa:71:7b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----