Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8302416B01611F18D8BE0B2CE1D38B0.roa
File:                     B8302416B01611F18D8BE0B2CE1D38B0.roa (raw, json)
Hash identifier:          uhodMlsCQmGgqjkpfnW+OIc0cxzdxLYAu6MdOLtR/Yg=
Subject key identifier:   FD:5D:8B:A7:BE:ED:0A:5D:B6:76:B0:D5:29:C6:9A:32:FE:2A:BE:9E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E822
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8302416B01611F18D8BE0B2CE1D38B0.roa
Signing time:             Mon 14 Sep 2026 08:31:45 +0000
ROA not before:           Mon 14 Sep 2026 08:31:41 +0000
ROA not after:            Fri 30 Oct 2026 08:31:41 +0000
asID:                     18013
IP address blocks:        154.201.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 21 Sep 2026 18:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124962 (0x1e822)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 14 08:31:41 2026 GMT
            Not After : Oct 30 08:31:41 2026 GMT
        Subject: CN=6aa7b0f1-664b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7e:7c:1e:a2:e0:14:d8:75:5d:89:2e:be:8d:
                    48:cf:d7:43:b4:d7:0b:61:77:08:76:0e:41:bb:48:
                    3e:c8:c9:ba:61:56:7a:98:b0:f9:a9:ef:d6:09:c6:
                    39:2d:56:12:fb:78:51:69:b4:67:89:d2:7d:f9:8b:
                    29:d3:35:ee:28:1a:6d:71:ce:9b:13:74:72:09:99:
                    1e:c7:2a:72:a7:13:c8:11:1c:c9:34:16:cb:9d:7c:
                    63:d4:f4:51:78:b7:b3:21:14:21:70:32:9a:6c:92:
                    9d:35:7d:0a:ee:03:76:55:84:c0:a4:62:08:de:1c:
                    f7:7b:2a:84:87:d0:15:24:0c:2c:3e:8b:5a:78:e9:
                    90:5d:12:69:7d:0b:cd:49:d3:3b:73:e5:95:0d:71:
                    7e:9a:23:98:c6:91:1f:f7:85:58:b5:64:32:7a:16:
                    b7:12:77:44:a4:4f:a7:fd:a9:53:bd:9b:6a:a7:1d:
                    ca:36:ab:89:46:ad:28:d8:f2:02:09:a8:0c:b6:64:
                    30:cb:4c:dc:11:b7:8d:1e:7c:7d:43:85:ab:6b:cc:
                    48:54:fd:36:da:b2:90:67:cd:b8:93:87:9e:e0:df:
                    ba:cc:26:db:09:52:9c:95:8b:93:de:87:50:e6:0d:
                    a6:a4:4f:6a:ca:11:bf:a7:1e:64:8a:0e:6f:93:19:
                    c4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5D:8B:A7:BE:ED:0A:5D:B6:76:B0:D5:29:C6:9A:32:FE:2A:BE:9E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8302416B01611F18D8BE0B2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         54:04:69:84:0a:9b:50:0f:6a:ed:4b:69:74:ee:17:01:11:6a:
         c7:28:0f:a3:6d:6a:21:c5:ca:54:ee:95:31:c0:62:d4:22:f6:
         a8:0c:39:3b:8a:e4:02:02:6c:c5:e6:c3:92:df:1e:75:01:24:
         14:ca:51:67:2b:b1:ba:50:fe:22:13:d9:d4:eb:a0:67:73:e1:
         1e:75:21:bb:4c:2d:72:17:d2:d3:68:46:0c:01:ed:93:82:44:
         8a:24:36:7e:8c:5c:83:a9:c6:0a:61:6f:51:a7:db:7e:be:a5:
         3d:15:e1:42:00:18:e5:44:26:c4:33:ef:e5:fc:fb:5b:99:7a:
         8d:d1:6d:93:c3:55:c6:8d:b8:bf:c2:46:5b:6a:f3:20:3f:07:
         57:73:f7:a6:40:bd:a3:93:d2:2a:2d:4d:dd:73:23:0b:03:06:
         ce:b1:5d:c2:b5:d0:93:7b:65:f7:09:91:b6:fb:04:af:dc:38:
         0e:6a:da:9f:81:46:a4:d8:ca:b4:fa:9a:4d:d9:57:16:8e:86:
         d8:d5:8f:fe:0f:20:4d:7a:3d:4a:bf:21:47:ed:da:88:7e:d9:
         3f:db:bf:a2:c9:c5:f7:2a:5f:f6:e0:2b:5d:44:ed:ef:b1:9f:
         27:98:30:3c:c9:a4:26:42:07:57:ea:75:aa:7b:d5:b5:29:0c:
         c8:16:e7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----