Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDF05022A5D711F19CE372AACE1D38B0.roa
File:                     BDF05022A5D711F19CE372AACE1D38B0.roa (raw, json)
Hash identifier:          PTeUJhfuqXzr2SO6Gx6SfLadSuC0qq9HGX5HPGGdlD4=
Subject key identifier:   CD:B5:FB:81:66:E1:EA:02:67:93:65:76:A6:60:EF:77:A1:9F:8C:34
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E45A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDF05022A5D711F19CE372AACE1D38B0.roa
Signing time:             Tue 01 Sep 2026 07:35:45 +0000
ROA not before:           Tue 01 Sep 2026 07:35:41 +0000
ROA not after:            Mon 12 Oct 2026 07:35:41 +0000
asID:                     214941
IP address blocks:        154.193.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Sep 2026 00:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123994 (0x1e45a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  1 07:35:41 2026 GMT
            Not After : Oct 12 07:35:41 2026 GMT
        Subject: CN=6a968051-7837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a1:93:c3:00:74:5c:57:6e:9d:84:e9:ce:41:
                    a6:63:bd:a1:08:d7:61:1a:2a:c3:51:1e:21:09:6a:
                    9c:47:85:d6:68:7f:84:2f:ec:80:41:03:48:12:28:
                    fe:75:ba:8c:fe:6a:f8:84:ce:2e:42:ef:bd:a3:19:
                    5e:ad:ff:e8:e1:04:41:65:01:5e:8b:5e:7e:48:c5:
                    f9:6e:14:fe:0c:a8:3a:66:7a:7b:31:16:29:0d:d4:
                    6b:95:8f:1f:c6:f2:7b:1d:14:6e:b5:3b:d0:5a:fa:
                    4e:d2:ae:13:8a:bc:16:77:8a:3d:06:7c:57:4b:03:
                    df:56:4c:3a:f0:7f:e5:0e:2f:fd:64:4e:35:49:07:
                    34:77:ae:a2:07:b2:7d:71:e8:a2:05:ed:e0:e5:26:
                    4e:3f:c5:31:35:cb:6a:ad:35:c1:3d:ef:98:06:8f:
                    81:ba:85:40:6a:41:85:f9:18:84:7f:1c:04:98:7c:
                    f3:21:b9:f3:e8:37:78:69:2c:71:2f:2d:bf:28:9f:
                    18:05:a2:df:cb:f8:16:fb:9a:c2:d5:c1:75:b3:63:
                    39:db:cb:bc:5d:ba:b8:da:d3:d4:bd:a9:c2:22:8b:
                    ae:ac:1b:74:5c:46:57:28:1a:28:d9:7c:88:22:5e:
                    db:de:2b:9f:38:48:eb:74:a3:e0:e4:ba:a2:e1:4f:
                    c2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B5:FB:81:66:E1:EA:02:67:93:65:76:A6:60:EF:77:A1:9F:8C:34
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDF05022A5D711F19CE372AACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:5c:a2:18:1b:d6:9f:c7:56:63:b7:79:40:61:b9:6e:29:9f:
         3e:da:5e:0c:e6:30:7c:ae:35:fd:9d:3b:0c:47:10:63:1f:0e:
         17:fb:00:ba:e9:79:86:94:3c:fa:14:b7:09:41:6c:f4:de:4e:
         24:89:22:ca:92:3a:8e:22:38:3c:5f:5a:a2:fe:7f:5c:f7:4f:
         f3:e9:d1:c7:57:9e:5e:1a:e7:1b:90:8e:73:81:7a:d6:d8:a8:
         47:5a:b6:66:d4:3b:6f:78:96:aa:e5:39:a5:51:8d:84:b4:0a:
         d6:fa:4b:05:bc:72:e6:e2:82:f0:b2:bb:a1:16:75:73:68:c9:
         75:1c:0e:97:53:b8:5d:10:a9:9a:63:26:95:41:c5:ae:6e:fd:
         f5:c8:4b:7d:99:8d:ce:68:bf:e1:41:21:ed:9f:75:15:f2:02:
         70:41:b8:23:f1:a1:2f:bb:1a:8c:e1:98:a9:69:9e:fb:81:e9:
         a3:14:68:a0:fe:4c:d9:f7:36:a1:7f:72:84:54:4e:03:7d:1b:
         18:04:98:ea:b8:2b:b1:7a:de:04:f1:d1:36:ba:fc:60:99:8f:
         8b:93:48:ea:24:cf:a3:a0:97:2a:c6:83:16:73:1e:e3:5d:f1:
         b4:5d:9a:f0:8a:9e:16:35:66:a2:23:b9:b8:3c:ed:73:a3:66:
         fa:e8:fc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----