Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1C0E7C29C6B11F19EE7D6D3CE1D38B0.roa
File:                     C1C0E7C29C6B11F19EE7D6D3CE1D38B0.roa (raw, json)
Hash identifier:          Km9+M6jZYph/BEuPcVgICjMeVo3miKC0/BsY9lDrHhE=
Subject key identifier:   E8:8C:A2:A4:74:08:06:B6:5F:19:B2:95:B4:FD:26:1A:CB:42:3F:F2
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E03F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1C0E7C29C6B11F19EE7D6D3CE1D38B0.roa
Signing time:             Thu 20 Aug 2026 07:50:05 +0000
ROA not before:           Thu 20 Aug 2026 07:50:01 +0000
ROA not after:            Thu 24 Sep 2026 07:50:01 +0000
asID:                     395886
IP address blocks:        154.89.144.0/20 maxlen: 24
                          154.89.160.0/19 maxlen: 24
                          154.89.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122943 (0x1e03f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 07:50:01 2026 GMT
            Not After : Sep 24 07:50:01 2026 GMT
        Subject: CN=6a86b1ad-bc48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b1:fe:ee:a0:25:25:d4:12:50:d3:c3:67:99:
                    a5:fe:77:d7:4b:41:1d:24:d8:b7:7e:44:c9:e0:0b:
                    db:e5:a5:c1:7c:09:9d:12:5c:b2:bc:bd:dc:f1:9b:
                    01:82:17:2c:f3:8f:10:9a:31:09:63:28:b7:3c:c6:
                    35:b1:7a:b3:7d:65:81:a6:75:6c:17:e6:6d:5a:42:
                    3c:37:59:ba:22:1c:af:ce:0f:f0:6f:31:98:13:0c:
                    3d:34:00:10:fb:cc:ad:3b:18:b8:8e:10:12:63:8a:
                    74:fe:93:78:b3:c2:ea:e4:8d:02:f2:4d:0a:16:b0:
                    48:72:ad:c9:39:f8:43:cc:01:8b:5d:b6:68:a8:55:
                    e9:6a:2f:55:71:a9:21:93:eb:0e:8b:3a:bd:12:22:
                    20:ce:c7:ba:b1:34:85:6f:30:46:b8:4e:01:9a:8f:
                    10:ab:0a:df:94:8f:5c:a5:fc:5d:ef:d8:d4:da:b0:
                    38:e0:0f:36:28:49:60:3f:ad:86:91:4d:aa:95:c1:
                    96:68:69:27:00:25:59:26:c0:7d:42:12:cd:bb:61:
                    93:32:fa:1b:1f:46:a1:54:2b:f8:d0:a7:1e:03:8f:
                    04:12:af:2c:68:34:36:d4:ec:a4:0a:ac:59:64:aa:
                    6a:03:4f:ac:9b:bc:9f:af:bb:97:77:e6:17:7d:aa:
                    7e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8C:A2:A4:74:08:06:B6:5F:19:B2:95:B4:FD:26:1A:CB:42:3F:F2
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1C0E7C29C6B11F19EE7D6D3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.144.0-154.89.207.255

    Signature Algorithm: sha256WithRSAEncryption
         4c:db:b7:22:a6:2c:56:26:02:3e:d3:61:7c:f6:e9:0d:69:66:
         2d:46:a0:38:11:2a:1e:ce:ec:b7:f6:fd:3d:4d:cc:1a:b9:a7:
         6a:41:e7:0a:42:f8:05:bb:ab:fe:2a:25:9a:c4:be:b3:cc:2e:
         ad:18:a2:c3:15:9d:1d:00:82:1b:ed:19:6d:f0:54:23:57:50:
         fd:b6:ac:05:c0:6c:f0:25:49:b6:62:20:f6:75:d1:6a:c5:af:
         a7:02:6e:01:27:70:c7:e6:77:92:78:90:ed:15:74:ab:5c:8e:
         41:29:b9:a6:9f:69:ff:cc:47:d0:8c:13:24:bc:42:20:92:c6:
         88:d1:68:1b:eb:0b:36:97:0d:34:5d:94:98:c8:f8:fb:56:dd:
         46:b9:a5:4c:fc:b1:7a:5d:9a:18:e1:31:ca:20:a2:18:f3:e5:
         e4:5c:8f:f8:d7:b8:fd:91:e6:ab:bf:28:30:d3:1f:18:9f:51:
         fe:67:b7:7e:5f:0a:d0:00:c6:13:31:be:f8:77:71:81:d3:be:
         3c:91:5c:63:7c:85:06:d7:87:60:0f:f5:00:85:3d:2a:3e:1d:
         55:b4:68:1b:b4:0f:42:fa:02:cb:cd:0d:97:c8:7a:9b:af:76:
         fc:04:f5:8d:76:a6:10:0e:b9:f1:16:50:85:88:aa:69:32:8c:
         4d:db:a5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----