Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBAB6832B00E11F1AE537002CF1D38B0.roa
File:                     CBAB6832B00E11F1AE537002CF1D38B0.roa (raw, json)
Hash identifier:          VNg7IyN/qMMGyMRE8eCfReGkB+OvRAfMSNRa/6/SIgU=
Subject key identifier:   62:7F:69:07:37:C5:1F:54:05:83:22:41:9B:F6:32:10:F5:59:9F:4D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E80E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBAB6832B00E11F1AE537002CF1D38B0.roa
Signing time:             Mon 14 Sep 2026 07:35:02 +0000
ROA not before:           Mon 14 Sep 2026 07:34:58 +0000
ROA not after:            Thu 22 Oct 2026 07:34:58 +0000
asID:                     401701
IP address blocks:        154.94.224.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124942 (0x1e80e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 14 07:34:58 2026 GMT
            Not After : Oct 22 07:34:58 2026 GMT
        Subject: CN=6aa7a3a6-86d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:55:d6:6b:e9:7c:c1:86:f7:28:9f:b6:53:a2:
                    9e:1e:5d:5f:6b:74:c7:18:4c:54:44:55:4a:5e:1a:
                    3c:17:b4:5f:44:27:e2:a5:5a:f0:5d:e6:83:98:d9:
                    59:f1:8a:a3:24:24:57:c7:46:d3:61:5f:e9:67:1e:
                    56:a6:d2:18:2a:30:42:e3:61:ec:0f:c2:ef:81:cb:
                    73:8f:da:c0:34:36:98:bf:0e:a5:54:6b:3e:f4:f8:
                    67:18:a6:36:52:c9:e2:34:fa:4d:39:77:b8:81:b5:
                    14:a9:db:08:0a:f4:cf:68:f1:06:3d:09:b2:57:82:
                    1a:76:cc:82:4d:d3:28:88:2d:2a:31:3e:b1:f1:76:
                    9e:92:61:3b:ba:6d:62:0e:f7:0b:11:e3:1a:71:e4:
                    a6:ac:05:f1:fe:47:6c:75:fc:6f:72:ef:ea:c6:e8:
                    d1:7d:b1:af:dc:09:94:a0:04:fd:9d:13:21:0a:fd:
                    8f:40:b4:f7:2d:32:c8:65:81:ed:6c:88:5f:29:b1:
                    bd:12:0d:95:34:6d:39:8f:58:ef:79:86:1c:ce:77:
                    65:9e:73:5a:8b:4b:d9:60:e7:68:68:dc:5e:03:f5:
                    03:40:68:c7:69:6c:a6:14:78:6a:32:75:c9:96:3b:
                    0e:ab:d5:82:9e:c6:86:e7:30:ce:e7:a1:86:69:ee:
                    bd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7F:69:07:37:C5:1F:54:05:83:22:41:9B:F6:32:10:F5:59:9F:4D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBAB6832B00E11F1AE537002CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cd:b2:04:92:3a:0a:80:6b:a0:6c:25:d2:ee:8c:a6:ab:18:0c:
         54:91:bd:29:34:03:cd:ce:ea:76:be:ba:d3:ea:30:db:a5:6a:
         f7:77:d1:f5:e4:95:79:2f:1c:08:ab:c2:5f:dc:01:7f:11:27:
         50:70:df:47:82:4d:83:2a:f2:46:15:3e:83:77:fa:50:8f:31:
         b0:59:a5:76:a2:fa:7e:9f:eb:96:40:58:12:56:a3:80:8a:56:
         bf:9d:cd:7d:7b:d5:48:96:c3:af:30:dc:0c:f6:c7:3c:12:fd:
         a1:95:69:46:b7:28:70:f1:c6:4c:50:8b:e6:7a:31:7a:83:f8:
         35:0b:1b:20:17:17:b0:65:df:a3:67:2a:bd:89:b5:48:9f:bf:
         0c:59:71:0c:5b:72:53:a6:ab:75:30:cd:c6:75:71:61:5f:6f:
         59:a0:ef:b3:0e:59:0e:4a:1e:a3:f9:15:65:1c:a6:c9:29:d8:
         c9:d0:6d:68:e6:62:ba:88:31:48:b7:57:28:d2:6f:be:5c:64:
         87:75:f6:72:c3:b3:0b:df:c7:3c:60:7a:d0:94:ce:7a:39:42:
         dc:0b:23:f7:a2:50:c1:b4:e4:8d:d1:cd:36:e5:6a:aa:65:86:
         a3:17:de:10:a2:78:2a:c4:91:30:a5:d1:20:5e:37:5d:8e:5a:
         19:3a:41:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----