Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD264FBE97AF11F199AFB1A7CE1D38B0.roa
File:                     CD264FBE97AF11F199AFB1A7CE1D38B0.roa (raw, json)
Hash identifier:          j3soyDY2BH/Xhpk2rjPWAgfECgQHofxJekS+9VxSzZo=
Subject key identifier:   F5:39:74:ED:CA:36:4B:6D:86:BC:9A:E5:7A:10:4E:6A:C3:04:CA:8B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DF1E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD264FBE97AF11F199AFB1A7CE1D38B0.roa
Signing time:             Fri 14 Aug 2026 07:14:34 +0000
ROA not before:           Fri 14 Aug 2026 07:14:30 +0000
ROA not after:            Mon 13 Aug 2029 07:14:30 +0000
asID:                     17561
IP address blocks:        154.83.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122654 (0x1df1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 14 07:14:30 2026 GMT
            Not After : Aug 13 07:14:30 2029 GMT
        Subject: CN=6a7ec05a-aaa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9f:4b:41:56:d8:18:76:4d:1c:66:f7:98:68:
                    7d:05:2f:e1:db:dd:35:45:88:3d:1b:1c:06:20:4f:
                    1d:ef:a3:1d:4b:57:ff:f8:1b:70:3c:3e:8c:00:8b:
                    01:f3:ed:1d:7c:ae:cd:98:18:57:e2:47:1a:cd:7e:
                    6e:ef:2d:f0:62:45:df:25:28:a4:00:81:98:2a:bd:
                    f4:37:6b:24:98:2f:8a:08:6a:2e:72:a8:d1:82:2b:
                    cd:91:c2:8b:d2:c8:fd:41:12:1c:06:bd:ee:92:e8:
                    a7:57:33:87:10:04:43:1d:36:30:06:2a:8a:b0:87:
                    06:20:b0:aa:ba:f5:eb:f1:ea:74:6e:ea:de:64:5d:
                    83:26:5e:a5:41:24:24:c0:a8:fe:8e:a9:8f:89:47:
                    48:6f:b5:91:04:89:df:15:4f:ab:b6:2b:72:fa:cd:
                    f8:08:a6:a7:96:31:fa:fd:b4:c3:8b:85:f9:2c:47:
                    69:91:56:ba:d6:30:57:2d:70:a9:18:2f:ac:b4:6e:
                    e3:61:57:78:12:ee:05:a8:44:d8:0f:9d:51:3d:15:
                    9b:a3:e5:5a:48:59:f8:b8:20:a2:b3:5b:db:db:86:
                    5b:c3:78:36:ca:a6:ec:ac:53:42:c9:10:59:70:60:
                    73:5d:72:17:98:ab:30:6f:85:d4:d9:10:83:44:85:
                    df:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:39:74:ED:CA:36:4B:6D:86:BC:9A:E5:7A:10:4E:6A:C3:04:CA:8B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD264FBE97AF11F199AFB1A7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:a8:f5:5e:82:fd:16:cf:30:0b:fb:62:c4:03:a0:34:99:60:
         ed:b3:8e:bd:1f:ea:ee:55:a5:87:8c:c1:af:c8:92:a8:4d:f8:
         ca:20:8a:20:a4:61:62:25:bd:eb:07:7d:92:dc:f0:f6:d4:56:
         30:13:29:6e:cf:e4:e6:7f:25:6c:47:c2:7f:c2:e4:30:8b:cf:
         31:a5:b7:53:d2:68:d4:8e:1e:f0:d3:34:64:04:b2:ad:29:3a:
         79:a8:36:a5:3e:e1:fe:44:fe:3c:af:0c:a4:d1:40:ba:f9:ff:
         b0:fd:f7:f0:24:42:a8:8f:c6:72:09:c1:8d:9f:9d:be:dd:e5:
         5e:94:57:c5:78:af:f1:f9:e0:b3:58:cc:df:8e:4b:d6:04:d3:
         18:94:44:3c:6a:ba:e5:28:3f:c6:38:09:a8:fe:5e:55:7a:e3:
         57:3e:54:61:85:16:1c:df:17:7c:ce:76:01:3e:7f:fc:eb:34:
         c1:ce:3a:af:24:5c:17:d1:ce:b2:8b:88:8d:5b:de:8e:d4:66:
         f7:38:c3:3d:fb:b2:0f:26:55:80:7d:97:2c:cd:bd:60:61:ed:
         5d:db:7c:34:79:1e:86:7b:84:92:01:e1:8d:68:fd:7a:da:ff:
         b9:3b:d2:3d:9e:26:7f:71:31:db:26:fc:ac:bc:a5:58:01:84:
         9f:f0:22:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----