Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D08CFB8E9F8F11F188D0DE18CF1D38B0.roa
File:                     D08CFB8E9F8F11F188D0DE18CF1D38B0.roa (raw, json)
Hash identifier:          CR2hdor19MkeXLmzYRS8/F6jLn76B6634bWCJCJGrHM=
Subject key identifier:   E1:59:28:09:B4:92:38:D6:AE:86:C5:6A:A0:E3:D9:A1:08:E3:2B:00
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E206
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D08CFB8E9F8F11F188D0DE18CF1D38B0.roa
Signing time:             Mon 24 Aug 2026 07:45:46 +0000
ROA not before:           Mon 24 Aug 2026 07:45:41 +0000
ROA not after:            Tue 22 Sep 2026 07:45:41 +0000
asID:                     141159
IP address blocks:        154.94.228.0/22 maxlen: 24
                          154.94.228.0/24 maxlen: 24
                          154.94.229.0/24 maxlen: 24
                          154.94.230.0/24 maxlen: 24
                          154.94.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123398 (0x1e206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 24 07:45:41 2026 GMT
            Not After : Sep 22 07:45:41 2026 GMT
        Subject: CN=6a8bf6a9-a646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fb:6a:80:e5:e8:4c:f3:64:c0:a1:93:b5:35:
                    66:33:91:fb:93:27:64:ff:b2:b7:29:ce:c0:2f:bb:
                    c7:99:01:bb:35:3b:af:2c:e4:44:70:91:0c:62:fb:
                    05:7f:7a:9a:57:41:d8:0b:ed:71:ff:55:fd:9e:7c:
                    27:a4:03:74:d8:92:3a:b8:77:82:e1:86:eb:a3:96:
                    ff:4f:e3:45:26:b6:08:a1:c1:0a:94:c6:a6:56:6c:
                    d6:a2:98:b0:9b:4d:75:78:4e:e9:3a:d2:3a:f4:53:
                    93:36:94:99:87:b9:85:93:36:ad:73:e7:87:2f:8d:
                    04:6d:03:be:ed:74:d0:1a:78:06:9a:85:84:c7:48:
                    da:89:96:11:60:45:bc:28:68:af:01:ab:68:c8:3e:
                    82:2a:e9:38:81:b0:d3:ac:81:0a:f7:3e:d0:35:46:
                    72:a8:c1:ef:51:0a:8a:95:e7:d4:4e:8b:cb:19:1f:
                    58:f1:09:d9:44:9d:90:b7:9f:e1:91:77:b5:62:7c:
                    6e:2a:6d:7c:f2:20:23:3d:f1:fb:a4:78:cd:7e:fd:
                    99:d6:9e:89:c9:6b:6c:b9:6d:ec:68:e1:ff:73:4c:
                    96:31:e2:76:b4:d9:7d:57:45:f1:6d:96:21:85:a2:
                    e8:79:7a:db:f0:6d:89:f0:7a:65:e5:ce:97:e7:08:
                    f6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:59:28:09:B4:92:38:D6:AE:86:C5:6A:A0:E3:D9:A1:08:E3:2B:00
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D08CFB8E9F8F11F188D0DE18CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:ec:1e:bb:5f:a5:67:6b:e9:38:48:de:33:d0:40:91:2c:9f:
         9f:a7:c7:b5:96:ee:dd:5a:c8:4b:67:47:d3:e9:c5:3d:72:cf:
         04:d1:ea:74:73:13:e1:26:d7:22:94:25:49:a4:e7:62:d2:34:
         b6:5e:24:f0:60:bb:9c:f5:af:f2:e6:aa:69:f8:2f:a6:f7:c8:
         3d:81:4d:3b:36:b1:8b:37:3e:f5:79:3d:36:ff:89:7e:b5:db:
         3f:7a:01:dd:95:11:cb:93:93:e1:b5:ba:ca:34:04:f7:6b:35:
         d4:97:be:aa:4a:e6:0a:c1:83:1b:fa:0f:38:15:96:e5:79:74:
         e9:cc:7b:45:6b:e0:12:f3:c2:b3:a8:2a:59:a5:a6:59:7a:79:
         35:21:0b:26:d4:1c:9d:7e:15:3f:ac:0c:51:8a:72:a8:d9:dc:
         d3:ab:c1:ba:61:cc:91:ea:2a:a6:69:ad:00:c5:b2:4d:bf:a8:
         6e:f4:25:13:14:88:2c:70:fa:67:37:0e:3d:ce:da:d3:e7:72:
         09:93:2a:87:86:3f:5d:12:f2:48:ae:63:a7:64:19:4b:f8:1a:
         a1:91:34:29:28:00:13:23:47:9b:b0:d5:de:89:99:20:fb:ce:
         d0:af:00:81:7a:cb:f3:ee:8e:ad:af:7a:f8:09:66:32:ea:36:
         d8:a1:32:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----