Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D44507C0A05D11F1A5F050FCCE1D38B0.roa
File:                     D44507C0A05D11F1A5F050FCCE1D38B0.roa (raw, json)
Hash identifier:          AOWM+ZEB54k5O8XXJzGGDzdrFtNKmP3wqK2JPo2Vr6U=
Subject key identifier:   FE:BF:20:4C:AA:F0:A9:40:CE:6F:D1:DD:02:87:52:78:2B:EA:D1:58
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E2A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D44507C0A05D11F1A5F050FCCE1D38B0.roa
Signing time:             Tue 25 Aug 2026 08:20:28 +0000
ROA not before:           Tue 25 Aug 2026 08:20:24 +0000
ROA not after:            Thu 01 Oct 2026 08:20:24 +0000
asID:                     199707
IP address blocks:        154.198.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123556 (0x1e2a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 25 08:20:24 2026 GMT
            Not After : Oct  1 08:20:24 2026 GMT
        Subject: CN=6a8d504c-c42d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:73:78:fa:e0:21:3f:f7:b7:28:ad:f1:7f:f5:
                    94:47:09:40:a0:8d:e4:3b:f3:53:b1:b8:4d:96:2b:
                    60:d4:35:c5:4e:43:55:c4:1b:4b:3f:8a:dd:a8:ff:
                    74:1b:07:45:44:20:3f:88:a2:d2:e0:b9:58:1f:dd:
                    13:4d:c6:d8:6f:59:42:e5:ba:76:60:89:fe:1a:26:
                    05:99:99:76:87:12:04:7b:fc:26:9b:8e:65:17:83:
                    56:69:5b:99:41:55:3b:a0:c1:b7:b8:ac:05:18:ac:
                    86:f4:a2:31:31:ac:57:69:9c:95:67:c3:d6:58:15:
                    13:6e:d9:c2:9d:db:26:69:64:3e:68:39:39:62:b0:
                    7b:5f:e5:bd:c2:b9:30:e6:f7:5a:e3:10:72:53:b9:
                    3e:d0:2d:23:cc:e9:10:27:28:b9:32:1d:bf:07:36:
                    fb:75:1a:3e:eb:ed:d3:0a:ff:44:41:d2:c6:f2:d6:
                    e8:40:9a:ad:c6:ea:66:3e:b4:2f:2a:8d:99:ed:6f:
                    9b:57:05:23:04:56:c1:a0:41:ed:d1:66:13:cc:bb:
                    9a:49:4e:b7:5c:b8:9a:c4:07:b9:fd:97:dc:90:63:
                    b5:b8:f0:43:15:16:16:b8:55:29:cd:ed:c5:3b:c0:
                    85:12:6c:ae:f0:04:0d:93:a4:41:1a:a8:17:f2:43:
                    bb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:BF:20:4C:AA:F0:A9:40:CE:6F:D1:DD:02:87:52:78:2B:EA:D1:58
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D44507C0A05D11F1A5F050FCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.198.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:b2:bb:d7:03:0e:c3:5c:2b:37:3a:d1:57:7a:24:d7:06:ee:
         94:5f:cd:4e:37:ce:bd:72:7d:a0:0a:f0:c1:3f:1f:61:87:1e:
         81:3c:91:ac:b6:88:e8:76:65:8d:0a:a7:bd:ab:ff:d3:08:d0:
         03:35:ce:a1:70:5c:e2:38:19:9b:57:0b:46:e4:e1:0c:12:e0:
         e9:b4:11:28:9e:b1:56:b8:6c:1e:61:87:35:f8:f1:12:7b:30:
         4c:8b:bf:02:b4:97:e0:ae:ac:50:20:37:b3:d4:83:67:f3:86:
         83:0d:fa:b8:ac:4c:54:d0:00:72:b8:36:3b:07:1b:7f:21:40:
         ae:8a:ed:57:19:f6:b1:bf:60:4c:eb:3a:d4:dd:1f:ce:90:7d:
         43:47:8b:11:e9:fc:36:5a:64:58:13:0a:b8:02:c9:76:f7:ad:
         e8:2c:da:b7:7a:a2:98:ff:ff:db:8d:38:d9:c2:7f:ed:0b:07:
         e1:15:34:e6:1d:a2:be:26:2d:e6:3d:d6:39:31:bd:1c:f5:30:
         05:c6:c0:65:1d:0e:36:c7:a7:4f:12:c3:97:db:f1:45:fd:b4:
         81:94:2d:57:05:2d:4a:98:a0:ed:58:fa:fd:77:d1:70:83:24:
         34:a5:62:57:04:a6:73:01:70:34:ae:b8:41:4c:dd:2f:93:21:
         ba:19:c9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----