Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D956E5E4B26411F1A95063A9CE1D38B0.roa
File:                     D956E5E4B26411F1A95063A9CE1D38B0.roa (raw, json)
Hash identifier:          X9OVandL4Ad6TBul85GxfVwKxl193Ql80uh18cdhQU0=
Subject key identifier:   3D:C9:6E:BF:D0:14:B1:D2:88:63:94:27:BD:6F:1B:7A:CA:9A:F4:33
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E898
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D956E5E4B26411F1A95063A9CE1D38B0.roa
Signing time:             Thu 17 Sep 2026 06:56:04 +0000
ROA not before:           Thu 17 Sep 2026 06:56:00 +0000
ROA not after:            Sun 27 Sep 2026 06:56:00 +0000
asID:                     212238
IP address blocks:        154.222.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125080 (0x1e898)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 17 06:56:00 2026 GMT
            Not After : Sep 27 06:56:00 2026 GMT
        Subject: CN=6aab8f04-1b9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ff:dc:63:98:72:b1:e8:9e:e7:87:45:6d:fb:
                    29:8c:32:42:f1:7b:40:6c:cf:a3:71:ce:31:c7:7e:
                    b5:fb:5e:0f:9c:e2:1b:26:88:69:35:ec:bd:c4:47:
                    85:ae:83:8e:db:11:a3:9f:61:e9:00:05:6a:9f:ce:
                    04:9c:7e:14:8f:49:a1:61:63:dd:5a:e9:1c:20:72:
                    a4:2a:01:bd:a1:3c:44:0b:8f:a9:8a:22:3c:51:6e:
                    aa:bb:6c:7a:55:a3:12:6c:ae:9e:e4:ad:4c:0d:38:
                    cc:65:ec:c3:90:b5:cb:05:12:6f:3b:a7:77:20:a2:
                    f1:5c:7a:68:95:b2:5f:8b:65:87:27:bc:18:aa:c4:
                    ef:b0:f3:1e:63:99:06:5a:d4:7e:3a:41:39:c5:c9:
                    70:31:92:0e:ac:4c:1f:cb:9a:62:7b:ec:2b:a5:31:
                    6b:b7:5c:76:9a:96:bf:7f:03:03:55:d0:60:0e:8c:
                    b0:97:4a:75:4c:2a:d7:c7:9e:9f:7c:9f:a3:85:f2:
                    82:74:3f:96:f5:01:6e:13:38:44:25:5b:51:2a:11:
                    82:22:3e:e4:7d:79:27:df:f9:74:64:70:66:5d:60:
                    3e:25:8e:4b:57:23:f5:4d:da:39:af:67:60:6c:bb:
                    5b:9d:43:d3:4b:00:63:fe:5f:e1:86:e0:24:d7:e8:
                    84:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C9:6E:BF:D0:14:B1:D2:88:63:94:27:BD:6F:1B:7A:CA:9A:F4:33
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D956E5E4B26411F1A95063A9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:39:43:f2:4c:61:3b:9c:2c:98:36:26:ed:95:14:20:a0:3e:
         76:ad:22:57:c1:4d:b7:f9:78:03:1e:ef:cb:ca:4b:fc:3f:b2:
         49:8f:9c:29:6c:5d:56:a8:b6:47:53:44:89:cc:64:52:82:d0:
         19:1f:04:83:1d:b1:68:7d:8b:35:c6:b4:1e:90:cd:18:be:36:
         93:12:05:01:b9:b3:79:71:66:91:62:43:d4:e3:3d:a8:3f:e8:
         06:fd:25:a7:0b:9f:77:0c:60:e0:ab:05:77:f1:69:cf:d9:09:
         f2:b0:4e:75:92:a6:f2:a6:3a:ff:13:09:d1:63:4b:e0:8d:fc:
         de:bf:3f:45:06:6b:c7:d4:2b:c1:cc:36:ec:06:5e:d5:a5:28:
         0b:c0:97:43:de:46:5b:c6:52:60:cd:f5:5a:ec:e9:46:f3:36:
         44:5e:84:d5:04:66:ad:b2:3c:fd:1e:a9:69:98:3a:1d:0a:d9:
         be:81:72:9a:e3:2c:33:96:c6:83:f7:71:a1:c4:7f:8f:13:94:
         4f:5c:da:86:40:7c:ea:02:c7:be:3d:04:37:b8:00:5e:d4:7d:
         60:0a:30:43:76:bf:3e:54:e7:29:ea:28:58:43:62:cc:9a:ec:
         c8:fc:62:c6:8d:7d:4b:32:6d:d2:4f:6f:16:61:71:35:34:6b:
         72:58:c6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----