Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9D2BA569D4311F182F608F6CE1D38B0.roa
File:                     D9D2BA569D4311F182F608F6CE1D38B0.roa (raw, json)
Hash identifier:          di4tmxx1KwURwkhk16O8PlLEK8mVYGWRTIQWPms/6Wg=
Subject key identifier:   36:6B:5E:D9:8A:4C:A0:30:1B:E9:EB:FC:F5:D9:4A:BC:69:8A:9A:3F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E184
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9D2BA569D4311F182F608F6CE1D38B0.roa
Signing time:             Fri 21 Aug 2026 09:36:57 +0000
ROA not before:           Fri 21 Aug 2026 09:36:53 +0000
ROA not after:            Sat 28 Nov 2026 09:36:53 +0000
asID:                     401696
IP address blocks:        154.219.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123268 (0x1e184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 21 09:36:53 2026 GMT
            Not After : Nov 28 09:36:53 2026 GMT
        Subject: CN=6a881c39-e1d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b4:3e:03:28:39:10:e8:7d:75:c2:9b:aa:bb:
                    1e:2b:c1:23:9b:82:0a:80:af:2c:d7:ca:a4:69:82:
                    42:27:fb:94:e9:9e:11:8e:96:73:c6:ad:f9:4a:6f:
                    d3:93:d5:15:5a:72:5e:4d:17:53:72:df:34:70:b3:
                    9a:0e:e4:ab:48:8b:04:e9:a6:28:5e:08:c7:a9:0a:
                    45:07:6f:5b:9f:bc:55:e7:93:ad:18:14:5f:6e:75:
                    7b:3d:4e:23:36:a2:26:90:20:5d:33:8c:bf:2c:b6:
                    f1:c0:21:fe:55:23:e6:4b:8b:fb:1d:a7:89:ec:0d:
                    ef:f2:c3:d2:ad:65:22:2e:7e:48:11:54:35:6e:70:
                    d8:60:0c:ba:e5:18:1d:b9:76:de:b4:ad:41:e4:22:
                    a1:e2:f8:97:71:9e:4c:81:a0:3e:6b:e0:c1:bb:eb:
                    e4:a8:f7:11:57:3d:e1:5c:73:c0:3c:7b:12:0c:92:
                    27:be:98:c2:80:45:93:67:f4:27:98:d9:67:6c:1a:
                    d9:04:15:68:a2:0b:f0:fe:a6:29:ec:91:23:ad:70:
                    2b:65:fd:77:c4:21:16:d7:dc:f5:f5:32:bb:7e:eb:
                    9c:90:d0:d2:ba:4b:6f:51:f1:58:05:e3:0a:55:c4:
                    f8:d7:3c:5b:92:9e:f3:8a:6a:41:4b:62:0a:8d:8a:
                    64:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6B:5E:D9:8A:4C:A0:30:1B:E9:EB:FC:F5:D9:4A:BC:69:8A:9A:3F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9D2BA569D4311F182F608F6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.219.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8c:51:e1:19:d9:52:f4:9d:9a:17:da:00:9f:c6:b6:4c:41:e0:
         75:af:5f:0e:a2:13:1a:5a:76:ad:41:ea:3d:dd:48:30:dc:03:
         42:ba:e1:11:b7:b9:96:8c:36:e8:86:60:c6:a3:a5:54:fb:2e:
         46:91:a3:ad:36:40:6c:1a:b4:2e:5c:9a:a6:cf:0f:90:c6:ed:
         2b:be:91:e4:51:ea:cd:74:a1:35:a7:b3:a6:75:0e:f2:54:19:
         12:5e:d0:db:8f:97:d6:40:e3:64:6e:67:bb:99:76:a0:9b:e5:
         b4:a7:45:d9:8a:73:f3:e2:fe:be:d5:7b:1b:a1:b0:8d:19:6a:
         12:cb:e2:52:56:80:a6:5b:11:02:74:47:74:2a:3d:17:8d:fe:
         85:cb:1f:ef:22:7b:a7:32:66:e4:4c:8a:38:fe:72:41:d7:0e:
         3c:ca:e9:be:59:a9:1e:ed:df:57:7b:9a:f1:d4:66:63:80:03:
         bd:ed:48:48:3f:10:93:7f:9d:11:c0:7a:e5:33:e0:5b:f1:28:
         5d:35:25:60:97:55:df:8e:88:4f:ad:14:11:48:ee:fe:07:fa:
         e8:d3:0c:3e:fd:71:55:c8:53:61:2f:28:62:21:f3:d7:35:bf:
         89:ba:83:3d:22:14:45:97:ae:43:11:f2:f4:33:42:2d:de:c7:
         a9:f2:05:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----