Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC30CC9A9B8E11F1AD76611ACF1D38B0.roa
File:                     DC30CC9A9B8E11F1AD76611ACF1D38B0.roa (raw, json)
Hash identifier:          6uijdsPS92OXSqNrtANbbE9NXu34GHhm6aFKv4toxEw=
Subject key identifier:   BE:AC:28:E5:9F:9D:49:9D:27:41:A8:2F:9A:E6:DC:8A:B5:90:7A:8A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DFCC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC30CC9A9B8E11F1AD76611ACF1D38B0.roa
Signing time:             Wed 19 Aug 2026 05:28:51 +0000
ROA not before:           Wed 19 Aug 2026 05:28:47 +0000
ROA not after:            Thu 27 Aug 2026 05:28:47 +0000
asID:                     21859
IP address blocks:        154.193.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 24 Aug 2026 00:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122828 (0x1dfcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 19 05:28:47 2026 GMT
            Not After : Aug 27 05:28:47 2026 GMT
        Subject: CN=6a853f13-2d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d1:29:51:58:73:90:3d:07:df:b0:21:83:7e:
                    9a:7c:3c:be:2a:36:d5:cf:1a:1e:10:58:96:18:c2:
                    64:fe:20:19:05:f1:3f:6b:8f:af:83:2c:95:f4:d5:
                    53:27:aa:ed:0b:7d:83:1d:e4:39:ee:31:3b:1f:86:
                    6c:b3:6d:0d:49:bd:a3:50:f3:00:b2:e4:4f:ee:bc:
                    59:ed:ce:21:42:45:28:5c:a9:67:7c:f8:6b:4c:bc:
                    cc:b1:46:f6:17:41:cf:6c:7d:5b:c3:13:d1:d3:36:
                    9a:4d:59:b4:07:a9:ff:94:1c:0d:eb:41:7d:8c:c4:
                    d1:da:19:07:bb:2a:30:9c:25:04:0d:fa:b3:67:31:
                    ce:fa:3f:34:d9:60:42:01:76:13:27:91:8b:2f:00:
                    65:f4:e2:de:f8:5a:25:58:37:f4:45:df:0f:2f:73:
                    88:b8:6a:ca:f6:49:05:8a:17:7a:6b:a5:40:db:80:
                    50:a1:3c:ec:1e:54:c2:db:0a:d8:d7:9f:5e:ed:31:
                    6d:9a:6b:e4:fc:5e:ed:d2:1d:e1:9c:e2:6b:a8:10:
                    93:b4:80:3f:9a:33:91:46:06:17:88:c6:38:05:54:
                    aa:b6:cd:48:98:1b:15:58:ba:99:c3:b6:3b:7e:8f:
                    fa:84:7b:5a:b9:cc:aa:01:23:3e:56:d8:73:51:7b:
                    92:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AC:28:E5:9F:9D:49:9D:27:41:A8:2F:9A:E6:DC:8A:B5:90:7A:8A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC30CC9A9B8E11F1AD76611ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c6:f0:2a:04:6d:7d:c9:d1:18:b4:3b:74:a6:d0:48:90:3e:63:
         5a:f5:04:5e:5b:f7:4e:86:67:56:92:51:59:43:57:55:11:0e:
         31:f0:84:e2:73:c5:52:28:78:36:61:a8:bb:04:0e:b6:6d:01:
         7f:34:f3:40:5f:d9:96:ef:29:03:f2:c2:cb:87:69:18:c6:7d:
         6e:2c:d6:7c:41:95:63:a9:e3:dd:60:4d:d7:a7:ba:70:a3:22:
         5b:a3:03:69:7b:58:e3:3f:fb:c4:bb:f0:e2:62:d1:87:fc:7b:
         d6:3d:d0:7c:57:fd:90:ed:32:c8:26:6d:0c:b0:bc:40:3f:44:
         b6:42:97:e6:b1:5f:74:46:72:05:5d:b9:77:f7:f4:33:4a:0a:
         c3:fa:6b:55:cc:eb:2f:9f:e9:68:65:a9:b9:6f:bb:87:7c:64:
         5c:89:4e:fa:a9:0b:77:0c:42:d5:28:0b:9d:62:b5:af:79:82:
         b7:b8:cd:9d:a0:f5:32:20:a8:fc:f1:40:5f:f6:db:e6:d8:4c:
         1c:06:99:4f:02:f9:0a:b7:c5:70:37:77:08:5a:1c:0d:f8:8c:
         25:01:39:70:99:3f:26:df:07:19:5a:09:b9:dc:43:f3:ee:68:
         eb:8a:aa:a3:23:ee:be:56:7c:6b:9c:33:da:cf:c3:f4:64:6f:
         04:fd:16:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----