Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E54A94FAA77811F1BB96C605CF1D38B0.roa
File:                     E54A94FAA77811F1BB96C605CF1D38B0.roa (raw, json)
Hash identifier:          h0eCwPx5Mrc2uVsqWREqntG00WRR6DFAe1Ck2mX5G0U=
Subject key identifier:   86:B6:DB:53:8E:74:6A:9D:65:88:76:AB:5F:51:5B:6D:10:94:0B:06
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E519
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E54A94FAA77811F1BB96C605CF1D38B0.roa
Signing time:             Thu 03 Sep 2026 09:21:51 +0000
ROA not before:           Thu 03 Sep 2026 09:21:47 +0000
ROA not after:            Fri 16 Oct 2026 09:21:47 +0000
asID:                     142032
IP address blocks:        154.222.16.0/20 maxlen: 24
                          154.222.16.0/21 maxlen: 24
                          154.222.16.0/22 maxlen: 24
                          154.222.20.0/22 maxlen: 24
                          154.222.24.0/21 maxlen: 24
                          154.222.24.0/22 maxlen: 24
                          154.222.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124185 (0x1e519)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  3 09:21:47 2026 GMT
            Not After : Oct 16 09:21:47 2026 GMT
        Subject: CN=6a993c2f-836e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:04:a6:76:3d:2c:01:07:fc:71:e0:71:4d:13:
                    76:99:e3:7e:c8:74:58:8a:27:1a:72:ab:51:52:c5:
                    70:bd:e5:69:cb:df:33:4e:3f:ba:f0:7e:2e:dc:84:
                    a8:ee:67:97:d8:41:c0:86:92:41:7e:a4:dc:43:73:
                    33:0c:d1:60:9d:e7:ce:2a:87:4e:1a:ce:f3:bf:e7:
                    dd:85:00:83:97:1f:a6:c6:62:32:14:ba:29:48:66:
                    2e:4b:a2:a6:a7:5b:e6:81:af:1e:77:bb:8c:41:8d:
                    d4:20:18:a9:9d:59:d4:8c:d8:9c:42:35:a2:1d:93:
                    55:47:7f:fc:a1:bc:e9:ee:61:12:12:e4:30:bd:cb:
                    5c:ae:15:dc:e3:c9:87:5d:60:6d:47:0a:8c:21:91:
                    fe:6f:d8:e3:9e:bd:fa:60:e2:2d:5e:52:ba:83:9f:
                    a8:83:d8:fd:8e:76:ca:0c:9d:5d:42:ba:cb:80:94:
                    04:52:26:5d:e9:38:fc:78:31:03:b1:e3:7c:75:4d:
                    67:e0:c4:69:3e:73:af:47:82:65:05:e9:9c:9e:32:
                    6d:ad:9d:fc:d6:eb:b5:65:3e:4e:b6:f8:81:71:6e:
                    30:21:0a:18:c5:d5:ec:c2:fb:9f:e1:5f:bf:2a:b2:
                    ce:2a:4f:37:18:69:22:0c:f9:4c:22:30:31:6d:5d:
                    44:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B6:DB:53:8E:74:6A:9D:65:88:76:AB:5F:51:5B:6D:10:94:0B:06
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E54A94FAA77811F1BB96C605CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         34:ff:af:db:97:ef:f7:6d:09:0a:24:99:9a:c5:fc:52:dd:a5:
         9c:5f:0e:f3:08:d0:2e:26:53:cf:9d:ff:83:4a:b3:bf:fb:b4:
         f8:e4:eb:a4:87:38:22:b8:82:b5:ab:02:23:91:18:ed:79:a8:
         a0:45:cf:18:ab:3a:05:4e:19:1d:76:e0:2b:ac:18:d1:e2:6f:
         42:6c:48:4e:ed:97:7a:82:d1:62:3b:e4:e7:a5:1c:6d:48:53:
         f6:95:86:1a:b2:fe:f4:23:dc:3f:4c:14:91:14:da:54:54:a0:
         5f:74:e2:f3:c6:ca:9d:ed:41:ea:c3:ba:ca:55:66:e6:fe:38:
         72:9b:62:b7:06:e3:c0:eb:60:bc:f0:7e:b3:e6:e0:ed:3e:c8:
         77:c2:73:a3:e6:62:6e:75:5f:31:f3:c9:47:b8:75:ca:9a:23:
         0d:9e:38:7a:97:ca:cc:63:8f:46:57:ce:bb:b3:c9:2f:37:b1:
         54:15:b8:6f:dd:31:eb:a5:2b:43:65:27:50:71:67:68:49:06:
         b9:21:a2:34:17:ae:f1:2c:cd:45:da:13:10:b5:d4:fc:4a:38:
         fe:f0:4b:c2:54:90:33:00:fd:98:85:6b:05:02:f4:b6:29:a2:
         53:03:64:79:1a:ff:56:81:59:3b:4b:b8:a4:ce:0d:c0:55:b6:
         86:c6:75:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----