Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F42BBBA69FA411F194C29B19CF1D38B0.roa
File:                     F42BBBA69FA411F194C29B19CF1D38B0.roa (raw, json)
Hash identifier:          U2NLvi0ioZXMOqhbIBUOzr72aTZdxUn9iBYZXINpX/w=
Subject key identifier:   6E:D8:5D:B0:E9:D9:CC:22:41:31:8D:CA:03:FE:C9:B5:20:03:98:28
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E24A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F42BBBA69FA411F194C29B19CF1D38B0.roa
Signing time:             Mon 24 Aug 2026 10:17:05 +0000
ROA not before:           Mon 24 Aug 2026 10:17:01 +0000
ROA not after:            Wed 30 Sep 2026 10:17:01 +0000
asID:                     55933
IP address blocks:        154.201.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123466 (0x1e24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 24 10:17:01 2026 GMT
            Not After : Sep 30 10:17:01 2026 GMT
        Subject: CN=6a8c1a21-3b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:20:20:eb:30:e8:cb:9f:01:64:04:92:58:eb:
                    85:03:99:66:17:d0:89:5a:e7:88:6d:cb:09:b4:51:
                    ef:3f:0e:9b:98:0b:bb:ee:32:36:44:dc:99:a2:d8:
                    29:3f:45:83:9e:1c:a2:f0:66:e1:35:1c:7e:1e:75:
                    8d:a8:9b:ad:d3:cc:6b:2a:d5:ea:fe:ef:65:9f:71:
                    04:d7:ad:85:c0:12:16:ce:42:aa:95:85:2d:b6:1d:
                    33:5e:39:0c:2b:95:b8:64:f8:a7:4c:ec:b9:5c:1d:
                    ec:d1:c3:8c:63:08:61:3f:c7:fa:38:ca:5e:d9:44:
                    bb:e5:48:72:05:6f:47:df:7f:36:31:d5:55:3f:e5:
                    78:44:c1:47:ea:d9:b7:b1:ea:65:49:71:d9:e0:ba:
                    f2:ce:f7:0c:3d:c2:af:4f:26:58:cc:30:b6:f0:d0:
                    e3:01:71:b2:d4:1f:00:98:f5:87:ec:03:a0:e5:95:
                    68:36:d4:9f:35:b8:e2:30:b6:d7:a5:8d:dd:dc:cd:
                    18:f9:6a:57:aa:92:dd:76:32:41:cc:1f:fe:fa:0d:
                    30:f0:6e:0f:7a:ba:8d:75:2b:0b:e0:f4:eb:f4:d8:
                    3b:7e:a3:81:74:0b:51:28:8d:97:7c:e3:cc:ad:76:
                    35:1d:3a:ff:74:37:f7:7e:1a:3f:d8:b3:d4:6e:d1:
                    01:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D8:5D:B0:E9:D9:CC:22:41:31:8D:CA:03:FE:C9:B5:20:03:98:28
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F42BBBA69FA411F194C29B19CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3d:93:f5:98:17:a8:3f:eb:d1:98:27:60:07:66:b9:25:1c:b2:
         75:c8:33:61:ff:05:b1:fc:c6:da:fa:c0:07:5e:6e:06:1c:fd:
         b6:0f:7c:de:06:73:ba:42:6c:fc:ab:24:e8:2b:a6:a5:b5:d0:
         c3:87:c6:c3:a1:35:b1:97:cb:86:e7:da:95:15:23:c4:e7:ea:
         17:bc:16:93:40:0d:1a:fc:2a:20:75:ee:27:d5:a8:d0:73:2a:
         1f:53:db:57:cf:d2:61:e6:29:1b:2e:3b:51:aa:bc:f8:33:4c:
         69:b7:91:5e:d0:4b:cd:e6:80:db:ff:d0:c6:0c:9e:8c:30:6a:
         d4:cb:13:76:48:2a:6d:eb:cf:12:a2:03:81:69:12:84:f4:b1:
         88:2f:02:1c:fb:55:70:01:e1:cd:4c:90:37:2e:48:47:0e:a2:
         f5:ad:d5:2b:db:c6:06:e8:be:c2:04:c5:11:22:15:fd:26:e3:
         24:eb:4f:0a:20:d3:3d:bb:e1:fa:b9:73:89:93:93:a4:b6:df:
         f5:07:1a:d2:49:1a:50:e8:16:ba:65:a9:f7:f4:5e:22:80:c4:
         c6:46:17:f6:fa:9d:2a:a2:90:a2:e5:b4:6c:ba:9c:bd:82:e4:
         b7:8c:a7:f0:66:25:a4:6d:57:83:85:4f:d5:2a:c3:9a:e5:b6:
         4d:95:cb:d9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAeJKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODI0MTAxNzAxWhcNMjYwOTMwMTAxNzAxWjAYMRYw
FAYDVQQDEw02YThjMWEyMS0zYjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwCAg6zDoy58BZASSWOuFA5lmF9CJWueIbcsJtFHvPw6bmAu77jI2RNyZ
otgpP0WDnhyi8GbhNRx+HnWNqJut08xrKtXq/u9ln3EE162FwBIWzkKqlYUtth0z
XjkMK5W4ZPinTOy5XB3s0cOMYwhhP8f6OMpe2US75UhyBW9H3382MdVVP+V4RMFH
6tm3seplSXHZ4LryzvcMPcKvTyZYzDC28NDjAXGy1B8AmPWH7AOg5ZVoNtSfNbji
MLbXpY3d3M0Y+WpXqpLddjJBzB/++g0w8G4PerqNdSsL4PTr9Ng7fqOBdAtRKI2X
fOPMrXY1HTr/dDf3fho/2LPUbtEBPwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFG7Y
XbDp2cwiQTGNygP+ybUgA5goMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GNDJCQkJBNjlGQTQxMUYxOTRDMjlCMTlDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmslAMA0GCSqGSIb3DQEB
CwUAA4IBAQA9k/WYF6g/69GYJ2AHZrklHLJ1yDNh/wWx/Mba+sAHXm4GHP22D3ze
BnO6Qmz8qyToK6altdDDh8bDoTWxl8uG59qVFSPE5+oXvBaTQA0a/Cogde4n1ajQ
cyofU9tXz9Jh5ikbLjtRqrz4M0xpt5Fe0EvN5oDb/9DGDJ6MMGrUyxN2SCpt688S
ogOBaRKE9LGILwIc+1VwAeHNTJA3LkhHDqL1rdUr28YG6L7CBMURIhX9JuMk608K
INM9u+H6uXOJk5Oktt/1BxrSSRpQ6Ba6Zan39F4igMTGRhf2+p0qopCi5bRsupy9
guS3jKfwZiWkbVeDhU/VKsOa5bZNlcvZ
-----END CERTIFICATE-----