Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4434C869C8D11F1A152581ECF1D38B0.roa
File:                     F4434C869C8D11F1A152581ECF1D38B0.roa (raw, json)
Hash identifier:          30SW1GSihoOo0ARWLPUUBlsG0/tQbcAWnEdrSeZlItM=
Subject key identifier:   A7:E7:AE:82:6C:B0:1E:EB:2A:98:E9:7E:6B:F6:B9:54:0E:0D:AB:AB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E0A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4434C869C8D11F1A152581ECF1D38B0.roa
Signing time:             Thu 20 Aug 2026 11:54:53 +0000
ROA not before:           Thu 20 Aug 2026 11:54:49 +0000
ROA not after:            Sat 26 Sep 2026 11:54:49 +0000
asID:                     154177
IP address blocks:        154.93.104.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 08:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123044 (0x1e0a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 11:54:49 2026 GMT
            Not After : Sep 26 11:54:49 2026 GMT
        Subject: CN=6a86eb0d-d522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:91:e5:cb:43:43:c7:05:44:5e:65:f0:1b:d5:
                    60:f1:15:c4:f1:07:98:78:03:28:46:60:40:9b:fe:
                    b2:39:fa:d8:3b:93:7a:fc:53:57:97:6e:b1:b4:c7:
                    08:26:49:ce:94:4d:e2:5c:4f:a6:3d:50:10:b1:67:
                    c5:5f:b8:d0:8d:3d:41:c9:c9:89:59:77:5c:d9:80:
                    0a:08:48:1a:76:0c:5e:12:a2:4b:96:4d:59:a3:3f:
                    c3:3e:19:e5:f6:04:89:fa:8e:7a:2d:7c:f5:73:f0:
                    25:4f:8b:d0:4b:69:3e:48:5f:1a:77:4e:6a:be:c7:
                    9d:9b:ea:ba:34:94:64:12:e3:14:6b:b1:8d:de:b1:
                    fd:7c:04:c7:29:8d:5a:83:30:6c:64:b6:a3:bf:34:
                    81:22:ca:06:93:42:a0:b7:38:7a:c3:8d:99:dc:1e:
                    6a:1e:f6:aa:4e:0b:2b:43:84:a9:3d:b4:5e:82:05:
                    d4:b6:10:45:93:4a:5e:4e:8c:db:69:7b:6a:7d:cb:
                    1c:61:59:a2:89:0c:61:3b:75:9e:d5:01:01:a6:ce:
                    0d:03:4f:6c:02:6b:39:6d:d2:18:92:2e:88:30:be:
                    de:44:3b:a4:5c:bc:77:f4:61:cc:92:1e:d9:98:c1:
                    ad:ad:d1:b8:13:76:b8:de:cb:7a:5f:26:56:43:f9:
                    04:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E7:AE:82:6C:B0:1E:EB:2A:98:E9:7E:6B:F6:B9:54:0E:0D:AB:AB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4434C869C8D11F1A152581ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.93.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c9:f4:b9:ae:e2:7e:ee:1f:cb:7c:6f:e8:9e:e2:50:b8:d6:da:
         54:2c:00:bd:9b:dc:aa:d6:c7:1d:3d:40:9a:0f:c4:54:ec:b0:
         03:7b:14:26:e6:de:37:e8:b7:88:f7:5c:9e:f7:92:cf:00:38:
         6d:ee:f6:97:71:74:a9:3d:3c:99:55:35:cd:b0:ff:54:c7:d2:
         b0:e4:74:b4:58:dc:11:a8:79:df:59:b2:fb:85:6e:0c:df:ed:
         a4:3b:e4:12:01:a5:c4:28:7c:b9:0a:2b:aa:95:6d:da:dc:5c:
         6b:7a:4e:77:01:97:af:94:19:03:6d:f3:fb:9c:cb:51:05:7c:
         67:e2:5c:6e:d9:e1:88:bd:1a:36:1b:da:e7:70:46:2a:70:eb:
         74:1d:f0:e1:3d:94:76:da:aa:d0:40:4d:47:21:26:de:64:2d:
         45:e7:3e:a5:2e:47:e3:ef:22:a0:de:ad:b5:10:89:fc:4a:46:
         81:97:6e:2d:a5:fd:d0:46:c8:05:7a:f6:9a:3d:36:63:9b:8f:
         59:3f:8d:73:2b:38:95:88:7b:e0:61:83:d9:df:4d:d9:a7:25:
         f2:e1:37:60:9c:ce:0b:8f:eb:ac:f2:fd:80:cd:1f:b5:7e:bf:
         dc:c5:de:7b:63:62:41:f1:b9:9b:2c:12:a9:e2:63:98:05:0f:
         46:0b:db:0a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAeCkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODIwMTE1NDQ5WhcNMjYwOTI2MTE1NDQ5WjAYMRYw
FAYDVQQDEw02YTg2ZWIwZC1kNTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwpHly0NDxwVEXmXwG9Vg8RXE8QeYeAMoRmBAm/6yOfrYO5N6/FNXl26x
tMcIJknOlE3iXE+mPVAQsWfFX7jQjT1BycmJWXdc2YAKCEgadgxeEqJLlk1Zoz/D
Phnl9gSJ+o56LXz1c/AlT4vQS2k+SF8ad05qvsedm+q6NJRkEuMUa7GN3rH9fATH
KY1agzBsZLajvzSBIsoGk0Kgtzh6w42Z3B5qHvaqTgsrQ4SpPbReggXUthBFk0pe
TozbaXtqfcscYVmiiQxhO3We1QEBps4NA09sAms5bdIYki6IML7eRDukXLx39GHM
kh7ZmMGtrdG4E3a43st6XyZWQ/kEhwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKfn
roJssB7rKpjpfmv2uVQODaurMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GNDQzNEM4NjlDOEQxMUYxQTE1MjU4MUVDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBml1oMA0GCSqGSIb3DQEB
CwUAA4IBAQDJ9Lmu4n7uH8t8b+ie4lC41tpULAC9m9yq1scdPUCaD8RU7LADexQm
5t436LeI91ye95LPADht7vaXcXSpPTyZVTXNsP9Ux9Kw5HS0WNwRqHnfWbL7hW4M
3+2kO+QSAaXEKHy5CiuqlW3a3Fxrek53AZevlBkDbfP7nMtRBXxn4lxu2eGIvRo2
G9rncEYqcOt0HfDhPZR22qrQQE1HISbeZC1F5z6lLkfj7yKg3q21EIn8SkaBl24t
pf3QRsgFevaaPTZjm49ZP41zKziViHvgYYPZ303ZpyXy4TdgnM4Lj+us8v2AzR+1
fr/cxd57Y2JB8bmbLBKp4mOYBQ9GC9sK
-----END CERTIFICATE-----