Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4D23454AE7C11F18032F304CF1D38B0.roa
File:                     F4D23454AE7C11F18032F304CF1D38B0.roa (raw, json)
Hash identifier:          jVLuVL1CV/1BCW9rhv59UcBa3SxxfaPxMT2pcBURvss=
Subject key identifier:   9D:F3:10:AB:26:8B:2E:77:DB:92:7E:6D:39:21:A1:B4:C2:F5:6C:C6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E7A6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4D23454AE7C11F18032F304CF1D38B0.roa
Signing time:             Sat 12 Sep 2026 07:38:33 +0000
ROA not before:           Sat 12 Sep 2026 07:38:29 +0000
ROA not after:            Mon 21 Sep 2026 07:38:29 +0000
asID:                     274916
IP address blocks:        154.88.182.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124838 (0x1e7a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 12 07:38:29 2026 GMT
            Not After : Sep 21 07:38:29 2026 GMT
        Subject: CN=6aa50179-e57a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d3:d1:f7:c5:1b:51:1f:fb:0f:e4:c0:a4:4d:
                    ff:3b:ae:1f:12:90:56:5a:f9:e6:fd:3a:23:f9:72:
                    dc:95:f0:b3:a6:1b:e1:13:58:04:bb:55:47:d1:8c:
                    77:a8:39:ad:01:6b:e9:b3:87:0f:78:66:b1:59:f9:
                    37:96:eb:b4:ac:72:24:2d:94:d0:a0:81:85:59:e1:
                    b0:c3:f0:f7:53:a4:82:9c:d7:90:ff:ed:6e:bb:ab:
                    5b:f0:b8:3c:af:1d:af:74:77:d0:02:cc:3c:b8:e8:
                    4a:3a:4b:f3:43:e7:88:72:27:0f:a9:9a:f0:8c:03:
                    05:41:64:48:24:94:88:92:8f:ed:70:a2:21:2d:42:
                    ae:49:25:8c:19:9b:84:f4:c0:fa:28:8e:5b:51:a1:
                    ca:2b:b2:93:16:62:96:75:2a:37:56:5d:32:61:e0:
                    f3:71:31:77:7a:2d:d9:32:f1:ef:6c:13:72:57:af:
                    df:4d:c6:19:54:0a:9c:a2:2b:c5:ce:0a:c2:17:2c:
                    83:a6:c5:89:f4:fe:f3:03:53:f4:28:14:9e:35:88:
                    95:ae:9b:e7:97:b1:4f:61:67:d7:57:b1:c9:12:dd:
                    66:e8:fb:1d:21:bd:ae:1e:b3:64:18:0d:1e:ed:94:
                    b4:91:b9:c1:8d:00:3a:b2:95:2b:ba:1c:79:40:82:
                    f5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F3:10:AB:26:8B:2E:77:DB:92:7E:6D:39:21:A1:B4:C2:F5:6C:C6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4D23454AE7C11F18032F304CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:ea:b7:d9:d4:91:5a:c7:3d:83:0a:b5:55:76:02:1a:91:c3:
         33:57:64:38:58:33:10:27:33:0a:61:51:fb:06:2b:68:39:e9:
         8d:4f:b0:5b:81:4f:d9:df:68:5d:e5:d9:fb:a7:3d:de:61:d0:
         a7:a2:a9:a0:d4:42:37:78:83:00:8d:b4:41:3d:ca:a2:88:99:
         f5:17:53:ba:59:5e:ec:53:82:6c:e0:11:0e:9e:e2:da:ea:35:
         d2:77:04:ca:dc:2a:5b:61:d2:79:5a:f1:50:5b:7a:70:9a:0b:
         b0:9a:09:ea:a5:ab:af:0a:a6:a3:44:66:ab:f7:77:c6:f5:d4:
         c9:49:f3:ec:02:21:2d:36:43:5a:f1:aa:0a:84:26:69:98:76:
         7e:d5:28:7b:19:91:19:d3:81:05:7d:40:28:59:40:d1:88:a6:
         03:b0:f0:d4:db:ad:50:5e:8b:14:cd:a1:49:c3:56:73:f5:ee:
         af:0f:22:a3:9f:83:be:81:7f:65:2c:62:8a:c7:d3:11:a5:e7:
         88:01:4e:b2:37:8f:2a:15:b4:42:82:a3:0b:e8:7c:b9:b1:41:
         c0:3b:f1:a6:a7:f5:19:f7:c9:06:69:d2:78:7a:84:b4:c2:af:
         d6:8f:13:78:50:84:4c:06:fc:97:73:db:15:ee:bf:a6:c0:59:
         b1:8c:ce:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----