Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13A6746CB0E411F1B93C300ECF1D38B0.roa
File:                     13A6746CB0E411F1B93C300ECF1D38B0.roa (raw, json)
Hash identifier:          CW7jvmANBdR09AReuNNSaks4ipe3Uuy4cfGvAF06el4=
Subject key identifier:   33:60:41:80:DB:CF:05:A6:8C:92:19:17:9F:CF:3D:8B:F5:96:86:AD
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E859
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13A6746CB0E411F1B93C300ECF1D38B0.roa
Signing time:             Tue 15 Sep 2026 09:01:46 +0000
ROA not before:           Tue 15 Sep 2026 09:01:42 +0000
ROA not after:            Mon 19 Oct 2026 09:01:42 +0000
asID:                     11404
IP address blocks:        154.83.144.0/22 maxlen: 24
                          154.83.200.0/21 maxlen: 24
                          154.83.216.0/21 maxlen: 24
                          154.83.248.0/21 maxlen: 24
                          154.85.28.0/22 maxlen: 24
                          154.90.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125017 (0x1e859)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 15 09:01:42 2026 GMT
            Not After : Oct 19 09:01:42 2026 GMT
        Subject: CN=6aa9097a-d0e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4a:f8:e9:96:a5:5a:dd:76:1f:a5:b7:f9:03:
                    9e:33:20:88:99:7a:24:42:65:ee:86:13:6b:05:4b:
                    28:dc:f0:8e:30:22:76:1a:07:3a:ca:6d:1f:c6:87:
                    f1:7d:69:bb:12:37:7c:c7:2b:de:d7:48:12:28:1e:
                    08:b3:b2:9b:09:8a:9b:3c:36:b4:cb:1a:89:e5:ef:
                    b6:15:61:91:55:33:ec:11:61:45:4b:28:f3:83:95:
                    7a:87:57:54:d3:f0:24:91:0d:9b:e1:73:de:e3:22:
                    aa:ea:6e:7f:d1:26:22:a8:c3:70:0f:cc:34:6c:3c:
                    d7:a4:88:b3:5b:86:d6:ad:94:76:69:11:a5:15:14:
                    94:ae:7d:ca:3d:58:74:d0:82:89:4c:1f:8a:76:61:
                    0d:d7:03:f8:a2:fb:05:e8:c0:f2:f7:51:1d:90:b9:
                    42:51:9a:d1:c2:19:e5:d2:af:73:13:4b:17:a2:3a:
                    f1:eb:39:51:28:ef:55:61:c9:b3:7f:d8:14:4a:a5:
                    bd:4f:00:a7:a5:41:59:c4:bf:f7:31:db:f9:1b:2a:
                    5a:c4:41:f5:03:3f:29:fb:87:3d:12:f3:ab:6f:a7:
                    8c:c0:23:f0:e4:50:25:bc:d7:c9:66:ba:17:85:ed:
                    0e:12:5f:2d:f8:56:8e:0e:c6:85:f7:eb:9c:14:f7:
                    47:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:60:41:80:DB:CF:05:A6:8C:92:19:17:9F:CF:3D:8B:F5:96:86:AD
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13A6746CB0E411F1B93C300ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.144.0/22
                  154.83.200.0/21
                  154.83.216.0/21
                  154.83.248.0/21
                  154.85.28.0/22
                  154.90.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d2:84:4b:b6:0d:57:39:46:70:86:91:fa:09:fe:9a:95:c3:57:
         aa:17:f0:97:f0:26:ff:e5:23:27:5a:51:a4:d1:fd:ac:c9:c0:
         26:9d:6f:f9:d2:ed:54:ac:cb:96:17:5b:13:fd:3e:60:93:90:
         e9:1b:66:19:a3:ad:f9:b7:58:9c:c4:e0:4d:30:da:95:26:7d:
         f1:6b:fb:63:42:31:09:eb:14:cd:6b:4a:60:bf:32:48:b4:81:
         b0:63:13:35:35:d2:c2:98:3e:85:1c:32:9f:46:94:66:d9:3a:
         19:f3:e8:0a:39:63:fd:e7:57:e6:39:23:50:4e:ee:39:04:85:
         1b:e2:d5:5b:e9:2e:7e:13:e6:10:7d:63:cb:e2:5d:1d:f9:5f:
         47:01:5c:bc:13:85:95:14:e4:76:8d:b4:8a:70:e7:b9:98:71:
         fd:7a:f1:a9:6f:67:03:3d:93:a6:aa:2a:f0:28:f5:3d:f2:3b:
         53:c6:00:1f:49:30:c5:cd:35:06:67:b3:f1:48:bc:9d:a9:95:
         5d:11:73:09:44:14:46:1b:08:90:ef:5c:fa:78:a6:69:c4:d7:
         83:23:54:9a:5d:f7:96:28:c2:11:96:eb:4b:8a:ae:1a:56:de:
         05:36:6f:cd:27:de:5a:b6:2d:86:4f:ef:b4:b1:24:88:09:62:
         3d:1a:d6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----