Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31DAB1AEB26111F18BE83111CF1D38B0.roa
File:                     31DAB1AEB26111F18BE83111CF1D38B0.roa (raw, json)
Hash identifier:          Wq7LkWNCS4j1Rd+Q9VI1c/5KG/osvmcoc0sqJ87X7cc=
Subject key identifier:   78:A2:E5:34:FF:2C:0C:6D:A3:20:0F:AE:38:87:46:86:BB:D4:39:94
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E892
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31DAB1AEB26111F18BE83111CF1D38B0.roa
Signing time:             Thu 17 Sep 2026 06:29:55 +0000
ROA not before:           Thu 17 Sep 2026 06:29:51 +0000
ROA not after:            Sat 26 Sep 2026 06:29:51 +0000
asID:                     215224
IP address blocks:        154.83.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125074 (0x1e892)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 17 06:29:51 2026 GMT
            Not After : Sep 26 06:29:51 2026 GMT
        Subject: CN=6aab88e2-9d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4f:4f:c3:80:8d:f2:c8:2f:ed:f4:f8:f8:67:
                    b2:a3:ca:f8:91:9a:af:22:16:37:ad:08:d8:59:c6:
                    bd:6a:0d:f2:c0:37:39:cf:94:2e:7a:67:b3:10:f5:
                    a7:c7:f5:d1:3e:6c:0e:54:c0:30:3c:33:e7:b1:ff:
                    a1:94:b5:d7:72:b7:52:3a:21:94:7d:f0:d6:25:a9:
                    c9:d1:ea:37:d6:c8:98:14:a4:67:2d:aa:7a:bb:22:
                    4a:25:ac:5f:4b:f1:5b:c6:e7:22:2e:97:b8:f1:90:
                    e5:f2:43:36:46:89:d2:3c:6a:79:83:b7:25:0a:24:
                    cd:f7:79:d2:19:6d:89:95:8b:d0:4d:e7:be:80:77:
                    51:6d:eb:51:7a:be:a0:43:a5:16:ae:e9:67:99:58:
                    b0:ce:ec:f2:5b:ea:fc:cf:62:29:d3:8d:df:ae:39:
                    12:89:96:9d:fa:32:d2:b7:59:8d:5b:b4:ed:52:c8:
                    16:36:bc:72:c5:1d:ef:1e:bd:01:b8:6d:c8:03:d5:
                    a1:f5:81:a8:fb:07:44:97:83:ad:3e:72:18:81:65:
                    ee:4b:f5:4c:83:31:6c:13:62:ee:a7:1b:41:51:0a:
                    22:d9:dc:6b:b2:53:2b:9d:1a:0c:13:c2:86:67:f5:
                    d6:f7:34:10:da:9f:97:bd:a9:98:50:17:b7:da:90:
                    6b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A2:E5:34:FF:2C:0C:6D:A3:20:0F:AE:38:87:46:86:BB:D4:39:94
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31DAB1AEB26111F18BE83111CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:d2:a8:eb:75:d0:f6:84:e8:1c:e6:90:d0:12:cd:13:d1:ad:
         49:70:65:b3:48:e3:52:33:cb:9f:28:6e:f4:88:f2:94:ff:27:
         05:b1:13:90:d6:07:ac:08:2d:0f:9b:8e:2b:b5:e3:ac:a8:3e:
         d9:b6:d8:1d:c8:00:93:15:22:93:31:06:5d:f8:05:6f:2b:9d:
         83:88:f7:26:13:15:f2:53:75:bd:13:56:94:8a:ec:39:7b:aa:
         94:8f:e4:7e:58:ce:a6:ea:88:84:6d:04:b3:49:7c:60:4b:42:
         43:23:cd:e2:24:bf:2a:7b:49:75:88:45:fd:30:d5:21:df:75:
         d7:09:a3:c7:1d:16:aa:c7:2a:9f:a5:82:c9:26:63:a6:e3:d6:
         51:88:23:dd:ec:20:f1:98:5b:4b:db:84:83:6f:e0:e1:d1:7b:
         81:a7:b6:10:23:c7:7c:bc:f5:ec:6b:06:3f:fa:2f:03:d8:75:
         18:1f:95:3a:55:1f:dd:d4:ce:f3:85:cf:72:48:e7:5d:d8:3c:
         a3:0e:31:55:e3:b0:f2:04:f2:06:ba:e0:75:12:96:ac:a3:c0:
         b7:ab:5d:1e:c2:2e:fb:6d:6f:15:ba:71:4a:c8:c1:3f:5c:8f:
         b6:f6:1c:e6:8f:35:28:96:cc:8c:9b:2c:af:cc:81:75:fb:77:
         0b:d4:23:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----