Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/499DF72EB0D111F1AFF3AD1CCF1D38B0.roa
File:                     499DF72EB0D111F1AFF3AD1CCF1D38B0.roa (raw, json)
Hash identifier:          Ny8+0GKvmYU7uGa9FRbhPX5F2fjz5TwMlnRFddHRv1Q=
Subject key identifier:   32:2A:7C:EB:74:74:7B:A5:9F:3E:0A:82:8E:70:3A:08:30:B1:25:96
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E833
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/499DF72EB0D111F1AFF3AD1CCF1D38B0.roa
Signing time:             Tue 15 Sep 2026 06:47:16 +0000
ROA not before:           Tue 15 Sep 2026 06:47:12 +0000
ROA not after:            Thu 22 Oct 2026 06:47:12 +0000
asID:                     22516
IP address blocks:        154.86.192.0/18 maxlen: 24
                          154.90.224.0/19 maxlen: 24
                          154.91.224.0/19 maxlen: 24
                          154.93.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124979 (0x1e833)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 15 06:47:12 2026 GMT
            Not After : Oct 22 06:47:12 2026 GMT
        Subject: CN=6aa8e9f4-33ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:19:88:db:2e:00:0d:99:59:e1:9d:35:a3:ea:
                    cd:3d:4e:b9:47:3a:c2:9d:e7:a5:81:0f:30:a1:00:
                    66:39:93:28:db:f6:a3:0e:78:d2:c9:63:eb:cd:80:
                    84:3f:8f:e9:ba:13:f5:60:75:89:e9:ad:0d:ec:75:
                    4c:32:f4:5d:e7:2a:96:3e:60:2c:e8:1e:fa:ed:5a:
                    02:a6:1a:6d:53:80:c8:62:24:12:8e:f2:a9:d8:e9:
                    ee:5c:e7:84:01:c1:96:92:b6:73:e5:71:e8:dd:3b:
                    6d:06:31:b9:b3:aa:46:97:5b:57:fa:98:0c:dc:3c:
                    46:53:8c:66:10:ba:f8:9b:2d:de:0d:b2:0b:cf:07:
                    a8:07:44:e6:fd:95:69:ef:2e:bb:ba:63:7c:58:bf:
                    2e:eb:68:ca:71:06:db:79:c0:61:e4:00:f7:1e:f8:
                    57:07:c6:c0:6a:10:5a:47:5e:13:db:45:82:95:f3:
                    53:c5:ac:93:b4:32:d6:5a:07:7b:e0:4f:3c:cb:28:
                    cf:3b:f7:1c:f5:08:8f:59:e5:ad:19:b8:99:b6:92:
                    97:1f:3c:75:51:c5:1c:31:8b:06:6c:90:21:fe:d7:
                    7b:32:df:ed:f5:b8:1d:c4:be:87:d8:32:18:54:52:
                    1b:41:81:6b:fb:0a:af:df:05:d5:ac:c9:9f:c4:75:
                    78:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2A:7C:EB:74:74:7B:A5:9F:3E:0A:82:8E:70:3A:08:30:B1:25:96
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/499DF72EB0D111F1AFF3AD1CCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.192.0/18
                  154.90.224.0/19
                  154.91.224.0/19
                  154.93.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c3:d5:54:83:3e:42:7f:de:68:27:aa:cc:55:c6:37:c1:e0:76:
         fd:86:03:7e:44:a3:e5:9a:8b:57:e0:f7:17:23:f7:2c:a4:b0:
         4f:45:32:45:af:6c:1e:89:cd:fb:a0:45:97:c1:6b:8a:fd:9e:
         a5:cf:40:35:dd:35:2e:a3:47:d2:a4:e4:c8:4f:95:b7:ae:4b:
         12:eb:5a:53:f6:71:6b:91:6e:75:6f:8b:a5:57:85:b9:c8:a2:
         a6:19:11:b4:34:73:8a:49:e4:6c:80:35:40:f0:25:08:d4:63:
         71:34:10:1e:fe:42:72:df:57:b3:46:82:b9:dd:fe:e6:4b:dc:
         39:a7:ad:e1:15:38:23:47:c5:28:07:83:db:9d:7d:f5:53:ad:
         7a:e2:78:39:3b:9b:91:1a:d9:64:eb:db:8c:d1:d0:6f:a1:63:
         75:4e:c0:4d:6b:df:67:53:f4:1d:c8:31:36:e7:53:d5:85:19:
         a0:a4:e2:af:62:77:04:f3:4e:72:71:24:fa:72:a6:96:f1:79:
         fc:53:0e:d7:f3:0e:df:31:7f:16:7c:14:d6:3a:12:4f:54:dd:
         4d:97:7c:99:5a:ba:c4:e9:8a:45:3f:a4:66:1b:d3:05:4a:2f:
         fc:40:c2:d2:10:56:f2:1c:d4:bc:21:aa:31:ec:5a:13:ca:6a:
         35:53:a0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----