Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5208E034A9C611F1B37F05F6CE1D38B0.roa
File:                     5208E034A9C611F1B37F05F6CE1D38B0.roa (raw, json)
Hash identifier:          jpJpt4hLwgNnCoYdOdILkH/RWA+8JAcniIRNr8o7aJo=
Subject key identifier:   30:D0:46:1A:22:E9:7A:38:3D:99:2E:92:43:DE:3D:E6:3A:27:4B:60
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E5D1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5208E034A9C611F1B37F05F6CE1D38B0.roa
Signing time:             Sun 06 Sep 2026 07:41:07 +0000
ROA not before:           Sun 06 Sep 2026 07:41:03 +0000
ROA not after:            Mon 12 Oct 2026 07:41:03 +0000
asID:                     20457
IP address blocks:        154.85.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124369 (0x1e5d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  6 07:41:03 2026 GMT
            Not After : Oct 12 07:41:03 2026 GMT
        Subject: CN=6a9d1913-3131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7e:8d:cb:8d:9a:9c:61:26:c2:36:32:ed:74:
                    a2:7e:69:c6:75:fe:65:44:1f:63:a3:f4:c1:72:98:
                    5a:85:4b:6b:17:36:32:ed:c5:1e:85:3e:53:8b:0c:
                    c0:1b:eb:ed:1d:5f:df:d1:00:80:0e:49:2b:73:de:
                    c7:40:67:86:f2:d5:53:27:67:b7:2d:83:e3:11:4f:
                    f1:fb:fe:96:2a:8a:c2:fe:c1:39:44:be:3f:08:f4:
                    9a:dc:7e:f8:f3:9b:f9:1e:73:f9:85:ea:46:35:47:
                    3c:b8:80:96:21:22:0d:72:53:bd:70:13:7b:7c:cd:
                    30:74:21:df:68:1e:b3:00:3b:3d:dd:6f:67:a2:a7:
                    5c:3d:24:1b:fc:db:b3:28:4d:b2:e3:f0:ac:c7:3c:
                    ae:22:80:d8:cf:1b:13:5f:cd:f8:f2:73:94:df:cf:
                    6e:64:86:95:9e:2a:71:91:83:2d:f3:d5:82:a2:19:
                    fa:a6:a9:f3:29:a2:db:e6:9e:04:99:93:32:95:b4:
                    7a:d5:21:c1:27:24:32:b6:a3:fe:fd:79:37:ab:29:
                    73:d7:a1:c5:f8:41:bb:35:ed:a1:95:ca:82:57:1c:
                    dc:d5:72:62:a7:18:37:06:4d:0f:c7:19:55:57:ef:
                    06:a5:a4:04:74:29:cf:e9:fe:03:22:64:e3:ba:28:
                    28:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D0:46:1A:22:E9:7A:38:3D:99:2E:92:43:DE:3D:E6:3A:27:4B:60
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5208E034A9C611F1B37F05F6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.85.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:8b:4a:b1:c2:b8:87:8d:b4:8b:a1:20:73:68:54:65:d0:6d:
         03:59:ec:b9:27:9c:1d:35:84:d2:8b:9b:d1:c1:98:0d:ed:63:
         ac:9f:32:12:ea:2d:3b:9f:2a:00:8c:bc:e4:ba:d2:ae:44:6e:
         8d:ef:f0:57:97:2b:d3:a7:63:61:36:ab:04:b3:16:33:9c:dc:
         b3:20:bf:8d:7e:6d:88:6e:7a:70:31:82:4e:e9:0b:b3:34:ac:
         a5:e8:8b:5a:1f:66:f7:cf:b2:cb:d0:cd:30:56:17:9e:a3:ed:
         0b:9a:20:88:81:e6:da:38:12:30:df:d6:2d:95:85:d5:96:84:
         db:b4:0f:8e:02:2b:64:fb:42:74:d1:55:50:a6:57:08:26:95:
         9a:b0:0d:ab:48:fc:6a:f8:79:f9:0e:0b:f9:da:c0:92:70:88:
         f9:5d:3f:07:ee:33:9b:2f:9e:f9:96:f6:28:0e:6b:0d:54:33:
         6f:af:36:c3:e3:9e:64:94:d4:8c:67:08:a5:86:02:c7:9c:00:
         95:42:9a:86:b8:9c:00:d2:19:64:ee:af:7f:32:40:86:3b:e5:
         d7:a8:7d:e9:07:01:a2:a6:3e:d9:48:4c:fe:2f:71:e1:84:46:
         99:b8:6e:dd:42:80:dd:e3:af:4a:81:65:3a:9c:a2:50:fc:fe:
         5b:c3:20:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----