Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F585A56A9DC11F1B8DF31F8CE1D38B0.roa
File:                     5F585A56A9DC11F1B8DF31F8CE1D38B0.roa (raw, json)
Hash identifier:          m/3TVbaqZd5lO6BKF58SsmgPXWclCnXuyumakfLHHD8=
Subject key identifier:   75:59:1E:89:A4:CD:BA:22:A8:43:73:3E:4F:CC:7D:EF:57:7E:DC:39
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E601
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F585A56A9DC11F1B8DF31F8CE1D38B0.roa
Signing time:             Sun 06 Sep 2026 10:18:58 +0000
ROA not before:           Sun 06 Sep 2026 10:18:54 +0000
ROA not after:            Wed 14 Oct 2026 10:18:54 +0000
asID:                     152698
IP address blocks:        154.193.134.0/24 maxlen: 24
                          154.193.135.0/24 maxlen: 24
                          154.193.158.0/24 maxlen: 24
                          154.193.159.0/24 maxlen: 24
                          154.193.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124417 (0x1e601)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  6 10:18:54 2026 GMT
            Not After : Oct 14 10:18:54 2026 GMT
        Subject: CN=6a9d3e12-2353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:eb:f1:a5:2e:86:0a:33:60:4b:34:c7:be:85:
                    21:0c:47:67:0c:c3:37:16:95:67:e0:4a:e7:0a:9f:
                    a0:ed:3e:05:43:89:4e:65:0d:af:24:c6:b8:63:f1:
                    13:53:f7:4b:4c:5a:55:19:ed:5c:e5:41:11:96:41:
                    45:c3:2e:3a:aa:a9:35:b1:82:7a:f9:5e:93:62:26:
                    90:6a:48:5f:ac:e1:d5:57:cb:0f:1f:b7:56:da:68:
                    e4:ff:d8:8a:c7:e9:46:87:a1:fd:c2:49:14:37:d1:
                    8c:d7:09:46:9d:b7:d6:3a:f7:de:9d:6d:b4:a9:97:
                    d8:44:a1:c2:8e:8b:95:46:3a:59:1e:a3:4d:06:bc:
                    2f:ba:e5:7b:56:3b:e9:ee:01:d9:fa:2f:7e:b8:8a:
                    19:76:e5:18:8d:b8:c4:68:41:df:91:10:45:16:ee:
                    40:9f:ad:8c:82:27:ea:7e:31:b7:96:83:97:54:1d:
                    d7:62:8f:23:55:ac:a0:e3:9a:df:6f:ae:02:84:63:
                    de:e7:05:7d:60:a4:7c:2e:a3:83:d0:9c:e7:dc:27:
                    fc:b5:b3:ff:5b:ac:b4:25:2c:8a:d7:4f:23:99:b6:
                    d3:ea:04:b3:32:78:5d:21:7d:d4:fb:4a:79:4d:b9:
                    cb:ce:e4:09:0d:78:a1:28:95:6f:c0:c1:ac:4c:c1:
                    d5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:59:1E:89:A4:CD:BA:22:A8:43:73:3E:4F:CC:7D:EF:57:7E:DC:39
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F585A56A9DC11F1B8DF31F8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.134.0/23
                  154.193.158.0-154.193.160.255

    Signature Algorithm: sha256WithRSAEncryption
         ce:a7:29:08:03:a6:8d:00:be:00:ef:04:ef:14:99:e3:88:ec:
         9b:2a:89:7f:70:b9:fb:24:bf:1e:86:a6:8c:41:9d:39:79:8f:
         c8:9a:6b:69:cc:76:d1:6d:c4:a4:3a:f4:ba:f7:4f:29:bb:9e:
         9d:a8:e0:a1:7e:45:d9:3d:08:be:7f:18:85:ff:df:f8:0d:ff:
         d2:05:a3:07:70:31:0a:28:63:08:cf:a7:67:65:1d:70:58:5a:
         c5:92:51:d0:51:7a:42:3c:97:7f:4b:ca:0d:10:ee:0e:8c:82:
         e6:bd:00:b0:84:a4:c0:45:2f:4f:39:5d:6e:1d:a8:2d:4d:47:
         1e:4e:a3:a9:c7:04:40:f6:57:ef:ec:54:e1:e6:3f:48:2f:8d:
         b3:23:f1:34:a8:79:f4:7f:51:f2:e1:ac:3f:35:9a:0b:75:11:
         12:89:87:41:d4:e5:6d:77:b2:7a:ca:84:08:9e:ef:a4:8c:8d:
         cc:b5:5f:5a:5a:68:b3:ad:c5:4d:fa:e0:5d:5d:cd:00:82:69:
         81:b7:cd:a0:a9:8b:51:fc:6f:25:31:89:92:07:fc:eb:b2:58:
         7d:40:30:d8:ce:12:33:2d:43:09:f9:ca:16:a2:ae:4b:21:26:
         24:32:20:2a:f4:a2:48:dc:39:11:28:a5:0d:48:8c:91:06:1d:
         08:f2:eb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----