Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/971253A0A9C011F194B285D3CE1D38B0.roa
File:                     971253A0A9C011F194B285D3CE1D38B0.roa (raw, json)
Hash identifier:          IWWjmyy5uLr/Esoo1oZW/1Jt0TwjOS1H36j9+706wVE=
Subject key identifier:   64:1B:D5:23:CD:50:FD:12:D6:4F:76:3F:79:66:53:FE:5F:61:4E:4E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E5C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/971253A0A9C011F194B285D3CE1D38B0.roa
Signing time:             Sun 06 Sep 2026 07:00:06 +0000
ROA not before:           Sun 06 Sep 2026 07:00:02 +0000
ROA not after:            Sat 05 Dec 2026 07:00:02 +0000
asID:                     138152
IP address blocks:        154.92.22.0/24 maxlen: 24
                          154.92.23.0/24 maxlen: 24
                          154.94.4.0/24 maxlen: 24
                          154.94.6.0/24 maxlen: 24
                          154.94.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124358 (0x1e5c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  6 07:00:02 2026 GMT
            Not After : Dec  5 07:00:02 2026 GMT
        Subject: CN=6a9d0f76-b383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f8:15:a9:e7:bb:79:bc:d7:6b:49:57:3c:f0:
                    ab:d2:2f:f5:7f:5a:7e:34:f9:9a:b7:2c:c5:1f:52:
                    8d:40:8f:ee:09:9f:1f:06:03:40:84:e3:7c:be:f2:
                    94:e1:1c:6b:28:2d:40:ac:5b:95:8d:97:ee:03:5c:
                    7c:1a:6d:7a:32:de:ce:84:8b:44:79:69:2f:1e:23:
                    a2:67:08:e6:e6:13:a8:f2:75:d2:73:d4:65:85:f4:
                    de:90:80:a2:29:41:a4:dd:1a:08:77:55:de:ac:da:
                    a9:ad:2f:14:22:68:a4:88:f7:4c:ac:9e:47:d1:38:
                    13:c0:9d:24:9e:fc:3d:b6:ad:d9:db:af:cf:98:26:
                    18:0b:47:ce:3e:6f:75:88:22:db:1c:86:ca:df:10:
                    37:00:6a:cd:04:b7:19:b8:95:03:6a:de:1a:0c:8d:
                    98:52:4e:d4:0a:4f:12:76:20:0f:cf:16:e6:5f:f9:
                    5b:cd:4a:cc:90:aa:d8:40:4b:0c:5c:d3:b7:ad:c3:
                    75:e4:a6:f2:64:b4:2f:1e:8f:f0:9e:39:dd:3e:2a:
                    d5:d5:a0:67:20:1f:bb:90:d7:32:e8:12:ab:09:d4:
                    af:08:f3:ba:40:6a:94:4b:54:9a:4d:5d:b8:eb:70:
                    4f:52:e6:81:be:08:2e:1d:fb:8a:8e:66:a9:07:f2:
                    ab:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1B:D5:23:CD:50:FD:12:D6:4F:76:3F:79:66:53:FE:5F:61:4E:4E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/971253A0A9C011F194B285D3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.22.0/23
                  154.94.4.0/24
                  154.94.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:85:a8:f4:59:8c:f8:ce:1a:e1:e1:a8:18:38:c6:5b:64:2b:
         14:66:46:dd:c3:4c:24:3e:f3:00:61:d5:b5:41:7f:01:46:7d:
         14:c5:a4:97:78:2a:7b:52:6f:5c:41:14:7c:92:db:f9:6c:fd:
         c5:70:ad:41:fc:38:1d:b1:4a:78:10:bb:2f:bc:36:f8:89:95:
         ce:3a:79:84:4e:7a:c3:fb:33:38:fc:14:7a:c3:13:7a:05:14:
         12:4a:f5:2f:57:ca:ff:83:54:fd:a6:48:6f:aa:cc:67:b3:50:
         ef:96:3f:77:21:dc:f3:dd:35:35:65:d4:f6:1d:e2:d3:5f:89:
         b9:4f:4a:ac:ea:60:1a:35:35:b6:6d:25:c5:f9:1f:ff:04:ba:
         44:ff:3f:4f:23:d8:93:0d:36:b6:f6:d1:79:25:12:6a:23:40:
         e7:ab:39:79:7c:ce:e6:d3:34:ed:9e:87:be:32:72:07:1b:9d:
         21:68:e1:53:72:7a:ea:1b:de:08:63:f7:3a:b1:d6:35:17:bc:
         cf:30:84:62:42:b0:91:22:1a:1a:58:75:bf:f2:69:3f:08:30:
         0e:4b:85:61:49:0b:dc:1d:80:3d:af:1c:c1:e5:6f:1d:6c:04:
         1b:e2:7d:a6:a4:46:43:db:7a:f8:23:15:55:63:a3:21:2b:44:
         4b:52:34:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----