Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F9022E2ACF311F19F62E7B2CE1D38B0.roa
File:                     9F9022E2ACF311F19F62E7B2CE1D38B0.roa (raw, json)
Hash identifier:          k+J1lavnSd1ZKpqZ00642fjkRhfRIRzxWz7iDYceX/A=
Subject key identifier:   5F:0D:12:09:78:AF:00:DE:25:38:63:B9:80:65:5C:35:A4:62:EC:FD
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E712
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F9022E2ACF311F19F62E7B2CE1D38B0.roa
Signing time:             Thu 10 Sep 2026 08:42:58 +0000
ROA not before:           Thu 10 Sep 2026 08:42:53 +0000
ROA not after:            Sun 04 Oct 2026 08:42:53 +0000
asID:                     17497
IP address blocks:        154.211.180.0/24 maxlen: 24
                          154.211.181.0/24 maxlen: 24
                          154.211.182.0/24 maxlen: 24
                          154.211.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124690 (0x1e712)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 10 08:42:53 2026 GMT
            Not After : Oct  4 08:42:53 2026 GMT
        Subject: CN=6aa26d92-1596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3e:ee:24:2a:5a:19:d1:75:6a:4f:b0:0d:64:
                    8d:ff:6f:46:61:a6:5a:09:30:09:13:1d:08:8d:2b:
                    64:0a:99:42:15:6b:f6:31:a7:3f:0b:ec:46:a6:48:
                    f7:82:70:cb:f7:e3:d8:22:e8:c1:13:a3:14:52:e3:
                    02:3f:b0:1e:7b:91:ff:ed:3f:7d:2f:b2:06:44:c4:
                    58:3e:b8:8d:1f:32:ce:5d:5e:18:b2:db:e5:1b:9d:
                    6e:a7:a2:98:b9:6a:6b:1c:c2:ba:d0:33:8c:6c:3e:
                    4e:66:21:3a:d9:c0:34:95:9c:ba:b8:68:31:3f:3c:
                    74:63:40:33:dd:60:31:1d:3c:33:41:c1:aa:92:7d:
                    3b:d5:e7:27:2b:f4:d6:0f:ec:89:2e:7e:ad:27:07:
                    d5:6b:3c:b8:19:75:92:1a:62:07:41:6b:3b:93:33:
                    96:74:e3:cb:94:3d:42:13:34:ef:b3:59:4f:d4:56:
                    50:4f:fb:2b:07:6e:c3:87:2d:01:1f:79:be:82:04:
                    aa:6f:eb:c3:8f:43:80:42:20:aa:39:ad:fb:73:71:
                    45:73:6c:8f:71:b0:e8:e4:a7:ff:7a:74:95:14:f4:
                    43:4a:c0:26:1f:ac:6b:01:35:45:0e:eb:2c:bb:2c:
                    ba:73:70:93:6f:08:60:1a:72:35:6c:27:0b:f9:ed:
                    87:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:0D:12:09:78:AF:00:DE:25:38:63:B9:80:65:5C:35:A4:62:EC:FD
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F9022E2ACF311F19F62E7B2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.211.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:6e:35:d2:8d:41:4c:49:26:c2:7f:cf:bf:9e:5b:74:41:f2:
         3c:15:35:ce:6c:bb:f8:04:a3:9e:e6:59:7c:fb:f0:37:c6:36:
         8e:3b:d8:54:87:01:a7:51:6a:8f:b5:ec:0a:65:24:5c:69:c5:
         1e:9e:04:18:8e:fb:8b:4c:0f:97:c8:6a:55:52:ce:d2:2c:95:
         85:a2:11:e9:2b:c2:e1:4c:d3:13:cf:57:b3:e6:88:97:24:f7:
         35:7d:93:a9:55:92:1b:f6:29:6b:01:27:4a:04:c9:f6:56:b3:
         0d:18:f0:45:ef:72:ee:37:1a:06:f7:75:f2:a1:04:e1:05:61:
         46:fb:ef:08:95:e0:a4:68:50:37:81:99:8a:93:7a:bd:4c:55:
         01:8a:4a:af:9b:dc:62:ba:8b:26:dc:8f:4c:03:61:ac:e9:81:
         53:38:bd:d8:5b:4c:c2:3a:11:82:1c:50:0f:12:a1:6f:4a:31:
         1e:cc:06:7c:59:cf:f3:87:6c:aa:ae:2a:71:51:6a:42:d8:78:
         3a:c5:87:b6:8c:6a:23:d8:13:9c:11:2d:ef:15:37:33:90:d9:
         cd:5d:d5:9e:19:34:41:df:e9:ee:7e:c9:d2:f6:6d:1e:30:ae:
         c2:6c:0c:b0:82:93:0e:17:34:0c:e6:5d:55:16:9c:44:48:49:
         c6:89:8b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----