Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFFE3654ADCB11F1B3AB82CFCE1D38B0.roa
File:                     AFFE3654ADCB11F1B3AB82CFCE1D38B0.roa (raw, json)
Hash identifier:          u3t7/H6dNzP8myWwARyF0+6+PE61+onUZij6KIAEJDk=
Subject key identifier:   17:54:67:B4:D1:20:ED:99:0C:E7:14:1C:C4:CD:07:DE:B3:8B:3D:03
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E787
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFFE3654ADCB11F1B3AB82CFCE1D38B0.roa
Signing time:             Fri 11 Sep 2026 10:29:37 +0000
ROA not before:           Fri 11 Sep 2026 10:29:33 +0000
ROA not after:            Fri 16 Oct 2026 10:29:33 +0000
asID:                     151419
IP address blocks:        154.88.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124807 (0x1e787)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 11 10:29:33 2026 GMT
            Not After : Oct 16 10:29:33 2026 GMT
        Subject: CN=6aa3d811-f6a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e5:1c:0b:ab:f4:0e:8a:ef:9b:c6:45:c2:78:
                    c3:fc:b4:fe:cb:a3:42:0f:6d:2b:8e:87:9f:26:a8:
                    52:8b:b7:a7:91:ce:ad:30:33:2d:52:2a:6f:ae:4d:
                    3c:79:f3:c4:db:fe:15:d9:ba:a9:54:31:55:ba:ac:
                    25:05:62:a7:e4:24:86:17:38:b3:9b:10:5c:21:af:
                    b2:d8:fe:1a:c4:fa:54:3d:77:78:8d:54:45:86:44:
                    90:5b:78:99:86:cf:38:18:d3:a6:cd:72:a6:67:4e:
                    f8:d4:61:4b:f9:69:83:1b:32:ab:db:e1:9a:4c:0c:
                    b6:23:99:b4:9f:1e:82:d3:c8:c1:2e:eb:5e:cb:1a:
                    65:74:04:9a:03:52:cb:b4:87:61:41:c1:f9:75:6d:
                    f3:6a:6d:7c:a5:40:1d:0f:2f:1d:96:7f:fc:04:b5:
                    56:6f:d2:db:0a:67:14:7f:ca:e3:94:57:42:84:f6:
                    a7:96:32:7f:61:5f:c7:03:eb:6d:37:2d:0e:05:3d:
                    a7:1a:24:76:07:5f:fc:d7:c0:f6:d1:07:8f:02:47:
                    f6:62:da:a4:2d:53:18:f1:37:ef:7f:d2:fc:f9:d7:
                    47:8e:31:d4:6a:81:63:e1:50:94:6c:60:14:67:f1:
                    54:02:d2:1a:47:2e:c6:bb:2f:b2:29:1d:3f:d5:6e:
                    45:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:54:67:B4:D1:20:ED:99:0C:E7:14:1C:C4:CD:07:DE:B3:8B:3D:03
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFFE3654ADCB11F1B3AB82CFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:4b:96:cb:0b:2f:56:d1:27:31:22:2b:3e:b1:30:59:02:10:
         4d:8c:3c:0d:69:1d:2a:70:fc:b0:81:42:7b:3f:38:89:09:4d:
         29:12:4b:7e:b9:5e:54:12:3d:54:fa:6a:53:2e:38:10:6d:31:
         63:0a:0f:0f:64:50:d8:7b:52:6f:2a:fe:10:70:d0:21:a6:81:
         2c:af:03:e5:c7:0f:15:68:50:e6:af:89:68:a5:d6:a1:68:24:
         71:d0:96:34:45:88:69:b2:f3:27:c2:af:fb:0f:b2:07:96:ec:
         ff:03:ba:27:97:a7:08:bf:51:30:98:60:b6:fc:76:10:e0:b2:
         01:2d:80:02:b6:8a:5b:29:bb:f1:e7:88:aa:4e:42:66:f9:db:
         b3:24:5d:24:de:55:75:60:6b:06:9c:37:e9:ca:c2:e5:11:3e:
         9d:68:7f:af:c6:6a:1e:d2:14:c3:95:bf:72:b6:a8:fd:df:ef:
         70:17:33:a0:ab:20:f9:fe:8d:bd:d0:dd:49:f4:b4:f3:ed:96:
         45:61:a7:85:06:62:56:21:41:36:85:48:97:ce:45:cc:43:8d:
         dc:ea:05:48:43:9a:9b:69:8f:69:4c:f8:72:e6:50:a1:71:8e:
         0f:69:a2:d0:ed:e4:e5:f6:78:c1:a6:06:ba:d1:43:1b:55:53:
         69:93:b2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----