Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C02A32EA9F9211F1BA237AAECE1D38B0.roa
File:                     C02A32EA9F9211F1BA237AAECE1D38B0.roa (raw, json)
Hash identifier:          HIqpJj4BLSaLWGnM9KvVtnfG8xIUVIhjFP6O7GSsUyg=
Subject key identifier:   3E:58:8D:BD:39:74:93:88:8E:92:4F:E1:71:A1:25:F4:67:96:13:31
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E215
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C02A32EA9F9211F1BA237AAECE1D38B0.roa
Signing time:             Mon 24 Aug 2026 08:06:47 +0000
ROA not before:           Mon 24 Aug 2026 08:06:42 +0000
ROA not after:            Thu 01 Oct 2026 08:06:42 +0000
asID:                     62240
IP address blocks:        154.194.79.0/24 maxlen: 24
                          154.194.82.0/24 maxlen: 24
                          154.194.89.0/24 maxlen: 24
                          154.194.92.0/24 maxlen: 24
                          154.194.93.0/24 maxlen: 24
                          154.194.98.0/24 maxlen: 24
                          154.194.99.0/24 maxlen: 24
                          154.194.119.0/24 maxlen: 24
                          154.196.24.0/24 maxlen: 24
                          154.196.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123413 (0x1e215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 24 08:06:42 2026 GMT
            Not After : Oct  1 08:06:42 2026 GMT
        Subject: CN=6a8bfb96-fad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:52:06:6a:98:64:f2:46:ef:f6:23:52:49:22:
                    50:a8:fd:37:4d:36:ab:8a:32:46:a8:99:c8:bf:99:
                    aa:0c:b4:6c:38:5a:68:20:0b:6d:e0:ae:b0:ef:92:
                    7b:ea:69:d2:40:68:c6:1f:a9:fe:55:9c:96:fe:49:
                    f3:fa:8f:96:9d:4c:1a:ca:a7:8c:ec:bb:1e:3a:ed:
                    f5:06:3d:c6:29:f6:aa:fb:18:87:b7:f8:c9:e7:8b:
                    20:b1:b6:e5:e2:e1:97:bd:42:b8:5e:75:95:34:ed:
                    f0:71:15:df:6c:9f:8d:8b:85:16:b4:8e:d8:d8:90:
                    0f:35:1d:69:52:fd:4a:4f:c2:90:a6:32:a4:c1:e0:
                    87:e3:72:30:a3:b5:e1:14:77:df:26:8a:15:f0:7e:
                    6b:46:4f:13:2c:df:f1:24:da:8c:ef:a7:d8:00:9e:
                    6c:f5:f8:1a:ca:d1:6c:a9:4f:ca:d4:0d:d8:85:85:
                    03:5b:31:06:44:fe:e3:15:27:6f:b4:ca:84:39:9e:
                    38:9c:72:6e:ac:d6:a9:68:c5:7f:ac:b2:e3:ba:51:
                    69:9b:07:ef:3d:4f:1f:5c:cc:a7:7a:bf:1e:96:00:
                    45:52:3f:d2:01:29:cb:6e:06:8c:f9:b2:b3:73:45:
                    31:9b:b5:2d:a2:6d:3c:db:34:e9:8a:3f:fd:8c:88:
                    7a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:58:8D:BD:39:74:93:88:8E:92:4F:E1:71:A1:25:F4:67:96:13:31
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C02A32EA9F9211F1BA237AAECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.79.0/24
                  154.194.82.0/24
                  154.194.89.0/24
                  154.194.92.0/23
                  154.194.98.0/23
                  154.194.119.0/24
                  154.196.24.0/24
                  154.196.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:ab:65:21:fe:2b:aa:94:6c:23:d6:8c:6e:5a:b9:f4:cb:cd:
         d7:d2:5e:e0:c8:16:5c:c9:96:47:3a:b1:0c:25:99:2f:cf:c4:
         83:c1:35:cc:42:fa:c6:62:9f:cc:14:d7:87:75:b2:8b:8f:7f:
         f9:a1:f8:1c:19:c7:c5:27:f8:65:61:be:3b:76:7b:3b:fa:19:
         6d:83:4f:46:1d:47:b9:2a:82:c4:34:04:82:db:54:23:c0:e0:
         65:e9:7a:6c:0b:0a:41:73:38:65:93:f9:21:43:f1:36:4d:d1:
         62:f6:0a:ac:d3:fb:11:f2:25:c8:7a:a3:b9:c2:37:d8:9c:e5:
         46:77:29:3f:15:49:5a:12:db:87:25:97:3d:b0:be:ce:c7:96:
         b7:7b:7c:e5:12:92:23:a4:04:ed:f0:9d:2c:52:7c:c1:ad:cb:
         33:1a:e3:dc:3e:05:20:47:a8:3a:4d:6a:c9:9a:7b:af:9f:bf:
         c1:9f:cf:bf:82:a2:14:bc:9f:58:63:eb:cc:76:ad:f6:c8:94:
         d6:e2:5a:51:69:91:6b:6d:91:3c:8f:fb:d7:ee:cd:bb:bf:9c:
         89:c2:6b:b6:dc:20:03:f3:86:8c:3a:c6:22:d1:d2:22:af:78:
         63:e2:ba:f3:6a:8f:6c:48:6f:b6:b0:87:9a:d8:ce:02:d9:d0:
         fd:8a:9b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----