Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C085079EA9C211F1A2C1F4DFCE1D38B0.roa
File:                     C085079EA9C211F1A2C1F4DFCE1D38B0.roa (raw, json)
Hash identifier:          if4UYCBnLkDjNY81NAj8RCOSUp4XrmI2akZ/Pg2BtaM=
Subject key identifier:   30:26:5A:A9:3F:42:CA:75:C3:22:A9:FD:BB:0B:98:5D:5B:CC:69:7E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E5CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C085079EA9C211F1A2C1F4DFCE1D38B0.roa
Signing time:             Sun 06 Sep 2026 07:15:35 +0000
ROA not before:           Sun 06 Sep 2026 07:15:29 +0000
ROA not after:            Sat 05 Dec 2026 07:15:29 +0000
asID:                     136970
IP address blocks:        154.197.2.0/24 maxlen: 24
                          154.197.3.0/24 maxlen: 24
                          154.197.4.0/24 maxlen: 24
                          154.197.5.0/24 maxlen: 24
                          154.197.6.0/24 maxlen: 24
                          154.197.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124364 (0x1e5cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  6 07:15:29 2026 GMT
            Not After : Dec  5 07:15:29 2026 GMT
        Subject: CN=6a9d1317-834a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9f:b4:b3:c2:f6:72:32:27:5c:82:46:49:6f:
                    0e:71:e2:dc:5d:9e:8f:f4:4a:8f:21:a7:59:b3:1c:
                    a5:14:af:60:d8:82:fa:cd:74:35:00:d1:8c:39:dc:
                    ce:2a:39:bd:bf:8c:18:db:bb:bf:22:a0:e3:72:4a:
                    ef:8c:7b:49:a5:2b:6f:05:ca:c9:c0:02:ef:2a:9c:
                    4f:98:9f:af:f4:c0:60:99:07:55:de:de:67:67:0d:
                    af:55:33:1d:a5:17:b5:96:79:d0:9c:0d:eb:48:93:
                    b2:58:6a:91:f8:3c:e7:f3:54:cb:35:e0:a2:cd:b9:
                    83:d9:76:6a:c3:2d:d9:76:73:17:f8:df:ca:a4:c6:
                    44:7b:8a:27:7f:a6:eb:1b:41:4f:d2:21:1c:f8:f0:
                    6b:49:7c:5c:8e:45:2b:ee:c9:76:2b:a5:45:d8:0a:
                    99:c8:16:42:23:2a:3f:59:e7:2c:f4:58:0a:d4:f2:
                    5e:73:c9:a7:5b:08:1e:a4:d8:ad:38:88:91:48:b4:
                    59:d2:a4:ee:0a:c1:62:3e:47:7e:d2:aa:b9:0d:c7:
                    75:e8:ad:ab:f1:e1:ab:d7:1d:50:3d:7a:4d:e8:16:
                    1b:a4:b7:d6:55:df:4d:2a:68:a1:b7:23:14:2c:32:
                    e4:5d:21:3f:04:e6:30:95:5d:e0:c9:8a:0d:0f:ba:
                    ec:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:26:5A:A9:3F:42:CA:75:C3:22:A9:FD:BB:0B:98:5D:5B:CC:69:7E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C085079EA9C211F1A2C1F4DFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.2.0-154.197.7.255

    Signature Algorithm: sha256WithRSAEncryption
         6b:ce:6c:5c:f1:d2:11:ed:2c:f1:ee:f9:46:ca:97:70:9a:11:
         9a:41:c9:4d:71:98:f2:0c:7d:ba:5e:00:a2:d3:89:97:11:17:
         95:b8:bb:a8:fb:6d:f9:92:2a:38:20:1f:59:c6:46:70:74:3c:
         9c:5c:c4:be:85:3b:eb:b3:8d:79:89:7f:b7:53:42:6a:e4:d9:
         04:60:29:59:3c:f5:e5:5e:41:51:d8:91:82:0c:cb:c9:2d:3d:
         21:8d:43:bb:70:46:95:f0:76:8a:b8:bb:9b:2b:31:77:6b:67:
         17:02:59:f5:1b:ac:27:7f:bb:cc:97:e3:6a:f9:42:0b:1b:a5:
         70:cd:e0:c9:d6:3b:ca:d8:84:3d:f6:82:5f:9b:22:52:05:e1:
         86:15:a5:ad:98:dc:21:57:7f:f0:4d:a7:8c:69:db:e4:82:b9:
         63:e9:4a:76:b0:3b:71:9f:2c:41:85:e2:8d:30:d7:f5:95:26:
         78:95:9a:3d:1e:68:33:cd:e6:18:65:6e:2e:a1:fc:66:ec:7f:
         4e:29:31:13:9a:4a:ad:15:f3:54:e3:58:af:3b:10:6a:72:75:
         44:37:c9:bd:c0:2b:c0:79:1e:f9:87:b5:67:67:5c:84:84:31:
         94:82:5f:c1:a3:c7:94:2e:2a:85:49:9e:4e:82:f8:ee:2e:64:
         9d:4c:4c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----