Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6658406AB5E11F1AB2EEA1BCF1D38B0.roa
File:                     D6658406AB5E11F1AB2EEA1BCF1D38B0.roa (raw, json)
Hash identifier:          qBgIcD9TvesUUVAh30xl3zDtTjTkfnPxnLu8ZPPTvqc=
Subject key identifier:   D3:9F:AA:5B:F5:EC:07:C0:12:CE:3A:EF:9F:8D:07:C2:AD:90:5C:4A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E650
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6658406AB5E11F1AB2EEA1BCF1D38B0.roa
Signing time:             Tue 08 Sep 2026 08:25:24 +0000
ROA not before:           Tue 08 Sep 2026 08:25:20 +0000
ROA not after:            Tue 13 Oct 2026 08:25:20 +0000
asID:                     4515
IP address blocks:        154.203.0.0/23 maxlen: 24
                          154.203.204.0/23 maxlen: 24
                          154.203.244.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124496 (0x1e650)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  8 08:25:20 2026 GMT
            Not After : Oct 13 08:25:20 2026 GMT
        Subject: CN=6a9fc674-2619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a5:df:63:ce:96:c9:68:1d:6f:0a:d2:56:af:
                    68:96:9f:41:88:62:52:85:0e:30:49:19:52:02:f0:
                    e5:0d:1b:30:6e:80:0e:eb:c0:3f:e9:cd:62:36:91:
                    81:77:84:96:f7:7a:64:cc:91:a2:f7:86:31:2d:64:
                    e9:f1:77:20:57:8c:e9:de:e6:07:2b:8e:c4:f3:ba:
                    87:69:ab:08:5a:86:51:47:04:bc:e0:07:73:69:12:
                    3c:59:82:26:35:ca:b3:e5:fe:89:70:38:f7:df:a2:
                    f8:55:04:08:6f:70:77:32:50:cf:e7:46:6b:b7:57:
                    28:92:b8:cf:c8:ac:0e:14:46:3f:65:6b:c2:3f:0b:
                    4a:54:2c:6c:30:f3:51:26:b5:f2:51:8a:7b:9c:76:
                    8a:99:34:f0:2a:50:3e:ce:59:51:85:cd:c1:09:68:
                    9d:ac:fe:9e:1e:5d:48:00:0f:03:ca:43:23:7d:2e:
                    4b:23:30:55:e6:11:af:49:2c:22:bb:0e:98:d9:5e:
                    db:28:5a:bc:15:dc:62:75:b4:7e:69:a7:89:32:d7:
                    d1:56:f8:94:8e:f2:40:34:6d:1a:08:9e:3d:65:d8:
                    f3:74:90:f1:bb:e3:21:81:22:90:a7:f3:a0:9f:7e:
                    e3:92:96:d3:49:fb:2c:52:8c:ec:01:78:26:f9:58:
                    28:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9F:AA:5B:F5:EC:07:C0:12:CE:3A:EF:9F:8D:07:C2:AD:90:5C:4A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6658406AB5E11F1AB2EEA1BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.0.0/23
                  154.203.204.0/23
                  154.203.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c2:a3:65:c5:7f:ab:f0:57:87:89:ad:2b:70:c6:ab:1c:76:5b:
         4d:e6:a6:70:83:ac:04:8a:ae:8c:b7:c1:3f:18:75:0c:9b:ac:
         e6:a0:79:25:8b:d1:4b:29:ed:e8:74:2b:54:b8:a4:7b:f5:8f:
         e2:d5:ef:14:53:60:88:31:ce:b1:38:2b:54:db:19:d1:43:57:
         fb:fd:65:06:8f:db:44:af:90:36:2e:29:fd:da:d5:18:b7:13:
         d3:73:f6:67:82:cd:73:f4:99:c0:c8:51:58:24:11:f0:95:9e:
         ab:be:e1:6e:a5:e6:dc:5a:e2:40:ea:15:48:08:06:d7:4d:b6:
         37:29:c0:b1:4e:18:70:ff:96:63:04:34:23:9d:f0:07:d5:79:
         15:8b:2a:00:8f:e6:13:2a:46:30:92:ee:eb:38:72:eb:c4:7f:
         43:9c:7f:ab:ed:8f:ef:3f:42:1c:ff:e2:f9:49:d3:e0:e8:9e:
         ff:a2:b8:49:3f:71:71:60:a8:14:8a:bb:b7:5e:7f:c4:7c:e4:
         65:dd:e6:25:92:d1:f7:43:7a:de:33:43:ba:d3:80:fa:0d:1a:
         cb:e2:f6:b6:0c:3f:a5:8a:fd:09:b2:35:2d:02:47:c6:54:4e:
         6e:e2:a6:83:d1:bd:69:7a:9b:86:7e:45:4f:47:be:27:e2:f6:
         53:45:71:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----