Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD9AB9A4A9D211F1AA2AE5BFCE1D38B0.roa
File:                     DD9AB9A4A9D211F1AA2AE5BFCE1D38B0.roa (raw, json)
Hash identifier:          oeKUn20tET9KSegXfmCNlrbWn9uGoDX8v/rX5jc+SfA=
Subject key identifier:   BA:24:8B:42:0A:2F:B3:A4:5B:11:B0:2E:95:B2:A0:8D:DC:27:3E:BC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E5F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD9AB9A4A9D211F1AA2AE5BFCE1D38B0.roa
Signing time:             Sun 06 Sep 2026 09:10:55 +0000
ROA not before:           Sun 06 Sep 2026 09:10:51 +0000
ROA not after:            Sat 17 Oct 2026 09:10:51 +0000
asID:                     140925
IP address blocks:        154.89.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124401 (0x1e5f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  6 09:10:51 2026 GMT
            Not After : Oct 17 09:10:51 2026 GMT
        Subject: CN=6a9d2e1f-81f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7a:9c:73:1e:15:e1:a5:2e:85:16:a2:0c:26:
                    4c:be:37:7f:2f:1d:24:e1:81:c7:43:75:98:51:2f:
                    bf:a6:c9:ec:03:23:35:f8:c5:26:50:25:e9:ec:8d:
                    98:9b:28:ce:66:8d:c3:1a:cd:0b:c4:24:d4:d1:8b:
                    21:5f:6d:47:30:a5:48:02:75:de:9d:b0:6f:7f:3d:
                    9a:51:66:8a:f9:f8:ee:90:a0:ce:6a:82:29:1f:4a:
                    1d:70:a8:b6:2f:89:c9:84:0a:84:31:ba:32:d9:4e:
                    51:65:a1:db:bf:70:68:9e:89:87:25:11:5c:f7:f7:
                    6e:39:36:0c:19:80:5d:c5:5d:22:03:4f:35:70:c7:
                    ac:e1:0a:8d:06:55:59:3e:06:06:4e:1c:be:9b:ac:
                    6c:0c:d7:63:12:7e:de:4c:7f:68:d8:62:9b:a1:47:
                    c1:9d:a4:eb:66:6c:39:b3:61:c0:d7:60:38:8a:66:
                    1b:e3:e9:5d:b6:c7:6b:e7:d5:21:8f:28:78:43:a8:
                    b6:56:c2:39:e6:f6:96:07:4b:e0:0c:8c:ff:29:38:
                    1b:ed:91:b5:69:c3:9c:94:37:7b:6a:68:a2:5a:89:
                    23:ef:1a:07:bf:4b:65:8f:52:e5:06:2a:29:20:8d:
                    33:c1:9f:e9:64:ea:c7:2f:4c:e1:d3:40:c8:7a:70:
                    6b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:24:8B:42:0A:2F:B3:A4:5B:11:B0:2E:95:B2:A0:8D:DC:27:3E:BC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD9AB9A4A9D211F1AA2AE5BFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:40:f7:b7:be:65:b5:05:7c:43:3f:ed:b8:63:87:5f:61:1a:
         07:ac:04:f8:38:56:33:5d:ab:2b:e8:ca:e6:60:6a:4e:52:b2:
         b4:ce:2f:0c:11:d8:2e:2a:51:12:17:98:f9:d9:b6:8b:2e:9a:
         c3:44:1b:13:57:dc:79:bd:3f:c8:83:aa:68:aa:68:75:90:bc:
         08:87:d8:e2:f8:1c:21:b8:72:3c:ad:82:63:94:95:da:09:08:
         09:6e:1d:0f:65:b4:1d:57:e4:9e:4a:20:14:f0:f5:31:6c:88:
         ee:b1:77:72:01:7b:f4:58:7f:86:98:d0:64:91:98:c6:e5:75:
         56:46:3c:8d:f2:21:da:70:3e:79:3a:b5:53:35:0d:aa:42:8c:
         25:50:a0:82:2d:eb:11:4e:0c:58:77:2a:c6:ed:76:dc:28:de:
         f5:47:fe:20:25:5c:fe:c5:21:77:0b:4a:7a:1d:06:90:79:fb:
         45:05:36:28:ec:55:35:75:43:42:eb:77:a3:68:8f:28:20:ce:
         5e:7d:9d:64:c7:60:6c:2b:32:f2:5d:cb:62:50:6b:cf:79:ab:
         9b:88:32:7e:00:11:eb:32:86:2f:db:95:47:45:42:df:e3:1e:
         72:a0:70:fa:96:e7:90:b3:9a:51:f8:64:9a:39:b9:d7:1f:ff:
         d7:54:bf:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----