Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF3D97A2AC1811F184A4DF08CF1D38B0.roa
File:                     DF3D97A2AC1811F184A4DF08CF1D38B0.roa (raw, json)
Hash identifier:          NcbDGcB/juil3dHLZ6OI2YzX40O6db9r6WkPlukCFs4=
Subject key identifier:   11:A9:A8:38:1F:0E:B6:2A:AF:8C:9B:C2:71:5B:0D:92:8C:A4:09:82
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E69A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF3D97A2AC1811F184A4DF08CF1D38B0.roa
Signing time:             Wed 09 Sep 2026 06:37:05 +0000
ROA not before:           Wed 09 Sep 2026 06:37:01 +0000
ROA not after:            Wed 04 Nov 2026 06:37:01 +0000
asID:                     32043
IP address blocks:        154.223.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124570 (0x1e69a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  9 06:37:01 2026 GMT
            Not After : Nov  4 06:37:01 2026 GMT
        Subject: CN=6aa0fe91-778a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:17:9b:80:11:82:c5:b8:ee:ff:9d:62:6d:1a:
                    36:b3:a4:9e:55:0c:57:b5:3b:fc:1e:37:67:cd:3c:
                    86:46:bd:de:cc:62:cd:b9:0e:55:ab:14:66:fe:af:
                    60:7f:29:ab:b4:e8:5f:95:9d:14:64:3f:a3:f8:e6:
                    ee:ca:65:44:b5:14:17:49:fa:6e:87:8c:ca:3b:0b:
                    e0:dc:38:05:f1:d2:ec:52:69:70:53:9f:f6:7f:97:
                    73:23:ab:40:70:7d:e0:45:68:7f:c2:9c:36:4e:96:
                    74:96:b4:ae:40:40:68:ab:0f:58:7c:5f:00:84:d9:
                    54:bf:ee:89:28:4c:02:9c:a0:af:01:20:df:43:25:
                    16:e9:70:3b:45:19:cb:52:1b:63:52:e4:a5:a3:4b:
                    d0:29:3b:9a:65:77:48:44:15:83:0e:41:67:5d:d9:
                    b1:43:2e:52:e1:98:13:dc:b8:cb:8d:aa:61:ad:fa:
                    35:78:09:e8:41:f8:ba:87:44:dd:9d:b2:8d:f5:f0:
                    c3:58:8d:bb:f3:94:d1:ce:ba:45:fe:8a:a9:80:68:
                    27:93:c8:c0:84:ae:06:6e:5f:bb:61:d1:c3:7a:3d:
                    01:74:0c:ca:52:cd:72:0d:ba:1a:9c:7a:32:cf:fc:
                    dd:bb:13:3e:b2:7e:8e:32:68:3a:61:a0:41:51:49:
                    a6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A9:A8:38:1F:0E:B6:2A:AF:8C:9B:C2:71:5B:0D:92:8C:A4:09:82
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF3D97A2AC1811F184A4DF08CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.223.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:a1:43:1c:39:dc:0a:a9:82:cf:6a:fe:c8:a3:f6:d9:f6:a0:
         08:5b:9f:70:35:80:c4:07:b9:fe:43:3a:93:dc:71:ec:07:c1:
         91:61:f0:e3:12:b6:07:b2:43:f4:b0:25:78:71:3a:f1:05:49:
         ab:4d:c7:90:ae:9a:2a:7c:77:3b:44:5b:c5:3b:f2:3a:5d:83:
         47:f5:49:1f:33:19:66:ee:3d:bf:2a:0c:d2:f7:55:a0:ca:e3:
         ba:ba:8c:f7:51:fb:e8:38:e4:aa:7c:15:7b:87:cb:21:85:ab:
         c2:58:97:fd:3e:83:1f:e5:28:ab:0e:58:de:c9:f8:4e:09:9e:
         6e:0f:59:8d:54:73:9f:4c:b4:7e:73:1d:63:39:bf:e0:be:3b:
         30:a2:98:91:27:52:69:19:d6:42:02:ce:3a:b6:88:ee:0e:f2:
         a7:ac:b6:2b:29:18:dc:51:47:98:46:39:53:3d:be:41:a4:3e:
         b1:27:38:fe:a1:03:80:43:9d:24:95:ae:9b:84:0a:05:4b:af:
         97:b5:42:c4:73:5f:95:ae:22:6e:7b:47:a8:09:e7:e1:ef:2c:
         31:2c:15:c1:cc:3e:75:3e:b0:5c:b0:a1:a9:e7:ac:5a:13:ba:
         5a:36:37:c0:26:2a:90:ad:3b:2d:78:bd:55:f2:c6:48:60:32:
         3b:c3:e9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----