Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/032856D0BB7711F19EF9D3FDCE1D38B0.roa
File:                     032856D0BB7711F19EF9D3FDCE1D38B0.roa (raw, json)
Hash identifier:          brm7KQvbTO+Oe55nZMQBRSlpLn8kF1K+vwxKkUZx288=
Subject key identifier:   B4:8B:54:EE:3C:6E:52:DD:9B:97:82:B3:EB:68:71:F5:67:12:EA:07
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EB36
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/032856D0BB7711F19EF9D3FDCE1D38B0.roa
Signing time:             Mon 28 Sep 2026 19:58:46 +0000
ROA not before:           Mon 28 Sep 2026 19:58:42 +0000
ROA not after:            Sat 05 Jan 2030 19:58:42 +0000
asID:                     139490
IP address blocks:        154.209.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125750 (0x1eb36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 28 19:58:42 2026 GMT
            Not After : Jan  5 19:58:42 2030 GMT
        Subject: CN=6abac6f6-3c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:66:5c:91:ba:c8:35:9b:e9:e1:97:2f:e4:c1:
                    4f:4d:e5:54:b2:91:e1:1d:50:2d:ce:54:12:31:6d:
                    5c:b3:9c:86:16:94:b0:6e:ce:cd:71:12:34:a6:8d:
                    3b:44:cf:6f:d9:ae:4b:ae:0c:40:ec:69:da:a7:93:
                    f1:88:be:11:03:50:cf:c4:1c:f9:28:10:c1:ce:ea:
                    ba:21:72:30:e2:3c:4e:ef:59:04:3d:00:32:b1:33:
                    df:50:ef:4f:6c:0e:cf:6c:f2:15:59:69:02:fa:b4:
                    a3:50:fd:6a:9a:3d:5a:46:86:1e:fb:bb:36:4a:69:
                    52:e8:6b:4e:c4:d6:fa:f3:7d:13:43:bd:46:ff:62:
                    05:66:b1:64:4a:ab:5a:e2:5a:56:7d:c9:a1:28:a7:
                    84:0a:e1:df:8e:16:b3:d4:62:8e:3d:03:2b:47:39:
                    5c:d1:48:c6:a7:1c:3e:50:a9:d6:98:e4:f7:b7:28:
                    8c:52:64:76:36:6b:07:81:5e:a7:f0:6a:2f:6f:53:
                    58:0c:4c:98:f4:d9:ef:29:fe:d2:7c:4c:78:62:fd:
                    4f:72:3c:a3:7d:44:1b:1b:8e:a0:6c:33:47:f8:da:
                    f2:8d:70:46:eb:ec:d7:07:17:33:68:b3:85:25:57:
                    6b:45:e5:85:0c:f1:af:99:49:ed:58:9d:12:41:51:
                    c3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:8B:54:EE:3C:6E:52:DD:9B:97:82:B3:EB:68:71:F5:67:12:EA:07
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/032856D0BB7711F19EF9D3FDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.209.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:cc:74:a7:0c:2d:6c:a4:8b:7c:40:c6:65:68:dc:a0:88:f8:
         1f:9a:6d:ca:df:13:96:46:07:c9:02:78:be:fc:04:29:3b:d3:
         89:bf:32:ca:ea:68:eb:e1:2c:5a:11:92:05:e9:c5:9b:7b:f3:
         52:94:d6:c1:91:3b:dd:fd:60:c7:2b:17:4a:6c:17:62:30:62:
         42:b4:47:81:cc:76:e4:46:0a:15:83:6a:be:a6:a3:96:ee:fc:
         18:27:0d:d9:dd:92:f2:f3:b2:2e:9e:9a:6b:04:85:3b:e3:d2:
         aa:73:a0:ae:89:fa:25:8c:96:eb:f4:b6:d9:99:29:e9:3d:de:
         78:a8:91:a2:aa:10:78:0a:dc:f9:76:f6:62:ed:b7:20:9a:5c:
         79:dd:fb:8c:65:37:e7:f8:b9:b4:a6:46:24:95:41:ea:7f:60:
         4f:86:bf:b5:79:8b:6d:5c:ae:a1:a7:49:81:be:08:7f:73:9e:
         8d:36:ff:08:12:b8:72:fb:42:87:d5:31:f3:8d:c5:7d:b0:d4:
         46:a5:18:86:db:72:58:7d:20:21:fe:af:54:0e:93:b3:d7:6b:
         e0:8a:bd:b1:e5:1b:fd:5c:5c:31:f9:d0:9e:5c:2c:ba:00:76:
         4a:7a:d1:de:7a:cf:0e:f2:77:48:2a:73:19:df:dc:4d:66:bf:
         92:f1:29:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----