Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E5EDEE0B71E11F1992F24B4CE1D38B0.roa
File:                     1E5EDEE0B71E11F1992F24B4CE1D38B0.roa (raw, json)
Hash identifier:          L4RMHl2Gkn/1zMAAAyWiia2sHbFkHRs1vjj6aijSiM0=
Subject key identifier:   45:DF:F8:3A:1F:AD:F1:A1:6F:06:4F:93:1F:A9:37:C7:FA:96:3E:37
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EA41
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E5EDEE0B71E11F1992F24B4CE1D38B0.roa
Signing time:             Wed 23 Sep 2026 07:12:21 +0000
ROA not before:           Wed 23 Sep 2026 07:12:17 +0000
ROA not after:            Sat 25 Sep 2027 07:12:17 +0000
asID:                     135097
IP address blocks:        154.89.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 07:57:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125505 (0x1ea41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 23 07:12:17 2026 GMT
            Not After : Sep 25 07:12:17 2027 GMT
        Subject: CN=6ab37bd5-f6f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:18:40:f8:d2:6a:d2:97:6d:7b:ca:e0:70:6e:
                    0d:e4:02:28:96:75:e1:03:71:22:66:2c:11:3f:50:
                    c6:fd:d6:1e:8f:f5:75:bf:34:94:bf:55:7e:8a:05:
                    4a:1f:38:1f:47:96:64:e9:d4:62:64:ec:de:92:aa:
                    b4:18:97:b1:6e:5b:61:56:76:67:6a:2a:ee:bf:bd:
                    69:3f:cf:f8:ab:e5:38:d3:62:49:1d:55:40:e5:b7:
                    cd:41:9c:a6:9a:d0:d1:d0:91:df:c4:32:dc:cd:36:
                    fd:00:21:5e:56:87:36:a8:d7:d0:8a:69:13:f8:34:
                    7b:fc:de:5c:30:c4:89:be:36:72:e6:e1:8e:a0:4f:
                    ca:13:96:c7:3d:b5:56:e5:4d:81:76:61:9d:24:38:
                    5e:e4:0b:ac:03:d4:d0:fd:f4:85:2f:93:96:01:72:
                    0b:27:e4:9e:f3:07:f2:d7:4c:5f:48:34:77:9c:0b:
                    8e:c9:49:32:17:70:f2:e3:ce:eb:f8:f6:b0:af:7f:
                    24:7c:fa:60:69:96:c7:3c:62:38:49:55:71:6c:5c:
                    70:7f:f0:e9:bc:33:22:04:57:e5:be:69:62:1c:1a:
                    50:4b:16:c5:8d:8c:11:74:ef:0e:de:d3:8c:aa:06:
                    65:e9:95:2e:28:8c:48:f7:69:85:91:25:90:c7:62:
                    12:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DF:F8:3A:1F:AD:F1:A1:6F:06:4F:93:1F:A9:37:C7:FA:96:3E:37
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E5EDEE0B71E11F1992F24B4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         98:df:b1:14:35:4e:1f:ee:f0:a1:85:0d:c1:7f:c6:d2:b5:4a:
         74:73:24:e9:a6:f8:20:a5:f7:47:84:a7:a0:22:7f:5b:12:c5:
         72:75:fb:8e:b9:2b:3d:e5:c3:08:1c:d4:eb:00:d0:7b:3a:d3:
         57:1c:22:c8:8c:f4:f9:e0:fb:42:a1:3e:50:73:af:52:44:2d:
         0e:d2:81:0e:56:ec:ec:9f:5f:86:75:3e:fb:88:34:70:56:76:
         bc:56:2b:69:0a:8e:61:17:83:eb:7b:dc:2c:c7:ff:e2:67:61:
         ed:a3:bc:f1:f3:de:16:89:72:74:5d:ea:9c:8d:a8:6d:1a:8a:
         bc:b4:63:51:21:85:76:e0:70:04:5f:39:ad:60:05:20:56:60:
         ef:46:f4:cd:84:ba:9b:35:c6:cf:30:33:0b:6a:eb:17:f5:9b:
         e7:05:8f:d2:c8:d0:47:71:e1:b4:7f:f7:fc:36:2d:c4:a6:d3:
         16:52:36:e8:d3:cc:d8:a8:fe:f5:67:36:54:cd:c8:3d:6b:7d:
         ba:6b:4b:59:66:0e:a9:6c:cd:47:59:f9:e4:ed:de:70:05:15:
         c5:d3:95:02:74:9c:9c:28:aa:b6:17:93:47:67:c4:ec:7d:4c:
         fc:0d:fd:d7:f3:f6:ed:62:0b:60:b1:88:da:84:e9:ef:64:ca:
         21:46:1f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----