Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/214396769B9611F19AC04FC7CE1D38B0.roa
File:                     214396769B9611F19AC04FC7CE1D38B0.roa (raw, json)
Hash identifier:          795GSPWjqiGqnRgx5N2P+tvtLeSNRo0WtANsNsWuzps=
Subject key identifier:   0B:FF:36:46:09:BF:EC:8D:60:36:87:97:55:CE:74:72:3E:8E:CA:8A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DFD0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/214396769B9611F19AC04FC7CE1D38B0.roa
Signing time:             Wed 19 Aug 2026 06:20:53 +0000
ROA not before:           Wed 19 Aug 2026 06:20:49 +0000
ROA not after:            Fri 13 Aug 2027 06:20:49 +0000
asID:                     137990
IP address blocks:        154.197.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122832 (0x1dfd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 19 06:20:49 2026 GMT
            Not After : Aug 13 06:20:49 2027 GMT
        Subject: CN=6a854b45-fc11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:98:92:75:3a:d0:24:16:92:4b:68:29:f4:1f:
                    06:02:28:32:75:0d:d9:70:b6:b5:2c:c6:5a:23:75:
                    3e:29:34:d1:4d:2b:d1:f3:34:63:51:7a:db:26:79:
                    02:3c:81:a7:fb:84:03:14:df:db:aa:20:c6:1f:e6:
                    6c:2b:ca:cf:02:a7:a1:e2:52:63:bc:90:65:c0:73:
                    b1:f3:38:fc:0a:af:e5:53:0d:2a:b0:2d:2e:44:af:
                    6e:f1:33:4b:11:56:2c:8d:32:55:83:84:21:0d:27:
                    ea:6c:2b:95:c4:d4:35:55:8c:4e:52:d8:08:2f:ae:
                    9f:74:b9:fd:7b:72:72:04:c4:55:6d:7b:20:1f:77:
                    3b:10:3f:2c:14:4e:74:a0:f5:50:ab:56:fc:88:86:
                    7a:8f:a2:f7:ca:5d:b3:19:ce:ad:b1:dd:18:8a:c3:
                    d6:7a:20:02:95:6f:57:0b:37:21:10:35:88:a2:b2:
                    c3:30:16:b1:b3:29:ca:e9:56:e3:7c:e5:49:ab:19:
                    9d:47:29:4a:e3:c0:7c:01:5e:55:75:ba:e2:2f:f4:
                    3a:6a:4f:3e:93:aa:b6:f3:79:d6:4f:7b:d9:ca:3b:
                    d9:e9:58:ce:ab:90:78:39:b0:ab:a4:a7:8a:54:d3:
                    fa:69:a7:6f:11:fd:74:08:95:d0:9e:04:82:e3:96:
                    17:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FF:36:46:09:BF:EC:8D:60:36:87:97:55:CE:74:72:3E:8E:CA:8A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/214396769B9611F19AC04FC7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:56:ee:ae:17:5f:42:e9:8c:21:f5:c2:82:cd:0b:24:31:70:
         de:6c:f3:1d:75:27:6e:ef:e1:c0:8f:28:2e:10:88:64:ac:da:
         69:27:e3:0d:bf:28:27:2b:94:83:e9:db:4d:e0:6a:6d:9f:6e:
         a1:76:10:24:74:62:72:b7:89:2b:1a:10:1e:f1:34:41:b4:0d:
         01:0b:ea:86:c3:fd:81:d9:42:0e:7a:0e:38:e5:6d:8f:fd:63:
         5b:9c:92:f1:92:d6:d7:46:fb:62:b5:d0:9b:9c:76:c0:2b:ea:
         53:6e:84:6f:a3:ca:c9:28:71:10:d9:88:c2:31:83:2e:d6:b5:
         89:38:07:75:e6:2a:da:10:24:d9:2f:9d:8c:d7:80:14:6f:6e:
         33:fd:82:f1:20:b7:f9:e5:02:7c:e5:ce:2a:9c:c3:93:cf:29:
         9d:1b:e0:0d:c0:19:78:dc:41:a3:e0:2f:6e:1f:18:4b:60:40:
         3c:e5:5b:c3:28:14:57:b9:99:c2:e3:12:97:37:6a:53:3f:0f:
         da:55:02:cd:80:e4:26:22:73:5f:95:66:c9:fb:ae:a3:13:b7:
         41:b1:08:ae:df:65:c2:6a:f3:ed:1f:85:ea:70:3b:90:12:7a:
         19:f1:e9:3f:8b:f6:da:65:4e:8d:9b:92:58:3c:31:58:9a:82:
         b2:c3:57:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----