Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2324BC3CAC2511F18742BDCFCE1D38B0.roa
File:                     2324BC3CAC2511F18742BDCFCE1D38B0.roa (raw, json)
Hash identifier:          wa991P68K/23Dy2cZCH9OQGnsjJ7Qi5v6aMIriEaBt4=
Subject key identifier:   A3:61:8F:7F:89:9D:D4:D3:58:D8:EA:B8:CB:4E:EC:96:D6:B6:20:93
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E6A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2324BC3CAC2511F18742BDCFCE1D38B0.roa
Signing time:             Wed 09 Sep 2026 08:04:53 +0000
ROA not before:           Wed 09 Sep 2026 08:04:49 +0000
ROA not after:            Thu 16 Sep 2027 08:04:49 +0000
asID:                     13335
IP address blocks:        154.223.134.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124584 (0x1e6a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  9 08:04:49 2026 GMT
            Not After : Sep 16 08:04:49 2027 GMT
        Subject: CN=6aa11325-e942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3a:2a:66:13:2d:0c:ba:47:3b:7b:15:7a:61:
                    96:84:22:21:f2:46:26:52:44:12:42:03:80:98:05:
                    f7:6d:92:14:a0:f3:09:2f:42:85:35:fd:ef:f2:20:
                    3d:dc:bd:21:91:87:f6:5d:4e:4f:fb:a3:cf:8c:74:
                    0a:a7:09:f5:ae:4d:7d:c3:31:30:d1:7b:bc:da:93:
                    01:9a:cd:55:32:fe:40:bb:77:28:eb:e3:0e:01:35:
                    68:8f:66:af:a2:5f:6e:fd:b0:c1:f8:6e:58:80:72:
                    81:83:70:f9:d8:d6:fc:7f:65:bf:d6:14:8c:30:2e:
                    8f:8a:91:92:fb:21:bc:57:50:27:a9:35:ac:8a:ae:
                    3c:73:49:f6:df:ed:66:c0:6a:c0:f4:a3:b8:46:44:
                    5e:de:49:69:cb:0d:ad:df:29:62:dd:d6:64:27:9e:
                    13:82:45:e2:d3:8a:e6:20:85:25:a0:5d:4c:d1:12:
                    74:35:b0:6f:8f:ef:f1:d9:d5:74:a8:fb:b5:a5:52:
                    c2:56:cc:62:1b:93:81:80:50:25:18:90:a2:bc:35:
                    37:fc:7a:a3:11:9d:54:2a:eb:c8:10:15:b8:75:91:
                    01:36:9b:82:6c:94:46:d0:7a:63:6a:19:3f:7a:62:
                    82:3e:9d:a4:18:61:ee:9f:53:91:da:dc:55:3e:9e:
                    80:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:61:8F:7F:89:9D:D4:D3:58:D8:EA:B8:CB:4E:EC:96:D6:B6:20:93
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2324BC3CAC2511F18742BDCFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.223.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:1f:33:90:c1:91:4a:62:06:32:9b:73:f1:b8:73:54:80:fe:
         ee:16:1b:41:44:9c:91:01:b1:05:69:c4:8e:13:67:ba:50:6b:
         31:c1:20:14:00:27:58:bc:16:90:a9:07:13:a6:4e:e1:92:b2:
         21:75:c8:de:00:ac:04:77:46:26:16:3d:4b:7c:5e:6c:7e:e6:
         c2:37:04:dc:91:39:20:34:7c:fd:8e:6f:ff:b3:f6:ba:9c:6b:
         f2:3b:f7:e1:0a:c4:4e:f1:bb:2a:02:6f:76:50:b5:d9:2c:11:
         33:0d:37:6d:9c:f4:e9:c5:12:dc:84:96:f0:a9:0c:49:a6:aa:
         de:de:0d:4d:d2:5c:b9:34:85:02:2d:78:29:85:f1:83:08:2a:
         0d:f3:8c:97:6f:98:b4:a6:0d:7e:05:10:f3:bb:e1:77:cc:69:
         d5:37:7c:79:c4:d7:8c:77:8c:8e:02:2a:3a:49:d2:fb:07:6a:
         92:fe:57:cf:15:32:02:4a:da:8b:ba:86:3a:2e:e2:52:f3:17:
         07:d0:8e:14:ac:68:8c:26:cc:36:ef:64:dd:96:a4:26:39:82:
         52:0f:e6:cc:8a:c7:15:08:c3:5e:d1:92:96:a0:eb:35:c4:ec:
         ea:1b:d2:e7:fc:25:9c:cc:d8:40:2e:b4:2c:d1:19:46:89:42:
         e5:1b:11:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----