Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A55502EA9BE11F1ACDF25C7CE1D38B0.roa
File:                     3A55502EA9BE11F1ACDF25C7CE1D38B0.roa (raw, json)
Hash identifier:          Un0uuUdtdRozC0QmNoM6vCOda57t7LTjeuzrD7vbfjE=
Subject key identifier:   AC:67:64:40:4A:98:25:E5:EF:2D:CD:2B:08:CE:69:57:70:57:85:C3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E5C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A55502EA9BE11F1ACDF25C7CE1D38B0.roa
Signing time:             Sun 06 Sep 2026 06:43:12 +0000
ROA not before:           Sun 06 Sep 2026 06:43:07 +0000
ROA not after:            Sat 05 Dec 2026 06:43:07 +0000
asID:                     142403
IP address blocks:        154.221.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124356 (0x1e5c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  6 06:43:07 2026 GMT
            Not After : Dec  5 06:43:07 2026 GMT
        Subject: CN=6a9d0b7f-4584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3f:1b:f2:2d:06:fd:0c:a2:d3:ce:64:38:e6:
                    4f:20:d9:f3:2d:5e:b0:11:6f:27:31:fb:b7:79:95:
                    c5:2c:0c:12:b5:ea:11:62:69:5d:3a:0c:5c:e7:05:
                    c3:9c:95:e5:f9:0d:e3:02:ba:af:dd:2a:b7:7f:6f:
                    91:3a:7f:2b:57:e5:4f:5e:78:b2:f1:b1:cf:82:bf:
                    9d:13:36:29:24:ab:31:fe:c9:bf:70:e0:44:10:21:
                    63:af:9b:ee:e9:53:da:24:ed:0c:3e:9a:00:32:4e:
                    88:3a:86:26:b3:ea:34:e7:4a:41:4c:f4:db:e4:16:
                    60:f4:61:9c:fe:f6:7a:64:01:05:62:8b:c1:6a:0e:
                    74:1b:de:f1:f5:6b:33:c4:b7:ec:3f:4a:c6:4a:a0:
                    78:08:c7:cb:f3:59:97:b7:3b:4e:b3:97:74:71:de:
                    13:a7:3e:4a:bf:c7:c8:7b:5f:b9:52:e7:11:0f:a3:
                    10:77:b3:b3:bf:df:05:f4:94:22:2f:d1:c1:58:26:
                    89:4c:7a:54:80:40:c6:05:9b:bf:09:06:22:3a:be:
                    e5:bf:6c:3e:8c:39:73:5d:6b:4b:53:0c:0a:b2:66:
                    0b:cf:89:cf:e5:20:b1:d5:bb:8f:76:76:ce:dd:bd:
                    2b:d2:2a:2d:53:db:e5:59:36:ac:8f:79:e4:76:d0:
                    d0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:67:64:40:4A:98:25:E5:EF:2D:CD:2B:08:CE:69:57:70:57:85:C3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A55502EA9BE11F1ACDF25C7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.221.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:12:dd:dc:31:de:ef:04:5d:98:9f:54:cf:ce:59:99:c6:9d:
         85:3d:71:29:ba:d1:91:07:b9:7a:13:34:30:25:5d:a0:0f:ab:
         b0:16:15:c0:21:e6:b6:80:f2:dd:b7:f3:41:15:03:34:ef:41:
         3c:bb:7c:c5:9a:95:fe:54:75:b6:f1:85:8e:ce:60:8d:2f:96:
         1c:04:41:d4:b4:6e:04:b0:89:82:07:93:69:da:36:98:50:e0:
         e7:b5:f2:e4:12:17:6f:a2:aa:9d:d5:6c:db:f6:98:e8:d8:8a:
         32:a3:5e:74:4f:a7:16:ad:2f:31:30:40:f5:06:0f:19:82:38:
         41:79:3b:35:e6:9b:d6:d0:a9:06:87:7c:d2:81:bb:cd:4c:be:
         1d:ef:4f:fd:94:96:19:99:00:0c:ac:bc:91:cf:4f:31:0b:3d:
         2a:c8:7a:4d:60:71:01:b6:28:59:2a:4c:6f:d9:88:15:76:03:
         dc:75:3d:3b:40:c4:84:ed:42:4f:9f:43:24:ff:18:d9:e9:ab:
         fb:c6:20:bc:1a:73:da:5d:ac:57:7a:9c:09:46:a8:d4:b9:3b:
         f6:17:06:e7:1e:1d:1b:6a:06:df:76:9c:e1:98:76:4a:6b:76:
         8e:01:92:9a:26:e9:8d:16:ab:61:4f:f1:0f:69:ec:af:9c:30:
         ef:4d:9d:b1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAeXEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTA2MDY0MzA3WhcNMjYxMjA1MDY0MzA3WjAYMRYw
FAYDVQQDEw02YTlkMGI3Zi00NTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnz8b8i0G/Qyi085kOOZPINnzLV6wEW8nMfu3eZXFLAwSteoRYmldOgxc
5wXDnJXl+Q3jArqv3Sq3f2+ROn8rV+VPXniy8bHPgr+dEzYpJKsx/sm/cOBEECFj
r5vu6VPaJO0MPpoAMk6IOoYms+o050pBTPTb5BZg9GGc/vZ6ZAEFYovBag50G97x
9WszxLfsP0rGSqB4CMfL81mXtztOs5d0cd4Tpz5Kv8fIe1+5UucRD6MQd7Ozv98F
9JQiL9HBWCaJTHpUgEDGBZu/CQYiOr7lv2w+jDlzXWtLUwwKsmYLz4nP5SCx1buP
dnbO3b0r0iotU9vlWTasj3nkdtDQpQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKxn
ZEBKmCXl7y3NKwjOaVdwV4XDMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zQTU1NTAyRUE5QkUxMUYxQUNERjI1QzdDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt0fMA0GCSqGSIb3DQEB
CwUAA4IBAQClEt3cMd7vBF2Yn1TPzlmZxp2FPXEputGRB7l6EzQwJV2gD6uwFhXA
Iea2gPLdt/NBFQM070E8u3zFmpX+VHW28YWOzmCNL5YcBEHUtG4EsImCB5Np2jaY
UODntfLkEhdvoqqd1Wzb9pjo2Ioyo150T6cWrS8xMED1Bg8ZgjhBeTs15pvW0KkG
h3zSgbvNTL4d70/9lJYZmQAMrLyRz08xCz0qyHpNYHEBtihZKkxv2YgVdgPcdT07
QMSE7UJPn0Mk/xjZ6av7xiC8GnPaXaxXepwJRqjUuTv2FwbnHh0bagbfdpzhmHZK
a3aOAZKaJumNFqthT/EPaeyvnDDvTZ2x
-----END CERTIFICATE-----