Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55DC8784A93E11F195C2FBB5CE1D38B0.roa
File:                     55DC8784A93E11F195C2FBB5CE1D38B0.roa (raw, json)
Hash identifier:          ngpPo97Ajcf/jR8h1oPEPR6BHu3KD0zHuVOQxeH8kb8=
Subject key identifier:   42:FE:10:7F:8D:CD:88:06:97:93:9C:FA:F1:E6:42:32:A1:F9:7E:A9
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E5B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55DC8784A93E11F195C2FBB5CE1D38B0.roa
Signing time:             Sat 05 Sep 2026 15:27:42 +0000
ROA not before:           Sat 05 Sep 2026 15:27:38 +0000
ROA not after:            Tue 13 Oct 2026 15:27:38 +0000
asID:                     152698
IP address blocks:        154.206.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124341 (0x1e5b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  5 15:27:38 2026 GMT
            Not After : Oct 13 15:27:38 2026 GMT
        Subject: CN=6a9c34ee-c54f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ca:6f:a2:09:fb:c9:c9:9c:35:ee:b3:2f:ff:
                    92:d4:dd:23:b4:47:fb:88:78:46:66:0e:11:e6:d3:
                    74:03:4b:52:8a:17:6d:f2:c6:58:2c:62:ce:17:c2:
                    99:2b:80:70:04:16:97:89:a8:f4:d4:51:e9:e1:51:
                    91:6c:ef:84:11:03:e9:bf:6c:e8:9d:9e:88:17:75:
                    ca:65:5f:ba:6e:13:85:f5:0f:7c:a7:e5:41:cb:f0:
                    72:83:76:87:c1:2a:6f:83:b5:91:a7:a4:8a:a0:0e:
                    c3:37:87:9d:62:0b:94:1d:9b:93:00:42:29:0f:b5:
                    5e:7c:83:b0:29:75:b9:87:0a:90:aa:b8:98:e8:81:
                    73:f0:88:15:f6:87:71:9c:cb:c1:e0:97:fe:b1:eb:
                    9f:ba:4c:77:c3:e7:9e:a6:8b:f3:50:35:76:c9:fe:
                    f8:91:67:f6:65:c8:6b:10:db:23:3f:ad:cb:ee:26:
                    94:4f:2b:5f:a5:18:56:01:75:7d:c4:8f:3f:77:9b:
                    f0:99:fb:c0:0a:94:e6:fe:ad:3b:4c:2e:13:9d:3b:
                    03:d2:5c:f7:dd:55:d5:61:1a:80:2c:eb:f4:ac:46:
                    62:cd:47:7a:8b:47:85:cc:e1:2a:6f:c3:3d:a9:ae:
                    a0:60:0e:7b:84:81:04:55:d9:e0:06:7e:74:08:75:
                    98:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FE:10:7F:8D:CD:88:06:97:93:9C:FA:F1:E6:42:32:A1:F9:7E:A9
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55DC8784A93E11F195C2FBB5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.206.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:60:e1:82:92:e5:a6:5a:0b:ad:62:fc:ce:b3:4e:14:34:54:
         08:51:57:61:ae:85:ef:9c:d4:95:e2:e8:ce:cd:a5:66:61:c3:
         e8:cb:24:74:49:cd:0d:fb:a6:bf:9f:6d:87:63:74:65:96:38:
         3f:bb:0a:9a:32:a3:65:9c:f1:6a:2e:87:2e:27:1e:66:f3:c0:
         84:6a:fe:5a:48:0a:77:a1:8d:7e:eb:ee:ba:5e:c4:45:80:8e:
         86:1b:b0:82:ef:56:7b:cf:43:eb:e4:26:71:07:cb:fc:a8:de:
         6d:cf:24:fd:c5:f4:82:c2:97:7e:03:d1:10:7e:39:f3:b0:1e:
         31:f3:3a:d6:b3:82:03:d8:92:79:90:74:28:27:10:7e:01:bf:
         57:de:ab:8d:a5:1f:53:ae:ce:0a:ff:ec:ec:4d:40:bb:b1:57:
         ee:95:20:2d:32:94:15:3d:92:79:84:d3:45:a8:26:ca:83:ce:
         06:2b:3c:76:76:ca:a8:78:0c:8c:b6:66:9b:21:0d:ab:ad:97:
         50:fe:48:7e:c8:18:84:bf:e7:5b:51:a6:9d:a5:6d:6d:31:ec:
         e1:55:d3:24:09:09:a1:19:c5:53:c5:42:30:e8:0c:a3:7b:9c:
         3f:e4:da:dc:e4:b6:96:0b:eb:68:a4:cf:d0:83:4d:3c:31:ae:
         82:20:4a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----