Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BB438D2B0EF11F1B64DCDD0CE1D38B0.roa
File:                     6BB438D2B0EF11F1B64DCDD0CE1D38B0.roa (raw, json)
Hash identifier:          cDcgnxum4fsEO1wEa7IJSYpvV352WuzK7kIgoSlCL0I=
Subject key identifier:   6A:E7:C0:5A:98:DD:3B:36:58:EC:DB:2A:CD:22:01:14:76:30:38:41
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E869
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BB438D2B0EF11F1B64DCDD0CE1D38B0.roa
Signing time:             Tue 15 Sep 2026 10:22:58 +0000
ROA not before:           Tue 15 Sep 2026 10:22:54 +0000
ROA not after:            Mon 14 Dec 2026 10:22:54 +0000
asID:                     139880
IP address blocks:        154.83.224.0/20 maxlen: 24
                          154.89.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125033 (0x1e869)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 15 10:22:54 2026 GMT
            Not After : Dec 14 10:22:54 2026 GMT
        Subject: CN=6aa91c82-f6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:65:51:1b:4a:7a:6e:7e:a9:05:ea:fb:d5:c6:
                    c5:92:87:ec:8d:7e:bc:4c:3d:45:7b:05:6c:0a:b2:
                    ed:24:2b:8a:ee:90:65:d1:42:09:05:6c:24:0f:f9:
                    0b:98:e9:5a:15:c2:84:e3:ca:c0:90:bd:3b:45:1e:
                    88:09:8e:70:15:05:f6:1b:02:ac:de:e7:be:64:03:
                    95:d8:86:de:23:31:2a:f3:10:76:01:fb:ce:de:3d:
                    75:77:ee:7a:f6:88:3e:81:96:0d:19:77:ce:dc:32:
                    04:8e:f0:2f:b0:34:aa:05:b0:f6:75:5f:4d:44:6a:
                    f3:2b:e8:45:97:13:75:f9:c5:88:5e:dc:b0:e2:88:
                    fd:a8:b0:07:19:93:dd:95:8e:e0:71:bd:44:3c:38:
                    43:e4:35:fc:7a:0a:f0:5a:13:7c:8f:f0:b0:f1:7f:
                    50:7b:32:38:bb:70:8e:fe:00:9a:c7:fd:1a:ef:37:
                    85:8e:89:c6:93:f9:07:e5:2b:df:77:8a:79:9b:d4:
                    ae:84:9c:9d:1f:94:f7:19:06:05:a1:99:24:3d:c8:
                    82:1c:c7:f0:3a:a7:0a:3f:b4:1f:20:bc:eb:46:68:
                    f9:4c:25:b2:d7:04:de:0a:0f:59:2a:93:c9:c5:e2:
                    51:a6:18:69:6b:cf:5b:a8:ef:06:11:b7:20:39:7f:
                    ad:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E7:C0:5A:98:DD:3B:36:58:EC:DB:2A:CD:22:01:14:76:30:38:41
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BB438D2B0EF11F1B64DCDD0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.224.0/20
                  154.89.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b9:0e:43:10:81:26:73:ff:27:3d:82:94:a6:68:b4:dd:41:7a:
         26:07:02:97:85:dc:e0:64:5a:f2:98:1e:5e:9f:fc:b2:ef:fe:
         76:e0:e9:cb:8a:26:5c:aa:7c:ae:ce:41:1f:2f:33:69:df:17:
         69:3a:86:2b:0c:0c:76:5e:e7:37:6d:b8:a4:04:c0:e0:8e:13:
         04:a0:c6:1a:f8:6c:25:d2:e2:c7:43:62:c0:7e:76:e6:c8:70:
         b2:7c:93:db:69:2f:28:b5:c9:68:55:30:f3:ab:9c:0a:b5:ef:
         da:4a:13:98:eb:b7:34:94:e1:53:13:67:66:10:34:9f:27:1d:
         71:49:a6:96:8c:fa:65:7a:0f:e3:90:82:f4:9c:c3:d4:32:88:
         4a:c4:a7:34:4f:22:3c:2f:d2:fd:25:24:6a:61:56:4c:48:3d:
         e0:a6:ad:91:b4:cf:50:47:f0:41:e7:85:a9:dd:2d:c6:15:b5:
         0c:2f:d6:41:43:b7:60:b7:81:09:3f:10:7e:a9:44:f4:91:00:
         40:63:bf:f4:44:60:84:43:a1:01:72:3e:6e:24:4d:b6:e2:3b:
         73:67:4c:e4:33:16:9a:c4:9c:7c:ce:af:51:d8:bf:83:b2:be:
         e1:e1:08:a7:8a:9d:f6:9d:61:7a:05:0e:bd:27:d4:17:52:b0:
         25:49:d9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----