Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C8D99EAA78711F1B31A39DACE1D38B0.roa
File:                     6C8D99EAA78711F1B31A39DACE1D38B0.roa (raw, json)
Hash identifier:          eS6ZmHXjELwg8sORR2ziQpYDr7aO67ShWri5p0ozKj0=
Subject key identifier:   DF:93:16:01:78:CC:1A:F7:01:90:2F:8C:C7:4F:5F:D2:BF:53:DC:A3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E52B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C8D99EAA78711F1B31A39DACE1D38B0.roa
Signing time:             Thu 03 Sep 2026 11:05:51 +0000
ROA not before:           Thu 03 Sep 2026 11:05:47 +0000
ROA not after:            Mon 14 Dec 2026 11:05:47 +0000
asID:                     211826
IP address blocks:        154.197.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 Oct 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124203 (0x1e52b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  3 11:05:47 2026 GMT
            Not After : Dec 14 11:05:47 2026 GMT
        Subject: CN=6a99548f-20f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5b:ad:a5:5d:ce:d9:70:1a:f7:e5:6e:7e:64:
                    13:9b:b2:90:fb:a6:7a:84:37:68:d4:95:0c:a1:36:
                    5f:fc:2d:11:01:5a:92:c6:96:ec:41:80:bc:2f:ed:
                    43:52:c8:e1:4b:de:ca:85:5d:95:0a:67:44:7c:29:
                    b3:d2:a7:20:25:21:de:9c:c3:60:e8:fe:98:76:4f:
                    3e:75:cf:3f:fe:e9:2b:47:cf:59:71:eb:f5:21:94:
                    1a:2a:d6:9d:d3:50:a8:f5:9f:e9:95:fa:13:c8:2e:
                    dc:52:35:ad:b5:ed:15:59:3a:e0:9c:bf:78:e4:fa:
                    e3:96:14:8f:e8:c8:9a:55:4f:33:ab:b2:b7:20:57:
                    6d:a5:1e:a0:46:18:42:c4:20:05:c0:ff:cb:e5:90:
                    89:89:df:83:7f:58:13:ac:cc:07:27:64:6b:49:62:
                    dd:46:e4:ed:41:a7:6e:66:21:92:9c:1f:1a:66:da:
                    95:71:aa:ff:a3:0e:f7:a5:a8:46:ef:5f:db:e1:43:
                    31:d7:ca:df:22:05:e9:f7:93:84:c9:fe:2b:40:e5:
                    93:d9:9f:cd:30:ea:15:d0:95:b8:71:f4:b9:6b:42:
                    03:33:f7:38:62:a6:a5:d1:51:ad:f0:a1:29:34:7f:
                    fd:0f:eb:a4:4c:28:b9:bd:d7:b5:62:c3:5a:b5:37:
                    c2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:93:16:01:78:CC:1A:F7:01:90:2F:8C:C7:4F:5F:D2:BF:53:DC:A3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C8D99EAA78711F1B31A39DACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:fe:e0:59:00:cd:64:ee:ca:83:2a:c9:c3:48:ab:ae:9a:96:
         f6:f0:98:ed:f1:92:15:cf:ac:4f:00:9e:ed:1b:3e:7c:7b:82:
         7d:37:bf:23:c7:ce:46:6f:48:17:06:8f:2b:ce:6e:b0:ad:16:
         e3:6f:05:78:de:2e:f3:b6:9a:30:39:34:3e:a3:fa:0e:93:df:
         72:d1:71:7c:1e:cb:86:5b:5d:11:59:62:07:36:0a:0e:85:55:
         5f:8d:fc:52:c9:83:be:23:66:19:46:ee:e2:55:f5:03:8c:fd:
         14:8f:e6:22:c1:8e:30:bb:e4:9d:75:bf:2c:29:b2:38:42:77:
         de:60:48:39:d8:60:37:cd:fb:ff:9a:4c:d6:b4:85:b3:5b:67:
         b1:6d:77:9e:21:70:b0:5a:d1:5d:2f:08:94:c4:d2:b6:79:b6:
         63:b5:92:da:53:fc:4e:25:44:5b:cb:94:d2:40:00:a7:e8:18:
         53:9f:34:74:fb:d2:77:65:56:fd:e0:97:83:7e:f4:12:d2:7f:
         1e:07:87:09:33:29:fd:fe:ea:f9:a6:61:ad:33:f0:48:2a:46:
         b8:59:f7:2f:ed:d5:05:fb:46:87:24:b1:85:34:96:8d:ed:b5:
         50:c9:2a:98:a2:66:f6:f8:ad:6f:ad:22:09:01:76:6c:bc:fd:
         09:9c:c4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----