Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/793689D0866811F196C8190DCF1D38B0.roa
File:                     793689D0866811F196C8190DCF1D38B0.roa (raw, json)
Hash identifier:          OM5LazEzS1tR5Zd8R/Lr8IAFpJhF0WYMPTtMRmgJj5c=
Subject key identifier:   C5:9F:1B:18:C4:26:FB:FA:A8:59:5A:83:97:9F:DB:7D:18:E6:8F:4D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01DB0F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/793689D0866811F196C8190DCF1D38B0.roa
Signing time:             Thu 23 Jul 2026 07:31:10 +0000
ROA not before:           Thu 23 Jul 2026 07:31:06 +0000
ROA not after:            Sun 30 Aug 2026 07:31:06 +0000
asID:                     18013
IP address blocks:        154.201.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121615 (0x1db0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jul 23 07:31:06 2026 GMT
            Not After : Aug 30 07:31:06 2026 GMT
        Subject: CN=6a61c33e-621a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:86:8c:88:ab:62:30:9c:6e:c3:ff:a4:13:9f:
                    6a:4b:e9:25:34:3b:e7:78:e2:f2:cf:3e:52:dc:7a:
                    84:6d:22:df:39:8f:ac:07:da:6d:cb:79:af:d8:75:
                    3b:90:46:39:9a:63:e5:d3:73:59:ac:47:f8:c7:69:
                    b2:1e:79:93:07:06:27:37:e8:d6:8b:34:87:ae:e3:
                    df:a4:de:b0:5e:ed:d9:fb:68:79:fd:03:ec:d6:01:
                    fd:11:5d:c9:2d:b4:b8:3e:1b:c4:ff:37:95:9e:bb:
                    ac:32:b2:fd:91:6a:2b:9c:b0:a1:ab:23:5b:b0:a7:
                    d2:de:93:68:30:65:67:9b:7c:55:80:20:5c:45:34:
                    2e:48:75:ab:92:40:12:20:50:91:4a:1b:ed:43:b7:
                    ea:32:45:14:c9:e4:f2:7e:52:cb:18:d2:28:78:63:
                    2b:51:c6:28:85:e4:00:91:72:cb:c6:c8:93:f2:f5:
                    96:49:79:39:f5:9a:dd:1b:69:23:be:a0:0c:0a:ac:
                    c5:8d:cd:c1:48:8f:6a:01:90:c4:17:19:c5:db:d8:
                    e9:d8:f0:7a:d5:d1:d2:1c:b9:6f:ec:0d:7f:ed:dc:
                    f6:ee:4e:1c:c8:72:d7:b4:c2:75:40:64:43:92:94:
                    be:33:36:c1:a2:5f:97:01:5b:81:38:d7:e7:25:ce:
                    a1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9F:1B:18:C4:26:FB:FA:A8:59:5A:83:97:9F:DB:7D:18:E6:8F:4D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/793689D0866811F196C8190DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a1:a1:e4:b6:44:21:e1:16:86:ab:0e:1d:93:35:0c:7e:1e:e7:
         7a:6b:20:32:ad:c8:11:eb:68:7a:ac:e2:6b:a6:41:78:40:2c:
         6c:eb:72:7c:39:7b:8e:70:3d:96:68:0c:81:fd:45:a3:e9:ba:
         4d:5a:f5:93:34:6b:46:88:48:fc:b7:8d:c7:e6:36:c0:3d:68:
         7c:84:c1:8f:bf:c8:2d:f9:38:bc:64:00:39:03:cd:99:51:1c:
         84:0b:03:b1:2a:cd:f6:c8:36:c5:bf:b2:d5:68:69:f9:b3:ac:
         f1:b5:c1:c6:6e:c5:72:b7:d5:10:d9:34:05:29:7d:14:8b:e1:
         42:90:64:64:12:d3:2f:e3:c2:b0:53:a8:7f:01:07:9a:fe:2f:
         97:3a:1b:19:83:9f:79:39:44:ff:50:ec:8e:fc:4d:26:83:ef:
         1d:09:29:c1:4f:7b:b2:03:53:a4:8d:ce:27:b7:73:f6:48:47:
         34:8d:03:35:36:51:f2:2d:cf:95:d7:e3:d5:80:e2:e2:07:e7:
         8d:b0:72:e5:d3:30:5c:a8:48:1b:06:59:ad:3f:37:6e:50:29:
         e8:1c:da:90:3b:d2:a9:7e:2f:95:27:95:6c:96:28:74:7c:2e:
         18:2f:b1:1f:fc:d3:75:8d:ee:6c:a0:e9:f2:75:bc:00:15:db:
         5d:3d:78:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----