Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/884275A2B66E11F19EFC6FB5CE1D38B0.roa
File:                     884275A2B66E11F19EFC6FB5CE1D38B0.roa (raw, json)
Hash identifier:          +lx96xU3RsiOE4BBaq8tIpvbwV4iMT5yQ9LFYIjWXQM=
Subject key identifier:   F9:3D:A1:B4:92:E3:03:9E:0F:23:79:D3:D0:7D:01:51:82:5D:65:A7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EA14
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/884275A2B66E11F19EFC6FB5CE1D38B0.roa
Signing time:             Tue 22 Sep 2026 10:15:28 +0000
ROA not before:           Tue 22 Sep 2026 10:15:24 +0000
ROA not after:            Sun 08 Nov 2026 10:15:24 +0000
asID:                     214143
IP address blocks:        154.197.60.0/23 maxlen: 24
                          154.197.86.0/23 maxlen: 24
                          154.223.248.0/21 maxlen: 24
                          154.223.248.0/22 maxlen: 24
                          154.223.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125460 (0x1ea14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 22 10:15:24 2026 GMT
            Not After : Nov  8 10:15:24 2026 GMT
        Subject: CN=6ab25540-d4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e6:5e:a8:26:9c:f2:a9:f7:b0:2e:dd:03:03:
                    96:f9:ff:90:7c:61:68:ba:fc:20:19:12:85:75:a9:
                    3b:f0:2f:27:6d:29:73:c6:9e:c1:3e:7d:e2:5c:bc:
                    ed:76:a9:f6:86:c2:20:98:73:d1:d4:94:3a:d5:b4:
                    3b:c1:6d:f4:3e:30:2d:1d:3a:fc:84:00:ba:40:0a:
                    71:9b:ae:13:54:39:05:e8:25:31:4d:47:8f:46:4f:
                    bc:a7:7f:46:79:59:0b:17:41:db:f7:8a:5b:04:6c:
                    7b:02:50:44:d9:d6:d5:ad:2c:40:1b:e0:25:72:b9:
                    88:b7:12:73:3c:aa:6e:8c:02:b4:f2:a2:43:c4:8d:
                    e4:97:d3:76:1d:3d:ce:ed:70:0c:e8:87:78:98:9f:
                    e7:24:9a:f4:1c:25:d8:e4:bc:35:62:65:d0:7c:d4:
                    79:ad:06:4c:d6:b2:f5:09:ac:cc:8a:7b:85:50:04:
                    a3:3a:37:d9:3b:f4:3b:5f:1f:7c:d2:84:22:12:ac:
                    ea:02:e0:df:40:30:15:f8:65:74:a1:35:ad:3d:7a:
                    8f:af:1a:d4:12:43:11:f8:be:f5:82:19:21:6d:ee:
                    77:05:9c:c0:17:22:02:49:cd:e3:83:7b:64:8d:84:
                    d0:d7:8d:7f:a2:84:9a:7f:a6:d7:6e:2e:d8:f7:23:
                    34:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3D:A1:B4:92:E3:03:9E:0F:23:79:D3:D0:7D:01:51:82:5D:65:A7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/884275A2B66E11F19EFC6FB5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.60.0/23
                  154.197.86.0/23
                  154.223.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b7:9c:df:11:e9:68:cb:3a:3c:57:c6:5f:43:41:18:d5:b9:eb:
         9e:7f:93:fc:a0:97:27:a0:1a:00:b7:6c:4c:10:87:2d:8b:6c:
         ab:98:0e:0a:7b:34:b1:ba:c8:e2:22:ab:f2:69:d4:68:4c:38:
         82:57:a2:fc:7a:5a:78:99:b0:49:5b:df:a5:84:62:b0:7a:a7:
         8a:3d:09:2c:48:c9:59:66:f1:1e:9a:2a:82:38:ef:a5:54:ed:
         22:fc:51:50:70:43:0a:1b:47:7d:ed:36:68:2b:76:e0:6f:64:
         e0:96:f1:b1:6a:f3:81:ff:aa:d4:0d:0f:43:37:48:ad:a2:4f:
         90:2e:41:8e:2e:8c:46:4b:69:8e:e2:78:b1:f1:e9:6c:12:dd:
         9d:ca:90:bd:85:e2:dd:c8:6f:c2:32:08:d0:e6:da:60:46:9c:
         b8:f2:4e:51:2a:bb:4f:f5:99:5d:26:db:63:a1:3e:91:b8:85:
         bf:4b:49:52:c9:1e:c0:c6:e4:27:0a:69:68:b4:9a:f9:d9:29:
         ec:d3:19:e6:76:4e:22:59:85:9b:07:fb:ed:49:ac:67:d4:65:
         c5:08:ac:51:b4:cd:93:9e:c2:64:11:3a:84:84:34:26:12:d9:
         ba:a0:ac:cf:6b:c2:80:ff:77:09:13:2a:b8:00:bc:f2:c9:0f:
         65:68:7a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----