Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B13CA690ACFE11F1A050F8F3CE1D38B0.roa
File:                     B13CA690ACFE11F1A050F8F3CE1D38B0.roa (raw, json)
Hash identifier:          i50ULt90SWdN7Vr1Q3TtYioyJK33+WVU3XWVDhgtr/o=
Subject key identifier:   57:19:B4:99:84:A1:75:9B:48:62:FA:28:93:3C:E3:15:87:43:F4:FD
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E722
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B13CA690ACFE11F1A050F8F3CE1D38B0.roa
Signing time:             Thu 10 Sep 2026 10:02:12 +0000
ROA not before:           Thu 10 Sep 2026 10:02:07 +0000
ROA not after:            Sat 10 Oct 2026 10:02:07 +0000
asID:                     141883
IP address blocks:        154.86.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124706 (0x1e722)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 10 10:02:07 2026 GMT
            Not After : Oct 10 10:02:07 2026 GMT
        Subject: CN=6aa28024-074b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9a:c4:45:38:8a:5b:44:18:b5:6f:cd:ba:8b:
                    d7:b8:4e:ac:7e:9e:56:b9:58:3d:e8:30:45:3c:85:
                    79:37:55:fd:8a:10:30:d4:37:f0:b8:2a:3e:60:33:
                    61:2e:47:fb:e5:55:d6:47:a4:60:b4:7f:03:bc:63:
                    f9:6c:d9:c5:1d:dc:7c:e3:65:d7:7c:14:6c:4b:22:
                    8e:ca:1d:86:6e:49:1b:57:ca:64:09:2e:5c:18:a9:
                    28:61:95:72:cb:a8:c5:96:8a:05:4d:f5:8d:d0:37:
                    27:b4:55:76:14:af:16:11:84:f2:ce:10:6b:6f:ec:
                    f8:b2:fb:a4:ca:fe:0c:08:07:7a:80:81:a1:37:f4:
                    80:e7:70:05:7a:a6:6a:fa:fe:61:5c:67:71:63:fa:
                    b0:e1:af:a4:0a:bc:50:bc:12:1a:37:6b:f7:c9:b1:
                    8e:66:76:e9:0e:37:0c:c2:f8:4d:35:a4:39:94:de:
                    29:dd:52:39:72:2a:7b:e7:d2:0a:71:e3:ce:87:aa:
                    16:49:fa:dd:d9:af:ae:ba:fa:f8:75:69:56:17:fb:
                    ab:06:2a:eb:37:af:23:74:2f:fd:78:d1:35:08:99:
                    c2:f0:7d:c6:f4:a3:b3:a7:b7:9e:79:b3:d0:a4:76:
                    84:6b:c9:53:b5:ec:9b:30:7d:6c:81:22:55:18:8d:
                    9b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:19:B4:99:84:A1:75:9B:48:62:FA:28:93:3C:E3:15:87:43:F4:FD
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B13CA690ACFE11F1A050F8F3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:4e:25:47:ab:0d:6f:6d:7e:76:b0:1f:63:0b:db:d6:cd:b5:
         68:62:88:2c:de:bc:8d:7f:a4:16:7d:08:fe:f3:d9:45:31:80:
         0d:b8:3c:90:ee:40:09:aa:fb:87:bc:84:de:d4:3e:88:37:91:
         d5:30:35:dc:4a:de:8c:9e:c3:09:1f:6b:1a:14:f0:2b:57:1a:
         5d:28:5d:6f:78:6a:fc:94:6c:e6:65:f2:62:24:cb:8b:3e:15:
         8e:0c:a6:6a:64:dc:ad:90:c9:3d:a8:29:08:38:b1:67:9b:07:
         6d:31:ca:78:40:0c:15:38:b4:41:28:9d:e3:db:b7:4a:3e:52:
         5a:9b:dc:a1:32:f6:e3:4a:15:2a:f9:27:98:1f:f7:af:09:b0:
         6b:07:cb:8f:9d:19:85:36:3d:c3:aa:9b:8c:9b:2a:e8:4e:40:
         6b:00:aa:a5:7d:0b:b1:76:69:6f:e6:99:e1:9c:cc:9a:88:95:
         5e:2a:1d:55:71:17:ab:bb:f2:86:47:39:2f:d8:f1:b2:93:8e:
         17:90:8b:8b:c7:f3:1c:34:44:d8:9a:64:68:dd:8f:57:71:e1:
         1d:64:d8:9c:33:67:62:b8:2e:2f:00:53:a8:32:05:d5:db:ff:
         97:82:60:3b:9d:b7:34:72:63:61:3e:d7:c8:97:04:1f:75:2c:
         ab:3a:f3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----