Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2565FB2A77B11F18E761716CF1D38B0.roa
File:                     C2565FB2A77B11F18E761716CF1D38B0.roa (raw, json)
Hash identifier:          dc6Lqj/qSB/CiQ0G5MlXSEgtWXyE1ePZK2fJWQshnx4=
Subject key identifier:   75:22:A2:F6:AB:45:B6:DB:B5:D4:2D:CB:7C:CF:CF:41:CC:EB:64:5E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E525
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2565FB2A77B11F18E761716CF1D38B0.roa
Signing time:             Thu 03 Sep 2026 09:42:21 +0000
ROA not before:           Thu 03 Sep 2026 09:42:17 +0000
ROA not after:            Fri 16 Oct 2026 09:42:17 +0000
asID:                     137899
IP address blocks:        154.222.16.0/20 maxlen: 24
                          154.222.16.0/21 maxlen: 24
                          154.222.16.0/22 maxlen: 24
                          154.222.20.0/22 maxlen: 24
                          154.222.24.0/21 maxlen: 24
                          154.222.24.0/22 maxlen: 24
                          154.222.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124197 (0x1e525)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  3 09:42:17 2026 GMT
            Not After : Oct 16 09:42:17 2026 GMT
        Subject: CN=6a9940fd-e5ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6f:37:b2:c7:d8:a0:55:a1:78:31:81:99:63:
                    35:89:df:e2:e6:f7:5b:e8:4f:c3:ea:20:99:75:72:
                    d1:b7:b2:05:14:42:8c:92:e8:83:89:a7:45:b0:d8:
                    b3:5b:30:47:94:12:26:a6:7e:68:9d:66:aa:35:2f:
                    ab:95:03:da:11:5d:12:17:78:e1:d0:90:c4:21:f1:
                    8e:77:38:20:f3:75:02:ad:05:e8:cd:87:97:46:2d:
                    03:06:23:fc:0b:87:79:9f:27:1c:8a:7e:e6:b0:e0:
                    d3:cd:db:54:e1:b9:68:aa:2f:39:df:7d:bb:54:d7:
                    ed:ea:93:0c:36:56:52:06:ce:7a:bc:19:a2:1b:4b:
                    50:aa:70:40:52:83:70:61:36:37:9b:15:14:14:56:
                    50:0f:0d:2f:6a:5c:fa:9a:c5:79:82:f7:27:43:49:
                    54:a9:d9:d8:5e:e9:a5:7d:42:a0:89:08:69:1c:ca:
                    f1:94:a1:bf:fd:c6:a0:6d:03:ef:e3:9f:bf:59:da:
                    5c:1c:aa:f8:ed:f8:5e:4a:e1:1b:ac:3c:fb:0c:9c:
                    04:45:cf:d4:d4:a1:d8:b7:dc:54:f2:3d:49:4d:68:
                    bc:e6:3b:7f:4e:66:cb:df:a0:1f:6a:41:43:1a:0a:
                    00:c2:48:0d:ad:d6:8e:d7:9b:a3:ad:9e:2e:6e:22:
                    d5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:22:A2:F6:AB:45:B6:DB:B5:D4:2D:CB:7C:CF:CF:41:CC:EB:64:5E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2565FB2A77B11F18E761716CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         84:61:81:e9:d2:de:c8:c8:ff:8d:fd:27:2e:59:13:ea:d1:7f:
         f3:32:f3:66:7a:19:79:10:e0:04:a6:6c:a8:9e:85:fd:b7:16:
         e8:1b:5a:7f:76:e5:57:68:b2:80:53:f4:cb:ba:05:2f:65:e8:
         1f:e9:77:30:40:63:a3:11:33:01:e1:2f:65:10:47:f9:64:5d:
         53:29:eb:5f:7b:b2:b7:43:73:f1:13:e1:69:ca:8f:40:ae:a2:
         89:13:6b:6a:3f:2f:79:9a:75:0a:38:b0:3a:1d:80:1a:7a:46:
         e6:7a:a2:e0:bb:3d:61:3b:79:91:93:45:de:cd:27:bf:59:ca:
         b6:86:ff:d7:5c:97:62:d1:fd:31:ae:9e:bd:aa:6d:5f:70:f2:
         97:ce:f8:3c:04:ec:23:7f:3d:bc:30:14:e4:28:7b:b0:f3:2e:
         fb:b9:ca:a6:fa:a0:0d:ce:e8:a6:60:73:1b:93:ad:40:e0:f4:
         91:ad:d9:ea:c1:0e:3c:15:c2:e4:72:18:89:95:8c:65:8a:d2:
         50:70:68:ba:40:44:61:43:6d:b8:16:d2:06:a3:8d:d2:39:87:
         3c:00:01:d7:bd:93:7b:7f:81:3d:1b:9d:57:32:7c:cf:78:6c:
         af:7c:27:93:43:08:b0:c6:56:5d:08:3b:a6:b4:24:33:0a:5a:
         c0:39:98:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----