Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D334B99AB66811F194705410CF1D38B0.roa
File:                     D334B99AB66811F194705410CF1D38B0.roa (raw, json)
Hash identifier:          z18723Wl1bpRrUlO39LCMEPHzHVNWqERQ5UWAFDQIXs=
Subject key identifier:   DA:1C:86:08:85:C9:D8:E9:FA:19:2B:AC:CD:CA:71:0E:BC:D0:1E:01
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EA0A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D334B99AB66811F194705410CF1D38B0.roa
Signing time:             Tue 22 Sep 2026 09:34:36 +0000
ROA not before:           Tue 22 Sep 2026 09:34:32 +0000
ROA not after:            Sat 07 Nov 2026 09:34:32 +0000
asID:                     395793
IP address blocks:        154.200.2.0/23 maxlen: 24
                          154.200.4.0/23 maxlen: 24
                          154.200.6.0/23 maxlen: 24
                          154.200.80.0/21 maxlen: 24
                          154.200.104.0/22 maxlen: 24
                          154.223.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125450 (0x1ea0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 22 09:34:32 2026 GMT
            Not After : Nov  7 09:34:32 2026 GMT
        Subject: CN=6ab24bac-dbc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ed:07:d1:db:99:4d:e0:bd:a7:27:f1:67:ac:
                    5b:24:4c:85:c5:60:20:9e:2b:a4:67:a2:f4:5a:5c:
                    5b:4a:c6:a9:81:7d:2f:4d:1b:1b:2e:e1:b6:87:95:
                    13:29:df:49:6c:69:90:8c:5b:5b:c3:15:76:23:b5:
                    d9:76:b9:55:61:d6:87:5a:6a:29:76:93:f1:a3:89:
                    1c:ab:16:ed:ed:93:4d:aa:75:a4:7c:fb:82:a6:96:
                    fa:89:8c:a6:cf:90:a5:5c:a5:17:62:1d:7e:bb:ab:
                    72:b7:f6:e6:08:63:b4:95:cd:82:af:c4:34:5d:2e:
                    f0:92:65:75:ab:a1:41:fe:ec:b6:e0:c0:aa:49:0e:
                    5d:80:16:e7:43:90:1a:a6:cc:18:5e:0b:f2:5e:6b:
                    65:79:42:54:32:18:5a:c9:e3:2b:45:ef:01:19:67:
                    0e:96:8b:49:0e:cf:9d:5a:6b:df:1e:b6:e7:84:24:
                    c9:43:ad:6c:c4:f1:96:fd:d2:34:d7:5b:bb:18:b3:
                    70:41:b3:c6:b7:b8:5a:fa:10:6a:8c:e9:29:ea:bd:
                    22:0a:c4:c0:61:06:e3:ef:ce:2b:13:07:09:c1:88:
                    ec:46:c0:27:22:01:04:d8:58:32:72:49:90:66:8b:
                    05:82:ae:9b:0c:e4:c5:ed:a4:6c:0a:83:1e:da:d7:
                    46:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:1C:86:08:85:C9:D8:E9:FA:19:2B:AC:CD:CA:71:0E:BC:D0:1E:01
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D334B99AB66811F194705410CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.2.0-154.200.7.255
                  154.200.80.0/21
                  154.200.104.0/22
                  154.223.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8a:3b:36:f9:1e:3a:f6:df:17:23:57:ee:56:34:df:1e:15:ca:
         66:07:0e:a1:d5:01:4c:aa:6e:36:ef:74:4b:2d:6b:6a:11:eb:
         54:59:f9:f6:f3:53:18:cc:c7:a3:43:a9:09:67:2f:75:d8:2f:
         f7:c0:34:a1:5a:4c:74:7d:4b:3a:c0:0c:f3:04:09:7f:52:f2:
         b8:49:b7:85:51:f9:8c:0b:ed:36:49:a1:b1:79:ee:2c:00:26:
         07:25:d3:47:cd:8d:70:a8:b4:03:a5:f1:60:6c:e0:08:34:3c:
         74:95:98:82:90:31:37:b9:d3:bc:bb:d9:07:3e:ff:25:c5:33:
         48:e9:74:9e:07:9b:75:d4:47:54:e6:6e:9b:8a:a2:c6:82:88:
         93:24:a2:98:d9:52:6e:39:84:03:d9:a1:3a:d6:c8:8e:4d:64:
         c6:ba:b5:da:f4:24:48:52:32:60:3a:83:3e:f3:fd:23:2b:00:
         a2:22:73:c5:79:12:ea:e3:d5:b2:16:3c:05:83:f8:42:80:c4:
         56:b9:b2:e2:c0:1f:16:81:0e:88:48:0e:01:ff:ca:8a:46:13:
         b8:d6:83:97:70:82:9a:d1:10:f1:a7:93:ce:9c:60:38:3d:7c:
         8d:bb:a3:4a:9d:43:f0:05:c6:fc:86:d4:76:a7:72:19:85:4e:
         5e:3e:77:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----