Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03573FF8C56E11F1BACD6FA3CE1D38B0.roa
File:                     03573FF8C56E11F1BACD6FA3CE1D38B0.roa (raw, json)
Hash identifier:          juHRUpXXAl7BIoCDKFvxYX7k3Ov7lW8Zjb1RWINDwJ8=
Subject key identifier:   7B:76:81:64:3B:F0:94:74:C8:25:CE:93:74:2C:73:96:0C:29:F0:A3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ED86
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03573FF8C56E11F1BACD6FA3CE1D38B0.roa
Signing time:             Sun 11 Oct 2026 12:19:32 +0000
ROA not before:           Sun 11 Oct 2026 12:19:26 +0000
ROA not after:            Wed 18 Nov 2026 12:19:26 +0000
asID:                     54801
IP address blocks:        154.81.61.0/24 maxlen: 24
                          154.81.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126342 (0x1ed86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 11 12:19:26 2026 GMT
            Not After : Nov 18 12:19:26 2026 GMT
        Subject: CN=6acb7ed4-c73d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:a1:8a:47:fe:52:2f:46:83:05:48:30:35:91:
                    0f:47:67:77:4c:f6:4c:29:d6:03:3f:59:df:eb:1d:
                    7c:20:75:67:f3:a1:33:1a:11:09:34:e0:74:0d:25:
                    9c:fe:2b:be:b0:57:5b:db:6c:0c:ae:84:69:06:f6:
                    87:a0:64:1f:94:15:e9:ff:81:46:f8:c1:31:e1:e8:
                    00:72:03:0e:b8:b8:b5:32:ed:80:96:5a:a2:f9:27:
                    d8:54:20:f5:55:4a:92:1c:3b:e4:a1:12:0e:dc:b6:
                    ce:cc:ac:c5:f5:f8:51:3a:11:ef:eb:64:89:d0:a6:
                    fe:a6:c0:15:e4:00:36:42:67:ad:e5:c0:f2:1f:f6:
                    a1:c5:d3:e1:d3:57:7f:50:55:4a:04:00:9f:55:d8:
                    d7:ff:a4:f0:cb:bf:73:96:08:82:48:8a:6b:41:71:
                    2f:97:30:c8:23:a8:e6:86:8f:81:74:76:11:69:ba:
                    b5:d4:50:64:8c:b8:6e:5a:1e:e2:83:26:dc:79:b5:
                    70:24:d2:c0:03:61:34:fa:cb:cb:42:ca:ab:22:91:
                    3b:49:a9:ef:ce:5f:98:c9:e3:64:6b:a8:8e:e6:df:
                    e9:63:fa:26:57:47:ae:dc:aa:ca:40:76:6c:ba:6d:
                    08:83:40:71:7c:1a:02:94:83:a5:18:d6:ae:c5:bd:
                    a4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:76:81:64:3B:F0:94:74:C8:25:CE:93:74:2C:73:96:0C:29:F0:A3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03573FF8C56E11F1BACD6FA3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.61.0/24
                  154.81.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:a8:a0:d6:c7:41:bc:fc:99:f2:fe:82:f3:39:9b:1e:ca:03:
         c4:cb:fe:4a:86:81:cd:d4:5a:18:b5:e5:65:61:79:13:59:33:
         ea:d7:67:1c:c0:cb:d8:3f:ce:c4:06:ce:2e:16:23:5a:09:d2:
         54:5d:38:b5:27:fc:ee:1b:32:1b:f8:64:70:f8:c1:26:f7:38:
         c4:ff:29:0c:10:cf:9e:a6:85:63:96:70:19:28:89:26:53:cd:
         61:bb:88:26:7b:be:5c:9f:7e:6e:71:4d:73:66:51:1d:7d:93:
         96:e0:f1:2f:32:b4:47:14:32:69:d7:f0:82:73:8d:e8:80:04:
         4c:b6:74:ed:73:d6:ee:1f:8c:ad:be:82:7b:f5:60:c2:7b:7e:
         79:3a:50:01:12:9c:e2:f7:64:a9:6c:7c:a5:6f:e6:9e:48:a6:
         86:91:12:02:f4:f3:6a:00:4f:c2:16:ae:c3:ce:33:30:43:08:
         b0:f6:02:dd:d8:a8:d2:28:67:3a:20:ea:12:b6:31:a2:9f:2a:
         7e:af:72:d1:5a:45:71:c1:0c:23:4a:ae:61:8c:e0:3e:35:a3:
         0f:55:cf:ca:00:f2:97:9e:4b:bb:01:bd:ec:71:59:2b:be:25:
         0f:7c:9b:2e:2f:fa:fe:f2:53:49:44:08:1f:8b:08:8a:56:c0:
         6a:56:cc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----