Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0424AA7ABF1411F1A5DBBB1CCF1D38B0.roa
File:                     0424AA7ABF1411F1A5DBBB1CCF1D38B0.roa (raw, json)
Hash identifier:          qiJ2f7Mz5NeAj6sSAxCBKxy9MYVTj0C3F+JF/TmZT3w=
Subject key identifier:   11:F5:8E:06:74:44:81:53:87:99:58:BB:A0:2E:86:0D:83:41:70:3D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC04
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0424AA7ABF1411F1A5DBBB1CCF1D38B0.roa
Signing time:             Sat 03 Oct 2026 10:20:12 +0000
ROA not before:           Sat 03 Oct 2026 10:20:08 +0000
ROA not after:            Tue 10 Nov 2026 10:20:08 +0000
asID:                     154177
IP address blocks:        154.223.16.0/24 maxlen: 24
                          154.223.17.0/24 maxlen: 24
                          154.223.18.0/23 maxlen: 24
                          154.223.20.0/24 maxlen: 24
                          154.223.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125956 (0x1ec04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  3 10:20:08 2026 GMT
            Not After : Nov 10 10:20:08 2026 GMT
        Subject: CN=6ac0d6dc-df21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cc:18:8f:25:e4:0d:d3:cb:46:95:26:ca:a2:
                    47:a9:a7:4e:23:2d:6c:a4:f5:18:4b:74:24:54:35:
                    16:15:a7:3c:db:52:6c:61:3d:1d:10:f8:3d:59:9b:
                    27:90:d8:9b:9a:47:77:c4:b2:a7:2e:a3:91:22:14:
                    76:22:9c:19:a5:5f:e9:4b:f9:48:45:ad:7f:8c:03:
                    d2:15:9e:2f:4f:e3:8a:32:7f:0c:4b:4f:da:c1:52:
                    f2:0b:7b:8a:09:07:e7:0c:b8:e7:7c:f8:e4:f2:af:
                    b8:42:42:28:fa:22:6d:6b:ce:34:e8:81:14:28:7c:
                    7d:19:61:b5:cf:e6:2f:71:23:bb:71:36:c4:22:5f:
                    8c:b4:e2:c9:ef:e1:0a:f6:fc:d8:7e:0d:b5:7b:84:
                    f4:d7:ee:5f:e7:17:35:71:03:71:38:de:cb:88:21:
                    13:56:44:c4:16:6b:53:14:ab:55:01:2b:83:7c:bc:
                    82:e4:64:12:7a:d9:1d:cf:a7:ba:d3:a2:11:8a:c4:
                    38:97:b3:e9:00:63:7b:4a:0b:18:ff:05:a1:5a:3a:
                    1e:29:a4:27:54:49:b7:41:0d:10:6b:6c:96:45:56:
                    f9:d7:62:33:d4:b4:f1:61:63:43:2e:00:5b:70:0c:
                    1f:81:b8:95:4c:be:5b:54:e6:26:2a:35:7d:b0:09:
                    8b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F5:8E:06:74:44:81:53:87:99:58:BB:A0:2E:86:0D:83:41:70:3D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0424AA7ABF1411F1A5DBBB1CCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.223.16.0-154.223.21.255

    Signature Algorithm: sha256WithRSAEncryption
         61:0c:a1:eb:fd:9d:f5:26:a4:d6:35:02:9e:f6:f2:34:ec:5a:
         86:b8:b5:e9:11:7a:ae:f6:e1:6e:25:07:5c:cc:8e:11:46:e1:
         0d:13:5c:42:c1:00:d0:b8:79:ae:ea:9c:95:10:8c:e4:35:d6:
         57:41:cb:4a:65:b5:3a:33:8c:07:23:56:bd:f1:67:bd:5a:c3:
         96:cd:ea:d2:ad:94:33:a0:a0:6f:ff:2f:22:21:ab:d9:43:ef:
         87:97:c5:cb:bb:44:c0:73:74:cb:8e:be:d7:30:69:0d:11:9b:
         91:88:c6:20:47:5d:c5:eb:63:20:9b:c3:a4:25:9d:88:76:42:
         89:99:e8:7c:1a:6b:28:f7:01:47:e9:fe:ca:94:9c:7e:e3:b1:
         9e:ae:ae:20:82:43:5f:c7:db:d8:7c:ef:48:72:48:7c:84:42:
         03:eb:b1:a6:c6:1c:27:40:ba:49:7e:fe:c8:0b:68:93:7b:10:
         c2:38:7c:bb:97:f3:c2:70:67:09:fa:c5:ae:08:a1:1e:d9:ea:
         66:e5:06:9f:55:b9:47:70:19:48:6d:ba:82:5b:97:e6:f3:97:
         dd:90:1a:88:ab:b2:29:93:b6:18:59:52:3e:78:53:8c:d3:24:
         ff:1c:0d:00:3f:8a:45:da:f3:9a:2a:f0:40:51:e6:cf:6c:37:
         ae:45:50:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----