Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1329EFC8C3B811F192CFE4FECE1D38B0.roa
File:                     1329EFC8C3B811F192CFE4FECE1D38B0.roa (raw, json)
Hash identifier:          sT8QnkTKttNURjDzSe3RUADmKHL8tQxrYt6g6jPZBi4=
Subject key identifier:   E1:4C:15:9E:CE:02:80:74:4D:AD:AC:E4:CE:4C:64:D8:7E:D7:95:D0
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ED02
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1329EFC8C3B811F192CFE4FECE1D38B0.roa
Signing time:             Fri 09 Oct 2026 08:04:39 +0000
ROA not before:           Fri 09 Oct 2026 08:04:34 +0000
ROA not after:            Mon 09 Nov 2026 08:04:34 +0000
asID:                     147176
IP address blocks:        154.212.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126210 (0x1ed02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  9 08:04:34 2026 GMT
            Not After : Nov  9 08:04:34 2026 GMT
        Subject: CN=6ac8a017-87d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:7a:81:c7:b3:d7:ba:99:88:b3:34:b6:67:23:
                    bb:95:9b:62:c8:c2:34:e1:45:35:49:64:96:37:fb:
                    31:21:0b:ee:6c:49:df:bd:53:cd:f4:6e:8c:72:4b:
                    39:c1:dd:c6:b5:b6:78:9f:02:f4:1f:43:00:82:0f:
                    fa:06:4d:f1:c2:f3:00:20:63:d2:ef:22:44:6a:4a:
                    06:9f:4c:5f:f3:c6:f0:f0:52:5a:fd:62:d4:76:96:
                    4e:90:88:48:66:0f:29:7d:c0:64:c2:91:6b:9b:ba:
                    25:b2:4c:ff:fb:ed:fc:30:7a:b7:d1:0d:b0:9e:cf:
                    37:b3:6e:bb:4e:14:c9:20:70:47:cd:56:ac:69:30:
                    c3:19:ef:16:39:8a:95:6b:18:72:51:75:7c:56:c6:
                    10:c6:1c:49:89:2d:00:6e:4c:da:e0:2e:34:41:93:
                    cf:41:14:92:1f:2f:4d:86:94:cc:52:fc:91:0e:00:
                    4d:90:f4:6e:6c:b3:64:27:7b:e3:7a:e9:9d:88:99:
                    93:c0:82:ff:70:9a:e2:d9:f2:69:f0:75:59:e0:c7:
                    a0:61:79:89:53:a5:c7:1c:6c:ca:be:f1:6d:23:4e:
                    0b:08:cc:4c:30:6d:db:ed:d6:04:f6:0f:da:4c:75:
                    7a:10:9a:05:1c:fa:fa:66:1a:23:0b:9a:f9:45:d5:
                    1f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:4C:15:9E:CE:02:80:74:4D:AD:AC:E4:CE:4C:64:D8:7E:D7:95:D0
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1329EFC8C3B811F192CFE4FECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.212.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:0d:36:13:52:32:b9:ae:24:a1:8e:27:22:46:10:ed:9d:32:
         bc:4f:42:58:21:7a:bb:77:76:e7:f7:87:9f:58:28:21:4b:fb:
         ee:cc:18:dc:89:aa:76:16:57:b1:df:73:2d:92:4f:95:0d:25:
         81:11:c1:23:e7:73:28:c9:e3:a1:cf:03:75:fa:4d:1a:52:84:
         4e:ae:27:82:c9:b2:02:26:3f:66:c6:b5:a3:ae:23:01:bb:83:
         e8:3a:3e:9a:75:fe:4f:ec:25:1d:bc:c8:a4:3d:a8:63:d5:ff:
         6a:63:2d:81:33:a5:1a:7d:23:02:54:42:d7:57:b6:b8:e5:8f:
         eb:b0:14:ed:63:bc:7a:00:c7:e6:7b:04:82:91:47:18:9f:7d:
         58:99:a2:80:43:1c:7a:6f:71:98:9d:24:b3:a8:56:bc:09:f5:
         62:5f:3e:fc:28:5b:01:7c:66:68:31:e4:5b:2a:70:46:1f:a2:
         96:dc:e3:72:d7:19:e2:76:49:83:2f:8c:4a:b1:34:d2:f6:33:
         f9:f4:b4:41:fe:92:f5:87:46:53:97:a1:9d:cd:43:80:44:2a:
         89:a4:4c:46:c5:78:06:56:4d:af:5f:23:5b:4a:83:82:de:00:
         11:fa:58:39:5f:c3:37:8f:21:64:1c:cb:f3:d2:93:6c:c3:2b:
         f1:24:0b:5a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAe0CMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDA5MDgwNDM0WhcNMjYxMTA5MDgwNDM0WjAYMRYw
FAYDVQQDEw02YWM4YTAxNy04N2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8HqBx7PXupmIszS2ZyO7lZtiyMI04UU1SWSWN/sxIQvubEnfvVPN9G6M
cks5wd3GtbZ4nwL0H0MAgg/6Bk3xwvMAIGPS7yJEakoGn0xf88bw8FJa/WLUdpZO
kIhIZg8pfcBkwpFrm7olskz/++38MHq30Q2wns83s267ThTJIHBHzVasaTDDGe8W
OYqVaxhyUXV8VsYQxhxJiS0Abkza4C40QZPPQRSSHy9NhpTMUvyRDgBNkPRubLNk
J3vjeumdiJmTwIL/cJri2fJp8HVZ4MegYXmJU6XHHGzKvvFtI04LCMxMMG3b7dYE
9g/aTHV6EJoFHPr6ZhojC5r5RdUf5wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOFM
FZ7OAoB0Ta2s5M5MZNh+15XQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMzI5RUZDOEMzQjgxMUYxOTJDRkU0RkVDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtSLMA0GCSqGSIb3DQEB
CwUAA4IBAQCcDTYTUjK5riShjiciRhDtnTK8T0JYIXq7d3bn94efWCghS/vuzBjc
iap2Flex33Mtkk+VDSWBEcEj53MoyeOhzwN1+k0aUoROrieCybICJj9mxrWjriMB
u4PoOj6adf5P7CUdvMikPahj1f9qYy2BM6UafSMCVELXV7a45Y/rsBTtY7x6AMfm
ewSCkUcYn31YmaKAQxx6b3GYnSSzqFa8CfViXz78KFsBfGZoMeRbKnBGH6KW3ONy
1xnidkmDL4xKsTTS9jP59LRB/pL1h0ZTl6GdzUOARCqJpExGxXgGVk2vXyNbSoOC
3gAR+lg5X8M3jyFkHMvz0pNswyvxJAta
-----END CERTIFICATE-----