Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15F9835EB7F011F1BCCBEC0BCF1D38B0.roa
File:                     15F9835EB7F011F1BCCBEC0BCF1D38B0.roa (raw, json)
Hash identifier:          lX/GGLmF57DhtqnkZCORnDoF2IHCdy58bsY/4xTULm8=
Subject key identifier:   F4:17:96:15:2E:07:AD:C0:E5:A4:78:D0:FA:01:F1:52:5A:E4:91:97
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EAA5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15F9835EB7F011F1BCCBEC0BCF1D38B0.roa
Signing time:             Thu 24 Sep 2026 08:15:22 +0000
ROA not before:           Thu 24 Sep 2026 08:15:17 +0000
ROA not after:            Sun 01 Nov 2026 08:15:17 +0000
asID:                     62240
IP address blocks:        154.195.116.0/24 maxlen: 24
                          154.195.117.0/24 maxlen: 24
                          154.195.118.0/24 maxlen: 24
                          154.195.120.0/24 maxlen: 24
                          154.195.124.0/24 maxlen: 24
                          154.195.135.0/24 maxlen: 24
                          154.195.136.0/24 maxlen: 24
                          154.195.137.0/24 maxlen: 24
                          154.196.62.0/24 maxlen: 24
                          154.196.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125605 (0x1eaa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 24 08:15:17 2026 GMT
            Not After : Nov  1 08:15:17 2026 GMT
        Subject: CN=6ab4dc1a-a003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f7:d3:38:f6:61:a7:31:7a:00:14:b6:e3:bb:
                    65:b7:ee:4f:1d:6a:ef:f5:52:b4:c4:76:27:2a:3f:
                    7c:cc:f9:b0:df:69:f3:89:37:5a:d4:08:4c:97:14:
                    a3:ad:11:a3:ed:ac:dc:10:04:a1:cf:5b:f3:1d:0b:
                    5c:2a:1a:64:65:c8:82:9f:1a:f3:b5:3a:b4:88:c7:
                    d1:62:d5:98:1d:d6:ed:28:77:fa:e2:32:88:fa:a9:
                    3c:e7:9c:d0:10:bf:d0:ea:81:df:a1:99:c7:51:29:
                    7a:07:4c:a8:53:14:98:d2:01:8d:7d:6e:83:34:d1:
                    14:3b:d4:a5:2c:7d:d0:2e:23:57:b5:0e:3c:d7:55:
                    99:53:9b:ea:ae:55:04:56:60:24:a5:df:68:03:1a:
                    f7:4d:a7:8e:07:05:e7:14:98:a1:bd:1d:50:8a:71:
                    7e:ea:c0:20:1e:46:5d:ec:92:34:ba:8e:95:36:29:
                    c8:cc:5f:ff:58:d1:e6:c1:23:8f:d7:49:d1:d6:95:
                    f4:b1:39:8b:9a:35:50:f3:5f:a5:9f:46:03:65:5e:
                    6b:40:57:09:24:a4:89:63:bb:c6:8b:14:d0:47:4b:
                    2f:8c:83:52:c9:19:96:fc:94:b6:e2:fa:dd:69:59:
                    11:ef:08:94:50:4b:8f:67:c0:90:12:58:90:69:03:
                    92:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:17:96:15:2E:07:AD:C0:E5:A4:78:D0:FA:01:F1:52:5A:E4:91:97
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15F9835EB7F011F1BCCBEC0BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.195.116.0-154.195.118.255
                  154.195.120.0/24
                  154.195.124.0/24
                  154.195.135.0-154.195.137.255
                  154.196.62.0/24
                  154.196.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:33:67:65:25:67:b6:5b:d7:f2:b4:7e:af:61:f9:2f:be:6d:
         3a:4a:58:3c:93:8a:65:33:71:4c:c8:cf:df:91:30:2a:85:83:
         77:03:22:bc:f0:98:d6:b7:d0:f3:4a:e3:72:ae:69:60:93:11:
         8b:a4:bd:7a:c2:18:23:e5:13:8f:03:bb:31:ce:b4:ff:3a:56:
         e8:16:69:2d:7c:c6:67:cd:9d:78:74:a3:93:be:56:b4:ed:0e:
         97:31:11:24:7b:0f:29:c9:89:36:23:8e:b8:c0:b4:79:94:81:
         95:06:47:bb:40:62:37:a5:8a:79:a2:66:4a:86:14:5f:62:b7:
         ae:c0:e2:76:61:0f:19:85:21:33:19:f2:34:c5:c4:44:ce:8c:
         05:a0:10:dd:80:d9:07:c4:0d:ab:27:af:bb:61:b7:86:e1:5f:
         85:8a:d8:17:d8:6e:75:14:40:d4:5d:4d:04:12:0b:e1:26:cf:
         e1:87:3e:e8:fd:d8:a1:6c:8a:cc:93:bb:97:22:ed:77:9b:9a:
         2a:84:a6:52:22:2d:ff:14:0a:dd:68:d4:81:44:c7:8f:ac:a7:
         e4:8e:6c:7e:32:50:45:c0:b6:c8:32:f5:11:0e:12:2b:b6:6f:
         fa:48:9d:40:64:92:88:b2:cc:38:da:c5:de:d5:6b:3d:0c:9e:
         4d:af:a5:d4
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIDAeqlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTI0MDgxNTE3WhcNMjYxMTAxMDgxNTE3WjAYMRYw
FAYDVQQDEw02YWI0ZGMxYS1hMDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxPfTOPZhpzF6ABS247tlt+5PHWrv9VK0xHYnKj98zPmw32nziTda1AhM
lxSjrRGj7azcEAShz1vzHQtcKhpkZciCnxrztTq0iMfRYtWYHdbtKHf64jKI+qk8
55zQEL/Q6oHfoZnHUSl6B0yoUxSY0gGNfW6DNNEUO9SlLH3QLiNXtQ4811WZU5vq
rlUEVmAkpd9oAxr3TaeOBwXnFJihvR1QinF+6sAgHkZd7JI0uo6VNinIzF//WNHm
wSOP10nR1pX0sTmLmjVQ81+ln0YDZV5rQFcJJKSJY7vGixTQR0svjINSyRmW/JS2
4vrdaVkR7wiUUEuPZ8CQEliQaQOSdwIDAQABo4IC0zCCAs8wHQYDVR0OBBYEFPQX
lhUuB63A5aR40PoB8VJa5JGXMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xNUY5ODM1RUI3RjAxMUYxQkNDQkVDMEJDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0MAwDBAKaw3QDBACaw3YDBACa
w3gDBACaw3wwDAMEAJrDhwMEAZrDiAMEAJrEPgMEAJrEQDANBgkqhkiG9w0BAQsF
AAOCAQEAQDNnZSVntlvX8rR+r2H5L75tOkpYPJOKZTNxTMjP35EwKoWDdwMivPCY
1rfQ80rjcq5pYJMRi6S9esIYI+UTjwO7Mc60/zpW6BZpLXzGZ82deHSjk75WtO0O
lzERJHsPKcmJNiOOuMC0eZSBlQZHu0BiN6WKeaJmSoYUX2K3rsDidmEPGYUhMxny
NMXERM6MBaAQ3YDZB8QNqyevu2G3huFfhYrYF9hudRRA1F1NBBIL4SbP4Yc+6P3Y
oWyKzJO7lyLtd5uaKoSmUiIt/xQK3WjUgUTHj6yn5I5sfjJQRcC2yDL1EQ4SK7Zv
+kidQGSSiLLMONrF3tVrPQyeTa+l1A==
-----END CERTIFICATE-----