Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BB971F6C2F811F18567A519CF1D38B0.roa
File:                     1BB971F6C2F811F18567A519CF1D38B0.roa (raw, json)
Hash identifier:          nRPMFXPaxfqwVQejr83gr0P8PEekKjvZPBRJoFKd7zk=
Subject key identifier:   F0:A6:23:D2:23:5C:C7:0C:21:94:F5:13:DD:38:64:50:A3:E0:CB:53
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ECD3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BB971F6C2F811F18567A519CF1D38B0.roa
Signing time:             Thu 08 Oct 2026 09:10:30 +0000
ROA not before:           Thu 08 Oct 2026 09:10:25 +0000
ROA not after:            Sat 07 Nov 2026 09:10:25 +0000
asID:                     131274
IP address blocks:        154.203.72.0/21 maxlen: 24
                          154.203.92.0/22 maxlen: 24
                          154.203.192.0/22 maxlen: 24
                          154.205.160.0/21 maxlen: 24
                          154.205.176.0/21 maxlen: 24
                          154.206.120.0/21 maxlen: 24
                          154.206.240.0/20 maxlen: 24
                          154.210.96.0/20 maxlen: 24
                          154.210.112.0/21 maxlen: 24
                          154.214.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 10:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126163 (0x1ecd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  8 09:10:25 2026 GMT
            Not After : Nov  7 09:10:25 2026 GMT
        Subject: CN=6ac75e06-23d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:29:ae:4c:a1:4b:a6:c5:2d:f3:6b:42:21:c8:
                    b7:d0:6d:ea:df:60:70:67:a1:7a:c0:ea:61:a1:96:
                    1a:95:b9:a0:84:78:27:e1:96:29:53:4b:90:a1:65:
                    29:0f:9c:5e:b5:8e:d4:78:30:31:83:ab:f8:f7:0c:
                    e6:6b:49:6b:41:bb:c4:f7:3b:f8:27:99:c1:8a:b5:
                    da:0f:ae:e1:0f:db:10:01:ee:d3:b6:13:c4:fc:a5:
                    08:02:8b:4a:45:a1:83:b4:3a:fc:5e:95:ab:e5:a6:
                    73:dd:1a:61:9d:62:42:fc:a9:12:1e:25:e1:98:b9:
                    d8:b6:4e:75:db:9e:a4:41:ec:1b:0c:d0:99:05:db:
                    da:09:84:75:0f:98:5f:ea:e1:9c:f3:34:61:d3:72:
                    31:21:8c:94:28:b6:85:d1:94:8f:30:c3:52:55:b1:
                    13:27:e3:cf:ee:22:c6:a8:3f:dd:5b:3e:43:59:d2:
                    26:1d:35:f4:9f:1a:95:87:6f:83:07:09:cc:ae:91:
                    92:f8:53:4d:3c:07:43:0b:a5:e4:4c:1c:c1:b0:3a:
                    0a:e2:10:c0:bd:66:27:aa:d5:45:8f:5b:58:87:aa:
                    52:08:09:3d:f3:63:40:94:44:91:62:3f:67:5c:12:
                    02:ae:d3:08:ca:e4:ee:a4:74:2c:d9:fe:4f:8a:a5:
                    4c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A6:23:D2:23:5C:C7:0C:21:94:F5:13:DD:38:64:50:A3:E0:CB:53
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BB971F6C2F811F18567A519CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.72.0/21
                  154.203.92.0/22
                  154.203.192.0/22
                  154.205.160.0/21
                  154.205.176.0/21
                  154.206.120.0/21
                  154.206.240.0/20
                  154.210.96.0-154.210.119.255
                  154.214.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6a:c2:fa:4e:02:70:e5:af:30:59:87:47:44:b4:a9:63:e4:1e:
         08:21:a1:42:25:93:e5:cd:fb:67:1d:3d:7e:e1:4d:26:47:69:
         ae:d7:c8:e3:e9:64:06:8e:36:d4:2d:0f:9a:1b:cb:70:8b:21:
         c2:2b:36:89:23:23:7a:8d:07:3e:bc:be:2a:58:49:24:ca:cf:
         48:54:96:88:d1:ef:ef:4f:19:ca:f0:e5:85:66:a2:7a:1b:a3:
         97:48:62:7f:92:6f:f8:a9:74:64:42:29:93:89:b4:40:6d:84:
         0b:af:20:80:53:1e:3e:5e:94:a5:4e:a4:e2:ab:1f:04:50:3a:
         8c:ac:98:67:e4:4c:4a:19:51:f1:99:9b:9b:36:4e:67:53:94:
         4d:6c:4f:e0:2c:1a:29:fe:52:57:1d:c4:09:b4:d5:5a:94:09:
         ea:51:24:df:4a:f6:42:42:2d:56:01:c5:2a:4b:34:c7:a7:99:
         81:e4:7c:f3:81:10:a8:92:9e:03:32:f5:bf:f3:0c:9b:39:6a:
         05:a0:58:c7:4b:14:8b:96:97:54:23:a8:d5:b6:3d:76:f3:f6:
         54:b7:40:1e:36:b8:4b:ef:c4:22:8f:d2:74:20:78:30:c8:e2:
         50:98:bf:95:64:ab:f4:6b:ef:04:fc:18:49:40:77:ef:ff:f3:
         35:16:14:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----