Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24BA8C04BA4211F1A00606B0CE1D38B0.roa
File:                     24BA8C04BA4211F1A00606B0CE1D38B0.roa (raw, json)
Hash identifier:          ULAJwH7YJ4eiAgkKh96MqaPHUbWgjz7yTxcBTvHdfsw=
Subject key identifier:   B6:50:E3:98:D5:AE:12:73:F1:B1:BB:0E:CD:9B:C5:55:4B:DA:0A:B7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EAFC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24BA8C04BA4211F1A00606B0CE1D38B0.roa
Signing time:             Sun 27 Sep 2026 07:07:47 +0000
ROA not before:           Sun 27 Sep 2026 07:07:44 +0000
ROA not after:            Sun 01 Nov 2026 07:07:44 +0000
asID:                     202656
IP address blocks:        154.203.230.0/24 maxlen: 24
                          154.203.231.0/24 maxlen: 24
                          154.203.250.0/24 maxlen: 24
                          154.203.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 00:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125692 (0x1eafc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 27 07:07:44 2026 GMT
            Not After : Nov  1 07:07:44 2026 GMT
        Subject: CN=6ab8c0c3-e396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:af:46:7a:32:6a:b8:35:88:5b:6f:9b:b0:b2:
                    83:25:fb:6e:9d:c2:23:8f:9c:30:a5:59:9a:80:a6:
                    5a:be:35:8b:a8:7b:ee:2d:c1:ba:9f:45:33:8f:8e:
                    e9:24:7f:78:24:37:db:b9:b6:19:48:c9:f2:ab:14:
                    08:81:d5:0e:3b:b7:d6:6c:4b:bd:98:d1:45:4a:db:
                    ea:65:92:ef:52:01:f7:3d:7f:ce:32:8d:bd:d8:b5:
                    4f:76:fd:7c:b0:43:e0:11:62:4b:a4:37:47:ed:67:
                    40:4d:ea:bc:a4:32:6c:58:a0:1e:9a:e9:7e:a8:1c:
                    74:35:cc:59:24:1b:6e:a3:d8:d5:f5:49:da:6d:b7:
                    c0:f4:8a:9c:dd:6c:ed:38:38:48:20:90:d9:23:af:
                    a1:e1:8b:e3:77:2e:7c:da:b3:6c:2b:a7:e8:29:9e:
                    df:1c:35:9f:6e:cd:2d:fd:64:5d:8d:ac:d1:4f:91:
                    00:17:e7:c0:4c:30:bc:4a:39:97:50:9f:16:7f:b1:
                    66:67:a2:29:2c:9f:51:ef:03:b2:95:98:d2:22:44:
                    f1:61:e6:9e:fd:1a:10:b0:f3:5b:91:a3:32:1f:8b:
                    06:ab:db:a3:b7:cf:94:90:31:c5:fb:92:ec:af:34:
                    65:8d:a6:94:dd:81:05:97:34:4a:f1:87:a2:3f:11:
                    20:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:50:E3:98:D5:AE:12:73:F1:B1:BB:0E:CD:9B:C5:55:4B:DA:0A:B7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24BA8C04BA4211F1A00606B0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.230.0/23
                  154.203.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:a7:0b:6f:7c:bc:84:6a:b9:e6:15:81:84:ca:10:3b:ef:b7:
         e6:e6:af:c7:37:eb:91:80:8b:eb:36:7a:29:27:6f:62:70:b0:
         f9:60:02:ee:b4:e3:a6:00:e8:0c:f4:0a:9e:0f:8b:c7:77:01:
         83:27:67:72:37:91:02:d4:a2:d9:3c:dd:1b:fb:77:61:87:5e:
         6a:8b:7a:93:57:4c:1e:ae:af:91:02:be:6a:4c:95:01:e6:74:
         8e:00:21:ed:65:87:7a:65:97:70:56:ec:e9:4d:4f:d4:8a:c4:
         96:29:75:01:20:b2:8d:f0:73:5e:ba:48:a1:1e:35:05:be:5c:
         2c:f5:92:a0:0c:61:22:22:ae:4c:7f:3a:ab:a9:2f:3d:96:fd:
         c3:c3:48:f6:89:7b:2e:3d:d7:28:d6:fd:df:ce:88:df:03:80:
         f0:b7:6b:09:30:40:6b:77:77:3a:29:62:e3:de:e3:1c:73:f1:
         d8:98:0b:44:e0:a0:ae:1b:7a:c7:26:2d:26:b9:3d:b4:43:ec:
         03:10:e2:53:21:b6:72:94:0e:dc:45:c4:1b:6c:d2:8d:ac:e4:
         78:df:9f:b8:2f:5a:ad:9c:f1:49:da:15:f4:f4:74:a1:97:dc:
         19:17:72:7e:b8:ab:5b:ec:c3:dd:d9:ce:7e:b6:0b:7e:3d:e1:
         01:ec:78:83
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAer8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTI3MDcwNzQ0WhcNMjYxMTAxMDcwNzQ0WjAYMRYw
FAYDVQQDEw02YWI4YzBjMy1lMzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt69GejJquDWIW2+bsLKDJftuncIjj5wwpVmagKZavjWLqHvuLcG6n0Uz
j47pJH94JDfbubYZSMnyqxQIgdUOO7fWbEu9mNFFStvqZZLvUgH3PX/OMo292LVP
dv18sEPgEWJLpDdH7WdATeq8pDJsWKAemul+qBx0NcxZJBtuo9jV9UnabbfA9Iqc
3WztODhIIJDZI6+h4Yvjdy582rNsK6foKZ7fHDWfbs0t/WRdjazRT5EAF+fATDC8
SjmXUJ8Wf7FmZ6IpLJ9R7wOylZjSIkTxYeae/RoQsPNbkaMyH4sGq9ujt8+UkDHF
+5LsrzRljaaU3YEFlzRK8YeiPxEguwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFLZQ
45jVrhJz8bG7Ds2bxVVL2gq3MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yNEJBOEMwNEJBNDIxMUYxQTAwNjA2QjBDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBmsvmAwQBmsv6MA0GCSqG
SIb3DQEBCwUAA4IBAQCbpwtvfLyEarnmFYGEyhA777fm5q/HN+uRgIvrNnopJ29i
cLD5YALutOOmAOgM9AqeD4vHdwGDJ2dyN5EC1KLZPN0b+3dhh15qi3qTV0werq+R
Ar5qTJUB5nSOACHtZYd6ZZdwVuzpTU/UisSWKXUBILKN8HNeukihHjUFvlws9ZKg
DGEiIq5MfzqrqS89lv3Dw0j2iXsuPdco1v3fzojfA4Dwt2sJMEBrd3c6KWLj3uMc
c/HYmAtE4KCuG3rHJi0muT20Q+wDEOJTIbZylA7cRcQbbNKNrOR435+4L1qtnPFJ
2hX09HShl9wZF3J+uKtb7MPd2c5+tgt+PeEB7HiD
-----END CERTIFICATE-----