Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29ACEF5CD8E911F184347C10CF1D38B0.roa
File:                     29ACEF5CD8E911F184347C10CF1D38B0.roa (raw, json)
Hash identifier:          Fm/vnPkBxnX1NGwMSXpIT/t64NEtFJITmuZuUc80bkk=
Subject key identifier:   B4:8A:CF:9B:7A:B1:D9:95:E0:99:93:97:D2:61:A2:73:CF:EA:88:54
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01F328
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29ACEF5CD8E911F184347C10CF1D38B0.roa
Signing time:             Thu 05 Nov 2026 07:18:57 +0000
ROA not before:           Thu 05 Nov 2026 07:18:52 +0000
ROA not after:            Wed 16 Dec 2026 07:18:52 +0000
asID:                     401701
IP address blocks:        154.222.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127784 (0x1f328)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov  5 07:18:52 2026 GMT
            Not After : Dec 16 07:18:52 2026 GMT
        Subject: CN=6aec2de1-7053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:4e:97:f2:27:29:58:30:a2:f2:96:09:53:e8:
                    f0:e9:de:26:71:77:d4:fe:5a:b6:a9:3b:2d:6c:62:
                    ec:91:d5:17:9a:a9:94:76:aa:7c:97:cd:8f:3e:23:
                    46:d4:67:93:8b:a7:2f:97:21:08:8b:c0:bd:5a:37:
                    ee:05:6d:05:4b:ba:e9:f6:a5:e1:17:62:4a:80:44:
                    c5:f1:e1:cc:3c:e7:ea:af:d5:9b:fa:60:cb:be:19:
                    63:4c:fd:30:1d:5d:31:d0:88:d7:71:98:c1:7a:96:
                    f7:5d:e4:66:c2:0d:d9:ea:e3:5e:41:ee:86:07:e7:
                    19:33:72:ec:62:be:24:57:b4:a4:8e:d3:2b:e0:0a:
                    bd:03:10:eb:c5:74:48:d1:42:f4:1d:ee:4f:3c:57:
                    fe:dc:78:88:17:5e:6f:74:45:80:b9:89:af:b1:e4:
                    49:0d:0a:97:e2:14:bf:0a:b5:ca:f3:a7:aa:0e:38:
                    d4:32:5e:6f:9a:4c:2c:c5:2d:3c:d5:45:e8:3f:42:
                    18:ed:31:d6:21:82:37:6c:71:50:98:70:7f:2c:8f:
                    16:4b:4d:d2:48:1b:da:2f:f6:7d:d4:1d:87:78:9d:
                    67:09:e1:7e:2f:8a:c9:b8:03:97:1c:8b:78:d3:56:
                    69:79:36:f6:53:8b:7e:c4:38:69:0c:db:c3:f8:e1:
                    7a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:8A:CF:9B:7A:B1:D9:95:E0:99:93:97:D2:61:A2:73:CF:EA:88:54
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29ACEF5CD8E911F184347C10CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d0:be:6f:f8:0a:49:9c:b9:cb:5b:0f:c4:61:01:f0:7a:60:8d:
         0f:aa:ee:df:8c:f7:8b:e7:09:27:ce:71:87:f8:80:69:71:22:
         fb:c2:b5:fa:81:8a:62:1d:f8:84:b9:42:f1:ae:71:31:de:79:
         a7:66:a1:26:db:29:33:5e:7d:45:af:b7:8f:3b:91:6b:f6:8b:
         c8:f3:6a:87:9c:7a:3a:c6:fd:ec:31:59:eb:6d:83:d9:58:33:
         70:ad:62:0b:59:19:a3:45:74:ff:0f:75:12:f2:af:10:4c:ad:
         44:23:c5:74:3b:c5:32:cb:9e:f5:87:87:8f:2b:6e:ba:20:31:
         e8:19:af:8c:75:c9:da:45:fc:97:c4:15:65:95:d5:08:72:35:
         b6:c2:84:bd:81:8b:08:d9:e9:ea:d4:93:34:89:a0:7d:b9:d4:
         d8:45:59:26:2f:bb:da:d4:5d:fe:1a:bc:63:c4:7d:b4:19:18:
         d9:1d:85:69:e9:30:28:ed:c5:02:3d:6b:e8:a4:d8:77:f6:3c:
         79:be:c5:74:dc:9e:2b:ad:e4:23:65:5c:76:4e:1d:f0:63:c8:
         d2:ff:28:08:81:2c:37:18:84:58:79:36:1e:0e:ea:40:cd:b2:
         31:41:ba:e8:84:de:af:29:87:c3:03:41:21:cb:64:6a:c5:80:
         13:ae:8e:e0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAfMoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMTA1MDcxODUyWhcNMjYxMjE2MDcxODUyWjAYMRYw
FAYDVQQDEw02YWVjMmRlMS03MDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9U6X8icpWDCi8pYJU+jw6d4mcXfU/lq2qTstbGLskdUXmqmUdqp8l82P
PiNG1GeTi6cvlyEIi8C9WjfuBW0FS7rp9qXhF2JKgETF8eHMPOfqr9Wb+mDLvhlj
TP0wHV0x0IjXcZjBepb3XeRmwg3Z6uNeQe6GB+cZM3LsYr4kV7SkjtMr4Aq9AxDr
xXRI0UL0He5PPFf+3HiIF15vdEWAuYmvseRJDQqX4hS/CrXK86eqDjjUMl5vmkws
xS081UXoP0IY7THWIYI3bHFQmHB/LI8WS03SSBvaL/Z91B2HeJ1nCeF+L4rJuAOX
HIt401ZpeTb2U4t+xDhpDNvD+OF6vwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLSK
z5t6sdmV4JmTl9JhonPP6ohUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yOUFDRUY1Q0Q4RTkxMUYxODQzNDdDMTBDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmt4QMA0GCSqGSIb3DQEB
CwUAA4IBAQDQvm/4CkmcuctbD8RhAfB6YI0Pqu7fjPeL5wknznGH+IBpcSL7wrX6
gYpiHfiEuULxrnEx3nmnZqEm2ykzXn1Fr7ePO5Fr9ovI82qHnHo6xv3sMVnrbYPZ
WDNwrWILWRmjRXT/D3US8q8QTK1EI8V0O8Uyy571h4ePK266IDHoGa+MdcnaRfyX
xBVlldUIcjW2woS9gYsI2enq1JM0iaB9udTYRVkmL7va1F3+GrxjxH20GRjZHYVp
6TAo7cUCPWvopNh39jx5vsV03J4rreQjZVx2Th3wY8jS/ygIgSw3GIRYeTYeDupA
zbIxQbrohN6vKYfDA0Ehy2RqxYATro7g
-----END CERTIFICATE-----