Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29ED8480C6DE11F1B37E9D08CF1D38B0.roa
File:                     29ED8480C6DE11F1B37E9D08CF1D38B0.roa (raw, json)
Hash identifier:          vT9nqcm6yAhjfq6MNy5GBW+YY94BBzq67vKvIt4rT30=
Subject key identifier:   60:C9:39:E8:7B:46:77:24:41:50:62:65:69:1E:F2:E7:17:85:EF:59
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EDC8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29ED8480C6DE11F1B37E9D08CF1D38B0.roa
Signing time:             Tue 13 Oct 2026 08:14:52 +0000
ROA not before:           Tue 13 Oct 2026 08:14:46 +0000
ROA not after:            Fri 23 Oct 2026 08:14:46 +0000
asID:                     273155
IP address blocks:        154.200.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126408 (0x1edc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 13 08:14:46 2026 GMT
            Not After : Oct 23 08:14:46 2026 GMT
        Subject: CN=6acde87c-fe15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2a:48:86:ea:11:07:5f:2e:7a:6c:35:5a:fd:
                    21:de:54:ca:2c:aa:44:82:1e:ff:cb:24:a3:d4:75:
                    e2:d7:7b:6a:1a:d1:2f:0d:66:05:2a:f9:94:cc:54:
                    22:b0:9b:c5:e5:b5:91:28:c8:ef:90:d7:85:49:f0:
                    78:ad:c5:0c:1e:15:f2:96:15:c0:91:31:35:35:3f:
                    7a:2c:1c:17:53:ad:61:58:4a:b3:ed:af:c7:7f:1b:
                    0c:d1:f8:e4:1a:a1:73:d1:06:d5:ea:91:d3:fa:ba:
                    40:fc:ac:0b:a5:fd:03:cd:75:57:bd:e7:03:d2:15:
                    49:bf:6f:6f:2c:cd:6a:a6:6e:6c:22:7b:c3:28:a3:
                    44:ab:1b:9b:01:9f:80:fb:65:e5:b3:a9:61:75:43:
                    cc:22:cd:46:c7:7c:71:2c:2a:81:a8:f2:de:38:a4:
                    d7:2b:57:8f:f1:c7:72:34:d0:fb:e5:17:02:70:d1:
                    67:ef:4f:05:44:0e:e5:cb:87:9d:ec:ca:31:96:e1:
                    e5:a3:f8:e5:56:74:ae:88:d7:06:7d:6c:9b:b6:7b:
                    32:1d:49:6a:4a:1c:fa:68:b2:19:d4:55:7a:e7:07:
                    5e:72:4e:c0:a9:b3:31:49:e9:c9:13:24:ec:8c:b2:
                    7b:56:2f:3f:f8:94:d1:7f:75:74:de:0b:96:88:a7:
                    68:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C9:39:E8:7B:46:77:24:41:50:62:65:69:1E:F2:E7:17:85:EF:59
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29ED8480C6DE11F1B37E9D08CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:85:9e:49:7c:53:e7:4a:ec:9b:b0:41:e4:07:f5:16:41:28:
         1e:58:30:bd:82:05:2c:a2:d6:4d:f0:3d:20:ce:14:d8:80:85:
         c8:86:63:5a:8c:6d:28:f1:c5:3a:f1:fd:28:6a:3c:42:61:a3:
         92:0c:6e:90:06:c1:3b:6a:31:97:1f:93:0f:92:3b:6b:d9:45:
         ea:19:02:b9:48:b2:6a:b6:50:1a:97:eb:3c:34:57:af:e5:76:
         5e:5f:45:28:e7:d1:33:99:5c:a1:5f:df:34:80:48:cf:63:b3:
         36:37:e6:22:d6:e9:23:fc:93:f3:f4:a6:f6:a0:41:bc:6f:33:
         20:33:5d:04:4a:30:26:54:99:a9:68:03:ec:ea:bb:a8:42:4d:
         e8:80:57:9f:5f:cb:fe:7a:cd:5d:a9:65:45:f3:54:80:8c:11:
         7e:fb:f6:12:00:c9:05:f4:d7:7e:aa:62:50:91:06:83:9e:f7:
         00:8f:a1:25:7f:44:6c:70:c4:56:33:a4:fa:d6:0b:af:38:95:
         d0:ec:f5:30:65:37:fa:73:79:bb:7e:dd:6e:dd:4c:95:37:f7:
         13:2c:87:14:b6:0d:79:45:fd:a3:08:f6:39:8e:53:73:2f:69:
         a8:47:cd:4a:f1:62:4c:1f:c3:26:2b:5d:ea:36:8e:ef:a9:c6:
         7e:a6:96:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----