Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D43591CCB8811F181AD04FACE1D38B0.roa
File:                     2D43591CCB8811F181AD04FACE1D38B0.roa (raw, json)
Hash identifier:          wj2C1j8ktS78tFzK3n2j2oTCg0MkH301OgaZK3sh29s=
Subject key identifier:   F6:DC:2A:AF:2F:BA:A5:DD:F5:15:82:27:D8:31:CF:14:5E:CE:3A:BE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EEBF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D43591CCB8811F181AD04FACE1D38B0.roa
Signing time:             Mon 19 Oct 2026 06:41:56 +0000
ROA not before:           Mon 19 Oct 2026 06:41:51 +0000
ROA not after:            Thu 26 Nov 2026 06:41:51 +0000
asID:                     136809
IP address blocks:        154.201.96.0/24 maxlen: 24
                          154.201.97.0/24 maxlen: 24
                          154.201.98.0/24 maxlen: 24
                          154.201.99.0/24 maxlen: 24
                          154.201.100.0/24 maxlen: 24
                          154.201.101.0/24 maxlen: 24
                          154.201.102.0/24 maxlen: 24
                          154.201.103.0/24 maxlen: 24
                          154.201.104.0/24 maxlen: 24
                          154.201.105.0/24 maxlen: 24
                          154.201.106.0/24 maxlen: 24
                          154.201.107.0/24 maxlen: 24
                          154.201.108.0/24 maxlen: 24
                          154.201.109.0/24 maxlen: 24
                          154.201.110.0/24 maxlen: 24
                          154.201.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 05:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126655 (0x1eebf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 19 06:41:51 2026 GMT
            Not After : Nov 26 06:41:51 2026 GMT
        Subject: CN=6ad5bbb4-8b13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:24:63:d4:06:e4:50:5b:9a:46:74:f1:5a:42:
                    40:70:47:59:f2:48:ee:8e:44:c3:c2:3f:10:29:0e:
                    c7:0b:a8:0f:e9:a1:f8:b5:d7:90:87:c3:c8:30:74:
                    3f:74:d4:d9:ce:77:b3:f4:e8:2b:0a:46:3c:03:6b:
                    f0:b4:2f:bb:a0:f3:a4:71:f8:9d:8e:ff:19:30:50:
                    c7:2b:0e:af:29:30:2c:92:dd:e7:ac:6a:a9:fb:04:
                    7a:5a:10:be:09:55:be:85:78:51:52:bb:fa:1d:f5:
                    7a:ec:00:0e:44:9b:92:bd:57:19:1d:e4:c3:20:d2:
                    df:f2:8a:98:55:80:e1:82:36:5b:14:35:e5:f5:58:
                    2a:6f:9d:c2:f9:ed:3a:c0:59:d6:c5:98:5b:aa:e9:
                    c5:2d:ab:24:95:6d:a8:54:28:47:7c:95:15:5b:0f:
                    5f:cd:1a:7c:65:aa:66:f6:32:20:3b:30:e5:3e:06:
                    e9:8d:20:03:f6:df:80:6c:38:dd:d4:a2:81:70:52:
                    58:07:a5:8d:22:34:d0:9a:fd:8c:33:aa:8c:98:01:
                    ea:f1:47:85:cd:7b:23:04:36:71:6d:94:0f:78:75:
                    73:4a:3b:63:a0:68:12:06:87:f8:c8:97:f4:59:b4:
                    13:7b:82:15:24:cc:d9:d1:49:3a:18:87:3e:be:4f:
                    0d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DC:2A:AF:2F:BA:A5:DD:F5:15:82:27:D8:31:CF:14:5E:CE:3A:BE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D43591CCB8811F181AD04FACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         75:86:ee:61:ec:2c:f5:78:16:e0:45:9b:ff:1d:74:8e:2b:51:
         00:4f:02:15:d6:4f:cf:88:36:2c:ce:a9:b5:d4:af:44:e4:3d:
         41:c8:30:92:ae:7d:e9:6a:53:ce:ee:32:1d:37:d9:0d:be:c9:
         2a:52:39:e6:52:5e:a7:95:65:4e:be:47:9d:73:59:14:e2:16:
         66:f7:64:93:fb:51:3e:24:7c:a4:83:ab:20:9c:d6:f8:27:94:
         21:ba:99:c2:45:cb:6f:e8:4e:b5:07:14:a7:e4:93:47:99:7d:
         21:aa:f9:d2:70:16:8f:37:f2:60:3d:09:49:a0:74:d4:9c:46:
         1b:d9:5c:1a:5c:c3:74:b1:f3:f0:23:45:15:cf:92:a8:56:af:
         1b:da:85:3a:e2:25:0b:b0:1c:6a:ea:b3:34:c3:37:52:9f:64:
         47:22:b2:70:5a:73:a3:ae:da:11:e7:80:27:e9:77:d7:e0:a3:
         87:7b:73:a8:08:36:63:a1:ae:f3:bf:47:15:bc:9c:7f:d1:43:
         99:a6:fa:6c:70:06:f4:4e:00:fe:34:c7:2e:8a:62:88:51:f5:
         d1:67:18:6a:81:30:47:bc:49:e1:5d:1a:03:20:e8:81:33:64:
         a5:fb:5c:d4:ad:b8:ab:d5:b7:62:24:0d:d4:f0:3c:1a:b1:7c:
         29:a7:f5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----