Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F6DD4FEBF1311F1A53D1A18CF1D38B0.roa
File:                     3F6DD4FEBF1311F1A53D1A18CF1D38B0.roa (raw, json)
Hash identifier:          fAZXAuByPJybATKTwir4cGxXfr2T5nldfjAE/7LYBWI=
Subject key identifier:   19:DC:83:25:D9:8E:94:D6:86:C8:FA:B1:F6:CD:7B:77:17:DC:0D:63
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC02
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F6DD4FEBF1311F1A53D1A18CF1D38B0.roa
Signing time:             Sat 03 Oct 2026 10:14:42 +0000
ROA not before:           Sat 03 Oct 2026 10:14:38 +0000
ROA not after:            Tue 10 Nov 2026 10:14:38 +0000
asID:                     63139
IP address blocks:        154.95.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125954 (0x1ec02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  3 10:14:38 2026 GMT
            Not After : Nov 10 10:14:38 2026 GMT
        Subject: CN=6ac0d592-25d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4d:ff:26:1b:dd:14:69:e0:a7:be:84:e4:ce:
                    08:bc:cb:f6:f8:ea:20:a3:8e:1b:5a:db:8c:c9:d3:
                    ed:5f:c1:35:b0:ee:79:01:f7:65:4b:bb:3c:14:b9:
                    1a:00:05:8b:54:ab:92:bf:31:8c:96:dd:e7:02:de:
                    26:42:b4:6c:27:f1:8a:13:23:d3:3e:b4:93:f6:87:
                    c1:87:b1:dc:2b:af:c8:07:2f:1b:82:4f:c7:5d:dd:
                    b7:99:a7:e2:a7:8c:cc:e1:c7:b8:4b:58:af:8e:1f:
                    81:e3:42:19:7b:f0:68:ab:a8:ef:39:6b:c7:c7:1f:
                    49:f8:b7:2a:40:0e:70:07:43:e4:99:85:0b:61:23:
                    b1:dd:37:57:45:48:28:31:ac:27:73:33:d4:e5:72:
                    59:2c:b0:cd:4b:82:65:a6:5a:a4:ed:fd:bf:6a:89:
                    7a:95:6e:71:32:63:c8:b7:cf:6c:63:10:42:85:ac:
                    ac:95:63:e5:72:ce:80:69:36:1a:21:c2:87:56:74:
                    d5:28:ec:6c:a5:1f:b5:6e:50:13:bf:82:df:df:38:
                    30:fc:5c:77:85:15:e9:7f:d5:e0:3e:f5:d8:07:1a:
                    71:60:bb:56:44:58:f4:b1:0a:0f:11:42:d7:1c:f1:
                    d9:1e:53:3a:a8:a7:fc:b6:03:9f:13:0c:bf:2b:13:
                    e8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DC:83:25:D9:8E:94:D6:86:C8:FA:B1:F6:CD:7B:77:17:DC:0D:63
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F6DD4FEBF1311F1A53D1A18CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.95.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:f7:a5:61:e4:89:5f:eb:6c:00:bc:b2:62:7c:7f:8a:e6:ad:
         61:4f:ab:d0:4e:cf:b0:77:7c:d0:b2:38:d8:f7:f1:b6:b1:0f:
         7f:24:b2:de:d0:1b:b4:d5:39:d3:ba:dd:ba:5a:51:f2:e3:41:
         25:ef:1c:57:84:0e:90:4a:f9:b4:46:d8:06:fe:b3:ba:a4:f1:
         15:ca:9c:6f:80:84:9a:47:0e:4e:b6:2e:2c:d6:44:90:13:fb:
         c1:68:73:eb:b9:c0:19:42:40:98:cb:72:eb:94:cb:1c:34:5c:
         84:e7:8b:2a:a6:10:3d:1e:1f:e5:26:4a:22:2b:e3:35:fb:b6:
         0b:37:99:79:01:d9:87:0a:76:6e:e1:d5:ae:20:01:eb:3b:fb:
         88:30:1d:f7:7f:6f:34:f9:48:a6:0e:50:c2:77:f3:0e:f0:c9:
         12:f4:07:61:a9:19:2a:e7:b5:45:d7:09:3e:c2:c1:a2:b2:55:
         8d:06:b0:f5:d3:6f:d1:6d:2a:7c:78:e4:83:33:77:17:85:b1:
         6e:ce:ab:21:9e:f2:1c:cc:98:a8:65:f3:65:94:47:6f:5b:1f:
         5f:93:7b:db:67:57:f4:b2:94:de:29:32:8d:8e:95:4b:87:37:
         3a:f2:31:fd:be:72:c8:21:e7:94:08:42:b9:99:51:36:dc:b2:
         e3:fc:a2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----