Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4BF3F532C17F11F189A5CCE7CE1D38B0.roa
File:                     4BF3F532C17F11F189A5CCE7CE1D38B0.roa (raw, json)
Hash identifier:          dcxfo14q2/B50AaMHkU23BFmOMKlNGTRRey4dhkRzMs=
Subject key identifier:   CC:59:0F:C2:21:39:CE:39:55:2F:ED:EE:61:8B:CE:32:77:73:18:C1
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC89
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4BF3F532C17F11F189A5CCE7CE1D38B0.roa
Signing time:             Tue 06 Oct 2026 12:13:11 +0000
ROA not before:           Tue 06 Oct 2026 12:13:07 +0000
ROA not after:            Fri 13 Nov 2026 12:13:07 +0000
asID:                     401650
IP address blocks:        154.200.19.0/24 maxlen: 24
                          154.200.20.0/24 maxlen: 24
                          154.200.21.0/24 maxlen: 24
                          154.200.24.0/24 maxlen: 24
                          154.200.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126089 (0x1ec89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  6 12:13:07 2026 GMT
            Not After : Nov 13 12:13:07 2026 GMT
        Subject: CN=6ac4e5d7-becd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c9:8c:83:6c:33:cc:be:ea:48:49:33:79:d2:
                    4e:8a:1f:eb:81:24:3c:09:f4:d7:a4:1b:6e:c1:55:
                    97:ca:28:b0:97:f9:dd:0a:d7:a3:3b:33:70:18:21:
                    9b:52:29:fb:22:40:a4:87:e0:d2:87:c8:0c:6d:98:
                    fc:a3:77:82:bf:11:8d:17:d2:83:37:86:8a:21:e6:
                    4a:29:ad:35:6c:46:d2:be:6a:5d:1c:8a:fa:a4:a7:
                    98:df:ec:d2:98:4c:0e:e1:84:42:fe:4e:58:87:db:
                    93:73:44:86:a5:84:e2:ce:e3:62:fa:4e:9a:8a:3a:
                    6c:cd:e0:e6:b8:e3:ca:af:a4:2c:58:7c:40:bc:3b:
                    b6:36:23:b9:7a:33:e7:73:48:48:7c:e1:78:08:b6:
                    8d:ee:fc:9c:4c:0c:e1:d1:0c:d4:f6:2c:8d:8d:48:
                    44:40:06:1f:9f:09:65:af:39:79:ca:45:46:a7:2d:
                    60:33:f4:7d:de:e0:19:cf:ce:5a:02:2e:f6:fc:d9:
                    94:09:cd:c1:b8:d9:67:c4:f8:93:9a:dc:d0:a8:29:
                    62:31:24:63:72:90:1c:42:c4:63:ae:36:0c:6d:b9:
                    88:34:fc:51:cc:9a:33:b4:a6:0c:95:35:5c:8b:bc:
                    e4:5d:e4:db:28:6f:bd:8d:24:d6:f8:90:fd:00:35:
                    c8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:59:0F:C2:21:39:CE:39:55:2F:ED:EE:61:8B:CE:32:77:73:18:C1
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4BF3F532C17F11F189A5CCE7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.19.0-154.200.21.255
                  154.200.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cf:28:0e:b7:b4:aa:c1:88:28:82:97:48:70:6c:e1:a8:96:6f:
         76:5a:9c:7b:8a:b4:cd:f7:15:e6:36:bd:ac:f6:41:78:12:30:
         db:ac:4f:28:1d:97:91:e9:25:5d:80:64:a9:42:af:0d:c8:27:
         98:c7:02:40:60:45:ad:01:cd:c5:bf:df:18:c2:9c:7c:39:64:
         e4:e0:87:91:54:e7:78:81:5e:5c:6b:0c:fb:b6:e0:e3:15:61:
         69:62:03:94:da:06:ae:5a:dc:73:b5:fc:7b:8b:58:b5:f3:24:
         46:8a:ab:21:33:33:c9:e9:42:2d:ce:c8:1b:4b:a2:36:15:0f:
         b6:cf:7e:dc:75:c4:17:86:2d:08:dd:98:09:9e:9b:d5:f4:80:
         a9:2c:22:7e:12:9e:8f:a3:ed:ac:ba:d0:3f:30:3e:e5:b2:60:
         df:cd:3b:48:4c:18:36:54:08:0a:f6:49:c3:4b:e1:ef:3e:7b:
         26:5a:bf:9f:db:8f:2c:a4:03:40:ee:da:69:81:4c:13:36:51:
         8f:73:d9:7b:32:a4:ee:3f:c6:36:d1:64:cd:7a:85:66:ca:00:
         0f:39:76:10:80:6b:a5:7c:c3:00:62:38:ff:85:1f:ad:4b:8b:
         76:10:a4:62:46:7b:57:2f:47:05:fa:bc:11:98:c7:e6:d1:83:
         11:ce:c4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----