Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C8FB04CC06911F1993AE6C8CE1D38B0.roa
File:                     4C8FB04CC06911F1993AE6C8CE1D38B0.roa (raw, json)
Hash identifier:          WEKxIOUA26Db+oRE681w+2eEBNnHsyN9mLex8VPSPeA=
Subject key identifier:   E8:42:2F:F2:2A:8A:72:8E:A8:45:6F:2E:85:48:80:BC:E2:B6:B5:CE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC2C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C8FB04CC06911F1993AE6C8CE1D38B0.roa
Signing time:             Mon 05 Oct 2026 03:03:12 +0000
ROA not before:           Mon 05 Oct 2026 03:03:06 +0000
ROA not after:            Mon 12 Oct 2026 03:03:06 +0000
asID:                     209242
IP address blocks:        154.218.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 03:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125996 (0x1ec2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  5 03:03:06 2026 GMT
            Not After : Oct 12 03:03:06 2026 GMT
        Subject: CN=6ac31370-91fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:7f:11:e8:ba:0b:e9:31:0c:70:23:aa:89:
                    81:d2:5d:e5:fe:a2:34:7f:40:5c:09:eb:ed:cd:b4:
                    5f:d0:c7:fc:5a:ad:be:73:6d:1d:71:c7:62:37:a8:
                    35:27:a5:6d:7c:92:f5:94:e3:cf:0c:81:d1:c7:15:
                    33:37:01:c4:b7:5a:45:b6:a0:25:ac:d5:85:04:7a:
                    c8:03:d1:c9:06:cd:0c:34:85:7f:d0:59:1a:91:74:
                    c5:86:da:4d:9b:97:1c:f5:6e:39:68:81:1c:16:b3:
                    ba:a7:60:22:d9:9a:4f:56:5f:e2:65:fd:f4:da:d4:
                    c7:0a:c4:4e:28:f3:d8:dc:1d:66:b5:76:c5:d5:07:
                    d4:1c:4f:c6:bd:2b:3c:b6:dc:15:f5:06:26:53:1d:
                    02:05:99:2b:15:d5:51:31:5b:41:fd:4e:60:4a:97:
                    53:a6:a2:89:23:13:cb:72:29:52:da:e2:39:3a:41:
                    fd:07:8d:b1:f0:b0:b7:f5:f3:81:00:48:29:e8:aa:
                    ee:b4:2d:2b:6b:db:93:cc:cd:0d:4e:f1:75:22:2a:
                    16:25:49:de:03:95:dc:c6:19:30:8c:68:fc:b5:b4:
                    50:0b:cf:c0:ce:d8:7d:b2:6f:52:5d:fe:62:b8:db:
                    e4:d5:57:6b:88:96:c4:b3:c6:c9:56:28:d5:75:54:
                    58:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:42:2F:F2:2A:8A:72:8E:A8:45:6F:2E:85:48:80:BC:E2:B6:B5:CE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C8FB04CC06911F1993AE6C8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.218.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:a0:9f:c7:56:5a:c1:8c:16:82:cf:ae:37:b2:4e:f6:eb:b2:
         6a:51:ff:77:e4:7c:62:98:58:7d:af:7e:60:f5:31:eb:fb:18:
         b1:b7:72:a6:b5:37:7b:84:f9:63:d5:00:aa:1f:1a:bb:f4:0e:
         3a:09:18:98:e3:33:e6:c8:f9:24:a9:67:06:df:e9:bb:b7:a0:
         fd:b6:bc:d6:cf:06:1e:e0:a7:41:82:a9:9f:a9:3a:b2:30:b0:
         38:03:6a:e1:24:43:53:2e:af:e6:16:b3:f7:9c:16:d1:8f:48:
         81:40:1b:78:e0:d8:98:5e:b5:00:a3:bc:0c:7d:18:f2:35:b2:
         ff:2e:38:34:3c:06:28:80:37:61:dc:6b:4b:e7:ea:79:6c:c8:
         dd:f1:42:40:a8:f1:f3:a6:8e:4b:b1:6c:63:f6:fc:02:6e:60:
         5a:5e:fb:ec:29:80:8b:9c:3f:ec:e3:3b:46:3b:dc:d0:47:4e:
         a2:81:ba:ed:30:86:0e:6e:9a:73:2b:fb:c7:d6:2a:df:b4:76:
         2c:42:cc:e9:e9:75:92:27:ed:61:65:93:91:28:4c:79:81:65:
         a8:e8:37:2d:42:a7:c8:34:bd:f6:9c:f4:3d:71:65:ad:da:b9:
         52:b5:35:e5:10:3f:3c:ca:1f:df:05:c4:49:4b:a2:8f:fe:cb:
         7d:06:16:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----