Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59F739E4B7F411F1976BC1A7CE1D38B0.roa
File:                     59F739E4B7F411F1976BC1A7CE1D38B0.roa (raw, json)
Hash identifier:          Rbq+MuclQi2ePDMAEYDGQ9XbzDVLKxswwVvZJ2ffc5I=
Subject key identifier:   7B:B4:75:E0:77:1D:E7:0A:13:4B:A6:74:86:D1:2B:FE:57:72:33:6D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EAB1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59F739E4B7F411F1976BC1A7CE1D38B0.roa
Signing time:             Thu 24 Sep 2026 08:45:54 +0000
ROA not before:           Thu 24 Sep 2026 08:45:50 +0000
ROA not after:            Sun 01 Nov 2026 08:45:50 +0000
asID:                     62240
IP address blocks:        154.194.126.0/24 maxlen: 24
                          154.195.3.0/24 maxlen: 24
                          154.195.97.0/24 maxlen: 24
                          154.195.98.0/24 maxlen: 24
                          154.195.99.0/24 maxlen: 24
                          154.195.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 10:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125617 (0x1eab1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 24 08:45:50 2026 GMT
            Not After : Nov  1 08:45:50 2026 GMT
        Subject: CN=6ab4e342-7246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:64:89:ff:91:77:d2:5d:43:1d:2b:80:23:dc:
                    bc:11:e1:fd:e0:46:c6:3f:53:39:cb:ae:1f:6b:a9:
                    40:bd:97:6a:d6:1a:0b:2d:da:6e:d9:9e:6e:88:7f:
                    01:03:7b:d7:2e:48:06:07:88:7e:ae:f0:fa:3e:de:
                    63:e4:6d:09:69:d9:95:d0:12:59:d4:a7:81:b8:21:
                    ba:f7:1e:04:be:ff:ec:35:5b:cd:d4:02:10:fb:51:
                    c0:3b:32:0a:de:1f:7c:ca:20:cf:9f:e6:d9:95:a0:
                    54:13:5c:2a:f6:6d:63:0c:0f:51:09:f2:cc:74:24:
                    d8:76:ad:73:a0:19:f5:40:de:43:01:5c:5b:eb:d5:
                    13:d6:ed:84:e3:ff:3c:59:03:3a:46:1b:1a:02:28:
                    20:f5:6c:8a:e5:94:49:ed:60:fe:a8:da:ae:30:e2:
                    bb:52:07:f9:50:57:1b:1b:1b:1d:37:0e:18:a1:f1:
                    56:41:09:55:c0:80:ee:41:6f:9a:ff:82:85:86:fd:
                    dd:0b:97:7f:c3:b9:dd:a9:ce:de:f3:51:cc:8d:ce:
                    7e:d8:95:28:30:bb:33:0c:af:8f:04:93:6e:33:83:
                    43:de:7b:9a:ad:93:dc:f8:8f:37:18:de:0d:76:ac:
                    ac:5c:ad:39:f5:dd:5a:d7:60:6f:03:4e:3d:54:65:
                    2c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B4:75:E0:77:1D:E7:0A:13:4B:A6:74:86:D1:2B:FE:57:72:33:6D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59F739E4B7F411F1976BC1A7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.126.0/24
                  154.195.3.0/24
                  154.195.97.0-154.195.99.255
                  154.195.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:be:96:3f:d9:62:93:ff:cc:d8:1a:94:fc:8c:94:ac:10:65:
         07:8b:68:89:a9:ec:6a:1e:c3:03:d9:01:6b:d4:11:37:11:02:
         5e:54:d1:fd:91:85:9e:65:eb:53:4d:38:98:12:11:5b:33:c5:
         58:a0:eb:f6:5e:a2:96:1b:b0:3f:2e:4e:a2:8d:46:b5:53:0b:
         2c:02:e4:0c:f1:34:60:1c:cd:74:c0:a9:9d:59:12:eb:df:da:
         19:a9:c3:c6:13:f1:69:79:5d:2f:b2:49:68:29:30:d6:37:9b:
         35:ac:f9:4e:20:5a:c2:0e:d6:ac:10:ed:c8:90:91:e6:32:64:
         be:1a:61:c3:ff:91:52:5a:b9:10:50:3b:88:73:2e:c0:73:4b:
         8e:64:1a:f1:fa:39:e0:09:91:34:00:16:93:5f:b7:27:10:8a:
         e1:01:d8:56:f9:62:c1:10:12:ec:84:08:5a:b2:c0:5f:01:c8:
         c1:95:85:98:3a:d0:87:35:9f:9f:d6:30:6c:23:14:c7:65:71:
         7f:d2:69:e0:44:4c:65:46:94:98:3d:5c:79:34:14:46:0a:55:
         1e:8d:7b:b1:16:57:55:1d:e7:da:74:9d:5f:61:0c:a3:ef:d5:
         99:cc:a4:a2:04:29:49:fa:90:12:df:d5:39:e3:8a:e8:48:83:
         50:05:84:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----