Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CE8F1B4D2B211F18D0DE4F6CE1D38B0.roa
File:                     5CE8F1B4D2B211F18D0DE4F6CE1D38B0.roa (raw, json)
Hash identifier:          92+qRcw/1nTXDtFSxhKrM4v1JF1EYq7fQaJx6yfCfm0=
Subject key identifier:   47:EE:99:4A:1D:23:B8:69:C6:43:14:BB:FB:15:BE:DD:8F:5C:6E:C2
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01F0DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CE8F1B4D2B211F18D0DE4F6CE1D38B0.roa
Signing time:             Wed 28 Oct 2026 09:31:33 +0000
ROA not before:           Wed 28 Oct 2026 09:31:29 +0000
ROA not after:            Sat 05 Dec 2026 09:31:29 +0000
asID:                     63099
IP address blocks:        154.200.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Nov 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127197 (0x1f0dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct 28 09:31:29 2026 GMT
            Not After : Dec  5 09:31:29 2026 GMT
        Subject: CN=6ae1c0f5-aac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0b:b8:e1:4a:15:fb:78:f1:ca:d5:ea:df:18:
                    f7:d9:7e:4f:11:9d:93:0b:2e:82:74:36:ef:64:be:
                    3c:0c:6a:27:ee:bc:7d:84:37:95:d6:86:3b:65:c4:
                    42:74:99:ec:ba:ce:ff:b2:f1:92:dc:db:66:9d:1d:
                    85:8b:3f:f4:23:ed:67:4d:41:39:a0:b0:ab:4e:c6:
                    d3:6d:a1:f1:95:88:59:ff:7f:37:24:3e:a6:cb:ef:
                    5b:7e:c1:2b:7e:20:8e:a2:5a:4e:aa:38:72:f7:58:
                    e8:f0:75:6e:cc:b4:83:5c:07:ee:45:03:0b:8d:f4:
                    0e:3e:80:a9:00:3b:d9:67:1e:b2:2b:73:15:23:be:
                    a2:e6:9a:cf:71:92:b8:0c:0d:4f:a8:d7:94:ae:8c:
                    f4:a4:f9:c7:26:54:a4:cc:8c:04:93:9e:35:9d:59:
                    e5:50:6f:0b:41:a6:3d:4a:14:c7:a0:0c:60:0f:19:
                    c2:89:fa:73:83:a2:b6:e5:86:69:e7:a6:b8:e5:dc:
                    ac:e5:09:e8:92:d1:29:e2:b7:bc:56:ae:e1:82:82:
                    08:b8:ae:e8:5d:f1:11:47:77:cf:a1:5a:bb:e2:f9:
                    c2:48:b5:4d:7f:43:32:4a:89:13:a3:37:2b:a8:7d:
                    a8:13:d3:07:a3:c0:8b:ec:c5:68:77:30:31:97:46:
                    2f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EE:99:4A:1D:23:B8:69:C6:43:14:BB:FB:15:BE:DD:8F:5C:6E:C2
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CE8F1B4D2B211F18D0DE4F6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:c7:49:3d:c3:67:c4:29:d7:62:aa:c0:03:b0:94:06:4f:15:
         ec:6f:b9:b1:35:e9:6f:c0:d8:38:55:ce:49:43:97:0c:25:dd:
         66:66:91:85:a3:10:ed:e2:5a:aa:56:0e:6b:d9:0e:a2:5f:67:
         f5:02:90:52:90:4b:58:a5:4c:64:5a:6b:e3:50:3d:bd:73:d6:
         9d:a5:29:41:ae:e2:32:bb:07:53:c1:5d:89:c8:34:46:1f:a6:
         f8:29:39:23:d2:4c:c4:77:37:b2:aa:e1:6a:72:ce:b2:63:c4:
         ad:28:64:fc:2d:c8:57:9c:0c:32:7e:d9:45:90:45:f4:d4:01:
         da:ce:85:cb:d4:d1:d7:de:16:f0:9c:51:74:52:07:97:67:5c:
         30:67:71:0e:15:df:a6:0e:fb:74:d4:04:30:ca:63:4e:ba:9e:
         10:5b:9f:71:98:22:97:23:1e:ac:29:fb:49:3e:a3:5b:b2:c5:
         61:eb:fb:cf:d7:c2:40:63:bc:eb:cf:4a:d5:7e:a1:02:a4:72:
         1c:54:d4:f7:81:05:e6:a5:87:1a:ff:c1:d2:d6:73:ac:a9:58:
         91:4f:0f:cc:f1:4b:3a:56:ff:41:3b:58:ef:3a:6f:84:37:17:
         6a:9e:87:78:5c:d6:49:3d:53:e2:c7:c3:b1:1f:42:9b:3e:fb:
         a5:69:f8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----