Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6981B174BE2E11F1AFB543C8CE1D38B0.roa
File:                     6981B174BE2E11F1AFB543C8CE1D38B0.roa (raw, json)
Hash identifier:          zG6kz1973fvq2JmBN1Y2PX3bWa+Faiml6i7acv9vG4E=
Subject key identifier:   F5:55:12:A9:B0:87:72:84:DA:A6:1C:B4:A8:58:51:97:1A:E1:E9:0E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EBC7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6981B174BE2E11F1AFB543C8CE1D38B0.roa
Signing time:             Fri 02 Oct 2026 06:56:38 +0000
ROA not before:           Fri 02 Oct 2026 06:56:34 +0000
ROA not after:            Mon 09 Nov 2026 06:56:34 +0000
asID:                     202656
IP address blocks:        154.219.64.0/24 maxlen: 24
                          154.219.65.0/24 maxlen: 24
                          154.219.66.0/24 maxlen: 24
                          154.219.67.0/24 maxlen: 24
                          154.219.68.0/24 maxlen: 24
                          154.219.69.0/24 maxlen: 24
                          154.219.70.0/24 maxlen: 24
                          154.219.76.0/24 maxlen: 24
                          154.219.80.0/24 maxlen: 24
                          154.219.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125895 (0x1ebc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  2 06:56:34 2026 GMT
            Not After : Nov  9 06:56:34 2026 GMT
        Subject: CN=6abf55a5-38a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1d:cc:55:fa:59:bb:14:8b:e1:3c:2b:8c:96:
                    0b:71:02:0c:c2:cb:e9:30:17:82:66:45:cb:c7:ad:
                    cf:00:d1:b4:98:29:98:83:c3:1f:31:4c:19:2c:fe:
                    7d:63:a0:6d:d9:88:b3:39:4b:7c:cb:64:d4:03:fd:
                    63:d4:d7:3e:5b:0c:c5:f1:c8:76:0a:3f:16:d7:c8:
                    da:24:0e:f4:18:72:7b:b8:6b:c3:a0:ec:39:d7:9f:
                    49:d5:c1:18:f0:64:1f:69:36:a8:db:1a:06:5d:8c:
                    dc:09:dc:ee:ac:d3:f3:89:db:81:0f:50:72:9f:a6:
                    46:a4:7b:51:37:1d:13:99:0d:80:16:ca:bf:26:37:
                    da:32:48:fc:d4:f2:9e:80:26:54:2c:2b:48:3d:21:
                    38:05:a5:79:3f:fd:dd:d4:51:a5:bc:57:2d:a0:bb:
                    94:63:bb:95:1c:40:ed:96:0d:b5:6a:59:0c:91:8d:
                    ee:92:41:d3:b7:bb:95:a9:bd:cb:fc:f6:60:be:11:
                    4f:95:c9:1e:fd:d9:22:25:c7:6c:3e:a7:70:3b:f6:
                    ed:05:eb:20:b7:5f:ab:f5:a7:82:2d:82:b8:f5:5d:
                    8b:8e:f4:f7:fa:4a:34:9b:55:fc:35:60:6c:4d:84:
                    cf:d7:e0:71:79:1d:3e:bf:b4:0e:1c:49:9d:77:82:
                    50:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:55:12:A9:B0:87:72:84:DA:A6:1C:B4:A8:58:51:97:1A:E1:E9:0E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6981B174BE2E11F1AFB543C8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.219.64.0-154.219.70.255
                  154.219.76.0/24
                  154.219.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:b8:0a:c7:ef:36:e6:ea:3d:0b:03:68:d6:4a:97:44:7a:20:
         0f:80:aa:3b:56:50:65:f5:23:51:20:25:93:ef:6f:a0:e4:cc:
         97:bb:aa:e0:f7:30:bb:bb:c9:94:c8:bc:7d:04:9d:0d:47:87:
         ab:4b:dc:95:5c:1e:02:d5:9b:7a:8d:70:fa:0b:64:3b:c6:75:
         25:de:24:34:51:f9:df:26:7b:d1:c5:40:cb:3c:95:97:ee:b7:
         b1:a1:61:18:af:fa:21:ad:3e:68:dc:73:3f:a3:7e:30:a6:8a:
         dd:3d:6e:29:12:35:ae:e4:6b:6e:04:61:a0:7a:92:01:2b:f2:
         34:29:59:1d:0c:a7:57:5d:57:d2:df:89:a6:9f:c3:97:46:63:
         8e:3d:de:55:b7:05:77:d8:97:8b:34:ca:cf:33:fa:29:e4:6f:
         17:7e:65:17:1c:5c:e4:6a:e5:1e:fa:88:b2:df:d8:47:75:9b:
         dd:b8:6d:13:e0:f1:4e:67:76:bf:f0:53:f8:66:7f:51:69:fa:
         3a:08:a2:17:4b:a0:36:30:e1:c8:cb:b1:7d:a7:c1:ff:9f:e2:
         1c:20:9c:2f:bc:26:aa:19:e5:46:1f:73:10:74:58:5a:79:4c:
         9d:82:b4:41:1d:e4:da:d1:93:94:85:db:2b:8c:97:69:47:03:
         ed:05:ab:b3
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAevHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYxMDAyMDY1NjM0WhcNMjYxMTA5MDY1NjM0WjAYMRYw
FAYDVQQDEw02YWJmNTVhNS0zOGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAox3MVfpZuxSL4TwrjJYLcQIMwsvpMBeCZkXLx63PANG0mCmYg8MfMUwZ
LP59Y6Bt2YizOUt8y2TUA/1j1Nc+WwzF8ch2Cj8W18jaJA70GHJ7uGvDoOw5159J
1cEY8GQfaTao2xoGXYzcCdzurNPziduBD1Byn6ZGpHtRNx0TmQ2AFsq/JjfaMkj8
1PKegCZULCtIPSE4BaV5P/3d1FGlvFctoLuUY7uVHEDtlg21alkMkY3ukkHTt7uV
qb3L/PZgvhFPlcke/dkiJcdsPqdwO/btBesgt1+r9aeCLYK49V2LjvT3+ko0m1X8
NWBsTYTP1+BxeR0+v7QOHEmdd4JQgQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFPVV
Eqmwh3KE2qYctKhYUZca4ekOMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82OTgxQjE3NEJFMkUxMUYxQUZCNTQzQzhDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAaa20ADBACa20YDBACa
20wDBAGa21AwDQYJKoZIhvcNAQELBQADggEBAEe4CsfvNubqPQsDaNZKl0R6IA+A
qjtWUGX1I1EgJZPvb6DkzJe7quD3MLu7yZTIvH0EnQ1Hh6tL3JVcHgLVm3qNcPoL
ZDvGdSXeJDRR+d8me9HFQMs8lZfut7GhYRiv+iGtPmjccz+jfjCmit09bikSNa7k
a24EYaB6kgEr8jQpWR0Mp1ddV9Lfiaafw5dGY4493lW3BXfYl4s0ys8z+inkbxd+
ZRccXORq5R76iLLf2Ed1m924bRPg8U5ndr/wU/hmf1Fp+joIohdLoDYw4cjLsX2n
wf+f4hwgnC+8JqoZ5UYfcxB0WFp5TJ2CtEEd5NrRk5SF2yuMl2lHA+0Fq7M=
-----END CERTIFICATE-----