Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CD951DCC2F311F193B4F7FCCE1D38B0.roa
File:                     6CD951DCC2F311F193B4F7FCCE1D38B0.roa (raw, json)
Hash identifier:          seEfvThEeriuqb5nupUDMhrfdGa0TMMTWrX6s9OPqPM=
Subject key identifier:   E8:5E:3F:2E:88:E3:E4:C2:66:33:D8:BB:E3:30:E5:95:F1:4C:EC:F7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ECC9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CD951DCC2F311F193B4F7FCCE1D38B0.roa
Signing time:             Thu 08 Oct 2026 08:36:59 +0000
ROA not before:           Thu 08 Oct 2026 08:36:54 +0000
ROA not after:            Fri 30 Oct 2026 08:36:54 +0000
asID:                     134365
IP address blocks:        154.198.40.0/24 maxlen: 24
                          154.198.41.0/24 maxlen: 24
                          154.198.42.0/24 maxlen: 24
                          154.198.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126153 (0x1ecc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  8 08:36:54 2026 GMT
            Not After : Oct 30 08:36:54 2026 GMT
        Subject: CN=6ac7562b-2ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0c:69:70:a3:f8:a3:47:f9:be:fc:74:24:8d:
                    cd:84:05:34:4e:85:94:75:0d:28:90:86:1b:8e:b2:
                    e0:38:94:95:80:b0:42:ed:43:66:d1:f1:5e:7b:f6:
                    62:18:63:f1:0b:c9:8e:f8:fc:1d:ff:a9:8f:62:0a:
                    dc:6c:9b:45:a6:60:8b:50:12:f5:dc:f1:0b:16:75:
                    7e:8b:49:c9:ad:5e:da:b6:59:f6:40:be:53:3c:dc:
                    06:0f:d7:bf:d1:f1:54:b1:0e:f8:77:9e:c5:9c:df:
                    32:f6:6d:cb:16:35:fb:81:fe:5b:2e:db:3f:58:6f:
                    fb:54:cc:4e:48:87:54:2d:8a:6d:b4:ba:e4:8f:35:
                    eb:c4:e2:89:bb:6d:d2:8f:32:ab:52:f0:95:05:43:
                    ae:9c:aa:ca:7f:11:a2:ee:ef:dc:4f:54:57:73:f4:
                    91:63:2b:7c:08:01:02:61:c4:9a:cd:4f:6d:ce:15:
                    ae:53:01:e6:de:d8:b2:11:ca:6e:0f:e0:80:f6:c9:
                    be:4d:93:d5:78:99:fb:c0:f8:d6:c1:78:6e:df:17:
                    d5:75:08:5f:47:61:bf:68:81:e0:0d:08:42:7e:27:
                    6a:ea:9a:db:ae:9a:4b:47:91:74:73:ca:d2:0e:a0:
                    1c:b2:fe:38:91:44:f4:a4:ee:d1:9d:0d:3f:f2:75:
                    47:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5E:3F:2E:88:E3:E4:C2:66:33:D8:BB:E3:30:E5:95:F1:4C:EC:F7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CD951DCC2F311F193B4F7FCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.198.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:27:9a:9c:20:db:ea:03:29:4e:fc:10:08:aa:21:6e:af:34:
         ee:3f:bf:04:3a:f7:25:71:ff:26:ba:b6:7f:46:f3:39:38:27:
         1a:f4:85:af:39:be:c7:35:9c:92:ef:5d:f0:4c:32:79:88:39:
         30:61:36:8b:b1:3b:1f:95:5f:93:a6:32:25:8b:34:0f:ce:70:
         6f:71:3c:7e:01:ec:e2:84:41:c5:06:53:b3:ee:22:70:52:8f:
         24:12:10:19:3c:e1:7f:e2:72:87:64:0a:41:57:d2:e9:a5:52:
         a3:11:f9:82:fb:47:dd:6b:b0:4e:77:4c:a9:df:ab:6b:ca:ae:
         2c:14:a7:5d:7f:a3:2d:ba:80:7c:49:82:65:69:cb:ee:76:35:
         d9:8c:3d:71:91:9c:0f:be:de:ed:f3:d0:a1:76:dd:ce:2e:e9:
         98:d1:e6:5c:e8:22:fe:52:fd:e7:49:26:b7:5a:84:87:fd:4f:
         4c:3b:00:d8:f5:4c:61:01:c2:cc:8e:26:4d:7e:59:0b:5a:7e:
         8c:12:e2:4d:f8:e2:62:fd:38:fd:5f:0c:09:5a:9a:91:99:f5:
         7b:e6:1a:88:c0:28:69:06:f4:ca:4c:76:0d:60:23:a5:89:3a:
         77:da:fe:e8:55:16:c0:51:57:b6:d7:cc:02:f9:cd:9b:5d:b1:
         2e:3f:f2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----