Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D01CA60B7E811F1A355C5DACE1D38B0.roa
File:                     6D01CA60B7E811F1A355C5DACE1D38B0.roa (raw, json)
Hash identifier:          zwufj0OXVEYpDUtVzgquywkCHMdhG448rcTaemfruCI=
Subject key identifier:   74:CC:7A:D7:0D:BC:C6:0A:E9:86:E9:58:FF:55:DC:C1:BA:E5:A2:C4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EA85
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D01CA60B7E811F1A355C5DACE1D38B0.roa
Signing time:             Thu 24 Sep 2026 07:20:32 +0000
ROA not before:           Thu 24 Sep 2026 07:20:27 +0000
ROA not after:            Sun 01 Nov 2026 07:20:27 +0000
asID:                     62240
IP address blocks:        154.194.112.0/24 maxlen: 24
                          154.194.113.0/24 maxlen: 24
                          154.195.16.0/24 maxlen: 24
                          154.195.17.0/24 maxlen: 24
                          154.195.18.0/24 maxlen: 24
                          154.195.19.0/24 maxlen: 24
                          154.195.148.0/24 maxlen: 24
                          154.195.149.0/24 maxlen: 24
                          154.196.60.0/24 maxlen: 24
                          154.196.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 11:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125573 (0x1ea85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 24 07:20:27 2026 GMT
            Not After : Nov  1 07:20:27 2026 GMT
        Subject: CN=6ab4cf40-97db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0d:6a:66:9e:e6:d3:db:d9:a3:bc:bb:ce:d5:
                    9c:04:88:46:bd:88:98:8d:af:54:9c:35:c3:6d:96:
                    13:4a:53:e9:2c:26:e1:36:be:66:4d:cb:9d:4c:10:
                    2c:61:e4:5a:63:e9:98:54:2d:b6:66:a9:34:ff:df:
                    f7:99:7d:e7:59:0e:b8:0a:f0:74:13:3e:51:74:f9:
                    e2:94:60:78:40:b3:3c:92:67:18:6b:77:9a:d3:14:
                    ed:87:50:b3:68:b3:59:71:e7:2a:98:87:d7:90:ee:
                    fc:bb:e7:b7:85:21:45:7d:19:77:1e:c0:db:52:49:
                    0a:ba:23:97:d9:b5:16:e9:7c:ef:c6:a6:dd:12:81:
                    00:61:1f:ef:c7:a4:38:4d:bd:3e:86:d5:42:ee:89:
                    ce:fc:18:1a:78:22:4b:86:8d:76:54:c9:2a:cf:27:
                    83:58:7d:cd:c6:6f:2e:ca:49:54:20:f0:57:a5:bb:
                    8a:83:e7:5c:47:47:69:1b:15:20:19:30:ae:df:21:
                    13:ea:a1:97:6d:8c:98:a1:ff:67:99:4f:b7:d0:c2:
                    a3:e3:40:26:89:d4:21:93:94:56:01:06:ee:80:55:
                    19:11:ad:f1:9f:66:71:cb:25:60:b5:dc:77:45:18:
                    d3:f8:28:85:2f:6f:05:e3:65:37:90:dd:a2:78:98:
                    66:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CC:7A:D7:0D:BC:C6:0A:E9:86:E9:58:FF:55:DC:C1:BA:E5:A2:C4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D01CA60B7E811F1A355C5DACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.112.0/23
                  154.195.16.0/22
                  154.195.148.0/23
                  154.196.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:b2:98:8e:16:66:75:6d:dd:e7:87:c8:db:b0:cb:23:61:5d:
         93:d1:95:7b:2b:1f:57:fa:bf:ac:b8:29:b9:b6:d4:84:b2:a6:
         40:af:f3:76:53:6d:f6:a4:f5:6e:b1:6b:3a:c6:1b:aa:1b:79:
         e5:e7:86:d6:63:34:b2:86:7e:93:ec:0a:c2:f5:9d:4b:42:3e:
         d1:90:35:96:35:0b:77:29:aa:5d:a3:9f:a9:0d:1d:c8:9a:fc:
         75:4b:60:ea:f4:0d:cb:97:2c:d1:1a:33:e2:2c:ab:9f:ea:da:
         19:ce:d7:b4:1a:1a:6e:54:2d:d1:bb:0a:06:2d:77:17:6e:97:
         50:33:90:65:41:21:05:dd:07:b2:00:9e:2e:be:5e:e2:4b:10:
         77:3d:63:7a:93:6c:9c:89:06:a9:34:41:46:19:9e:4d:a0:70:
         37:06:75:b9:9d:da:e5:78:79:07:95:11:8d:a5:e5:41:10:9c:
         a0:1f:8b:16:5c:4a:38:09:f1:91:e7:6c:46:10:72:1d:b8:67:
         5a:93:ba:e5:cb:3c:dc:a4:85:44:41:35:4e:ae:d2:4b:ba:99:
         95:df:b8:06:0a:47:d1:36:db:45:13:a0:c0:31:a6:3f:e0:b4:
         8c:0b:62:a3:ef:f6:21:8c:99:da:a7:44:37:c0:06:1d:88:45:
         7b:50:55:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----