Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FF7B8ACAC7011F19B0B020DCF1D38B0.roa
File:                     6FF7B8ACAC7011F19B0B020DCF1D38B0.roa (raw, json)
Hash identifier:          49VuFMaUDkdq5sa73f6CiA/pdMoAsq3oh0qXbHoxIoY=
Subject key identifier:   79:4C:A1:B5:69:81:10:22:B1:79:FD:11:C9:C6:C7:A2:29:C6:C5:8D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E6B4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FF7B8ACAC7011F19B0B020DCF1D38B0.roa
Signing time:             Wed 09 Sep 2026 17:03:54 +0000
ROA not before:           Wed 09 Sep 2026 17:03:50 +0000
ROA not after:            Mon 30 Nov 2026 17:03:50 +0000
asID:                     399077
IP address blocks:        154.211.74.0/24 maxlen: 24
                          154.211.75.0/24 maxlen: 24
                          154.211.76.0/24 maxlen: 24
                          154.211.77.0/24 maxlen: 24
                          154.211.78.0/24 maxlen: 24
                          154.211.79.0/24 maxlen: 24
                          154.211.80.0/24 maxlen: 24
                          154.211.81.0/24 maxlen: 24
                          154.211.82.0/24 maxlen: 24
                          154.211.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 07:35:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124596 (0x1e6b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep  9 17:03:50 2026 GMT
            Not After : Nov 30 17:03:50 2026 GMT
        Subject: CN=6aa1917a-1e7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cf:70:a3:6a:c6:1b:8a:83:7d:67:77:33:48:
                    f7:c0:bf:6c:b9:78:44:b5:98:1c:9f:88:3b:7c:75:
                    4f:e8:0f:65:67:cf:85:1e:67:a2:65:38:26:b9:16:
                    fa:42:c2:08:c6:02:2a:8c:85:1d:9a:b6:ae:21:9c:
                    d1:59:3f:bb:30:26:db:5f:d9:52:66:8d:ea:ae:f5:
                    16:73:0a:fc:c3:8a:2b:42:83:9c:c1:6d:38:c3:80:
                    9a:95:cd:8d:75:86:ca:76:81:36:99:a3:ab:b1:2a:
                    ab:5f:0e:ac:7d:0e:6c:f4:7a:9f:f6:46:c9:c9:20:
                    e6:2e:d7:4f:42:ee:46:3e:6c:ae:1e:4d:bb:38:ad:
                    f8:00:a5:c2:5f:8e:23:6f:0c:e0:21:a3:7d:82:fb:
                    4e:5a:94:d1:0c:84:1d:0f:4a:75:f4:a6:9f:cd:65:
                    bb:4e:12:5d:e2:a8:13:67:33:c3:df:8d:0d:50:57:
                    45:ce:8b:07:76:29:9f:d7:17:52:8d:6b:19:ee:43:
                    52:93:a7:e9:11:e7:24:88:9f:d5:fb:53:fb:19:e3:
                    01:e8:a2:39:db:bf:26:a5:c1:49:99:4c:78:b3:d5:
                    26:2e:05:88:aa:32:a9:eb:ed:af:78:7c:ee:76:ba:
                    65:80:6d:ce:25:f0:09:f7:3e:ac:27:a0:48:5c:ae:
                    8d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4C:A1:B5:69:81:10:22:B1:79:FD:11:C9:C6:C7:A2:29:C6:C5:8D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FF7B8ACAC7011F19B0B020DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.211.74.0-154.211.83.255

    Signature Algorithm: sha256WithRSAEncryption
         9f:d0:26:33:cc:ae:64:65:df:67:8c:f3:30:12:04:4d:a6:12:
         c3:c2:96:cd:4a:e1:40:b6:9c:ca:bc:bd:62:2e:da:57:47:b8:
         25:9e:a0:34:d9:6b:66:a3:e6:c7:52:d2:9a:27:54:43:7f:77:
         b6:9c:3a:90:62:57:fb:ab:eb:b8:76:da:88:90:7d:02:18:d0:
         17:18:90:48:be:1d:ca:2a:ca:0b:c3:ae:d4:48:7d:85:ac:6e:
         a3:fd:37:16:7e:da:82:1c:cb:35:f8:6b:7b:a8:eb:c8:66:48:
         2c:8d:1b:9d:64:49:9c:79:36:d2:21:43:36:e1:45:40:ee:26:
         1d:f0:a8:e0:e1:9f:c0:8d:33:16:0f:cd:9e:53:c6:7e:7e:e9:
         fc:f4:d9:e0:34:fe:f0:0f:e5:ed:64:9d:1d:9b:50:be:38:6a:
         a0:41:c5:99:64:e4:fc:ec:b5:02:b0:96:0b:30:a8:c2:32:46:
         57:4b:ec:9d:6b:e5:bd:56:84:da:61:f7:47:50:a6:fa:a8:e9:
         a9:b3:8e:d7:69:11:fc:61:2c:67:9c:f6:99:e7:03:55:27:86:
         c8:27:0f:9f:cd:96:08:08:59:22:50:47:04:55:81:08:d3:02:
         c6:09:69:ee:0c:3a:b2:e0:a4:84:29:c1:59:8e:70:b3:6d:5a:
         e6:11:0c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----