Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76ED4B48C3BA11F1881AF50FCF1D38B0.roa
File:                     76ED4B48C3BA11F1881AF50FCF1D38B0.roa (raw, json)
Hash identifier:          ES06IVv2j9RfhYwWbAulHW4XGHNGxWTFsSCRkxEMwzQ=
Subject key identifier:   62:27:38:89:DD:53:87:BF:E3:58:E7:B2:0E:93:C5:8F:54:F5:CB:FF
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01ED06
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76ED4B48C3BA11F1881AF50FCF1D38B0.roa
Signing time:             Fri 09 Oct 2026 08:21:45 +0000
ROA not before:           Fri 09 Oct 2026 08:21:41 +0000
ROA not after:            Sat 09 Oct 2027 08:21:41 +0000
asID:                     132839
IP address blocks:        154.201.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126214 (0x1ed06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  9 08:21:41 2026 GMT
            Not After : Oct  9 08:21:41 2027 GMT
        Subject: CN=6ac8a419-4943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5e:e3:a0:d1:11:97:1c:5d:ad:70:29:cc:49:
                    17:30:74:16:cd:24:ac:40:33:ea:11:5a:09:78:cc:
                    38:f5:70:89:81:d8:36:fb:ef:04:6c:24:56:9c:7a:
                    ab:f6:49:60:2f:a0:79:15:05:4b:1b:bc:1e:28:20:
                    b0:b5:97:aa:5c:ad:a6:ec:3e:5e:88:66:bd:4b:7b:
                    10:97:4a:01:0b:b5:d0:dd:e3:7c:57:be:4b:4d:51:
                    77:9d:67:6f:4a:30:90:1f:79:e5:35:9b:17:32:3f:
                    fe:df:0a:2b:66:a8:10:0d:63:2e:7a:5e:77:36:b0:
                    c6:05:f3:0f:e9:7b:5b:8b:0e:29:54:99:9f:ee:b3:
                    e9:da:1d:91:d3:17:74:14:f0:45:cc:b6:34:2d:23:
                    51:66:14:7a:d6:b2:15:a5:c6:de:c9:b4:dd:10:c7:
                    85:36:9c:17:bc:4a:58:58:83:5e:00:a6:10:47:69:
                    bd:4b:75:ac:49:ac:0e:29:6d:1c:e1:5f:dc:70:e8:
                    90:de:d4:7d:69:84:76:ef:ea:34:86:fd:03:cd:58:
                    26:91:32:23:f6:6a:65:b2:5b:c6:7f:17:dc:9b:25:
                    4f:81:35:d3:16:e7:e3:2b:12:11:a4:c5:3e:0a:97:
                    e8:2c:b9:a3:a7:c1:78:ca:32:13:6a:b8:53:55:12:
                    80:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:27:38:89:DD:53:87:BF:E3:58:E7:B2:0E:93:C5:8F:54:F5:CB:FF
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76ED4B48C3BA11F1881AF50FCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3f:67:3b:12:a1:a7:e5:7a:a4:0d:6b:89:da:2b:db:51:47:93:
         e6:42:58:d8:f6:23:02:4f:b1:e5:16:0b:34:a0:63:43:62:f5:
         d2:dd:a0:c6:f6:6e:5c:cb:2f:e4:70:24:4d:d8:a8:f0:50:e9:
         dc:f8:67:32:1b:5f:3d:02:fb:f6:48:39:f2:98:0f:c9:c9:41:
         02:cd:6c:84:b4:7f:8a:d6:dc:72:58:ed:2c:7e:f8:76:19:0b:
         ec:d7:de:8b:07:c3:59:4e:c0:0a:65:1a:de:41:a1:91:c9:62:
         30:f4:a6:4c:2b:0b:8f:9b:6c:01:ec:ee:e9:2f:99:04:5d:ae:
         f3:72:90:c6:66:7e:3d:c2:c4:0e:1e:4f:76:68:63:4c:00:aa:
         fe:56:4e:89:33:cc:30:65:f4:01:17:64:22:35:17:df:9f:01:
         15:b9:d6:43:3e:a0:47:62:57:ca:b8:5d:14:ec:60:9d:cc:46:
         71:9a:48:01:b6:4b:90:67:a1:5c:46:24:3b:ff:5a:a6:61:7c:
         e2:1f:b4:37:8d:14:45:8e:50:75:1d:8b:f1:9f:75:a3:b6:d9:
         36:54:50:1e:fb:11:ea:4d:05:85:c2:e2:44:99:3b:f6:05:e9:
         12:e5:c9:9d:ac:a2:f2:6e:13:3e:9b:d2:b3:79:e2:83:c9:f4:
         c1:65:9d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----