Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/778C5112BEFF11F1B546411BCF1D38B0.roa
File:                     778C5112BEFF11F1B546411BCF1D38B0.roa (raw, json)
Hash identifier:          kyKjfn+6leIOlXGN/+NI+8uq1hO7wqPVa51omdQcgwM=
Subject key identifier:   2A:59:86:03:93:A3:70:A8:5B:3D:0E:B7:26:33:C5:29:58:A0:CE:0F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EBE4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/778C5112BEFF11F1B546411BCF1D38B0.roa
Signing time:             Sat 03 Oct 2026 07:53:06 +0000
ROA not before:           Sat 03 Oct 2026 07:53:02 +0000
ROA not after:            Tue 10 Nov 2026 07:53:02 +0000
asID:                     138915
IP address blocks:        154.223.27.0/24 maxlen: 24
                          154.223.28.0/23 maxlen: 24
                          154.223.30.0/24 maxlen: 24
                          154.223.32.0/24 maxlen: 24
                          154.223.33.0/24 maxlen: 24
                          154.223.34.0/23 maxlen: 24
                          154.223.37.0/24 maxlen: 24
                          154.223.40.0/23 maxlen: 24
                          154.223.42.0/24 maxlen: 24
                          154.223.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125924 (0x1ebe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  3 07:53:02 2026 GMT
            Not After : Nov 10 07:53:02 2026 GMT
        Subject: CN=6ac0b462-085e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:35:2f:70:f0:c6:79:ca:a6:74:53:04:eb:a5:
                    62:ee:42:16:a3:4f:3f:cd:5b:0f:14:2b:f7:3c:e7:
                    be:64:31:49:1f:71:c2:12:ee:26:ea:3e:ef:4e:e5:
                    5c:0e:07:14:80:8b:aa:e3:c3:56:60:e0:dd:0b:13:
                    5b:46:eb:89:12:29:1a:44:36:c1:8a:39:50:65:5a:
                    e7:74:9c:15:b4:84:66:56:fb:fe:4b:24:cb:54:46:
                    5e:6d:d0:2c:81:03:34:43:fc:10:2a:a0:b2:13:24:
                    8e:8f:67:76:30:ea:4c:98:d6:b3:38:5b:27:7e:28:
                    d1:06:41:16:45:14:bb:a9:3b:c1:84:ae:af:f7:a5:
                    bb:11:ca:34:ee:e5:ec:ce:fb:07:59:5b:2d:98:44:
                    22:0d:d9:6e:63:c1:cc:9d:6a:28:fb:86:a4:67:4d:
                    77:ab:61:46:72:ba:3e:3e:46:6c:9c:1b:9d:fe:fd:
                    64:4f:44:ec:ae:4b:0c:35:bd:ac:21:04:09:72:2d:
                    64:93:43:4c:37:51:d7:da:03:66:6e:70:20:d2:41:
                    05:a5:97:23:60:3d:b1:54:77:f6:8a:49:cc:37:b3:
                    f8:1d:24:45:47:ac:4f:c8:5d:30:3d:82:82:5c:ad:
                    29:73:98:2b:18:5f:8e:67:f2:96:be:a5:94:64:a3:
                    c7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:59:86:03:93:A3:70:A8:5B:3D:0E:B7:26:33:C5:29:58:A0:CE:0F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/778C5112BEFF11F1B546411BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.223.27.0-154.223.30.255
                  154.223.32.0/22
                  154.223.37.0/24
                  154.223.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:af:6a:63:a9:a9:31:4f:96:24:2f:14:56:76:d7:81:8d:1a:
         78:64:af:0f:a3:ea:b0:0e:c1:00:b0:3c:c9:1a:b0:30:8a:fb:
         16:34:0e:e9:d9:59:35:c9:22:26:ac:e2:02:4b:70:06:01:30:
         31:31:10:0e:f3:65:61:da:44:1e:62:5f:89:76:d3:8c:f0:ee:
         cd:00:64:16:00:8c:61:47:2c:b0:1b:89:07:a0:f5:e3:85:62:
         de:d9:dd:11:74:a0:a9:8c:a9:91:8f:46:49:01:01:04:e6:d0:
         d5:74:fe:41:0f:13:17:61:a2:33:a3:72:11:86:f1:07:94:a0:
         a7:22:9e:cb:f8:10:a5:13:64:e5:e3:45:8f:1a:85:55:af:8b:
         7f:fa:1d:7b:37:da:f5:1c:86:fd:aa:7c:65:fd:c0:70:f3:9a:
         49:da:16:19:b6:86:eb:41:71:2a:24:06:a7:cd:65:9e:de:3e:
         3f:39:0c:3e:bc:03:84:9d:34:0b:5b:1e:24:a0:7f:2b:6f:6e:
         53:61:45:87:30:61:72:2c:8c:86:7b:66:a6:b8:f8:56:f6:f1:
         db:11:7e:e4:74:62:6d:6a:6c:be:30:c1:eb:29:4c:ad:3d:a5:
         01:02:63:68:8d:e9:bb:30:a0:82:16:27:0b:a3:87:35:95:47:
         ac:40:9c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----