Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78C2FACC9C7711F1B1DBA019CF1D38B0.roa
File:                     78C2FACC9C7711F1B1DBA019CF1D38B0.roa (raw, json)
Hash identifier:          yRWRQJQXZZ+CYBVP0j5hMmag+Oj3FetH4/ayWqC1QHg=
Subject key identifier:   94:22:28:0A:96:8E:DE:8A:70:5F:B5:6B:90:C3:FA:F4:B3:AC:85:93
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E05B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78C2FACC9C7711F1B1DBA019CF1D38B0.roa
Signing time:             Thu 20 Aug 2026 09:13:57 +0000
ROA not before:           Thu 20 Aug 2026 09:13:53 +0000
ROA not after:            Sat 10 Oct 2026 09:13:53 +0000
asID:                     63099
IP address blocks:        154.200.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122971 (0x1e05b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 09:13:53 2026 GMT
            Not After : Oct 10 09:13:53 2026 GMT
        Subject: CN=6a86c555-b209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fe:35:0d:7b:ad:a7:d3:f5:94:2a:cb:87:f4:
                    35:61:1a:81:9f:86:32:8e:4f:f4:a3:f1:21:34:d0:
                    5d:2a:24:9d:39:e0:b4:b1:37:84:e2:66:7a:9a:d7:
                    a6:f0:35:d3:21:50:70:0e:95:78:e1:d9:7f:82:c1:
                    45:7f:c4:78:8b:da:45:9b:57:f8:c4:ca:74:30:ec:
                    ba:13:b1:f9:6b:5d:63:2c:f4:ee:a7:d6:4c:58:e7:
                    64:6e:d8:1e:e9:b0:76:04:32:c1:17:3c:84:75:a2:
                    d8:18:a8:7f:99:60:52:6f:de:21:ef:9b:50:e0:2f:
                    77:86:55:e0:d0:08:e1:4a:bb:5c:36:ac:0b:33:b9:
                    64:d5:42:69:5d:7e:f5:49:24:b5:13:ef:92:b6:f9:
                    90:9c:4f:5f:36:eb:47:15:3a:b4:d8:17:d3:bb:bb:
                    8d:e5:ce:14:ad:39:c4:56:af:7f:00:7d:8e:42:87:
                    a1:b5:88:17:e6:6f:4a:af:e9:e0:5f:c1:ca:cf:e4:
                    de:da:15:ca:98:e0:76:3e:69:4b:3a:3a:26:43:04:
                    89:14:36:1b:a1:a6:7a:36:a1:48:e6:e4:84:f2:7d:
                    16:9f:33:a1:60:8d:c3:7b:c4:23:ad:91:5f:0d:9d:
                    9c:25:99:af:25:fc:fd:33:3b:e6:1d:ed:d1:7e:8e:
                    4f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:22:28:0A:96:8E:DE:8A:70:5F:B5:6B:90:C3:FA:F4:B3:AC:85:93
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78C2FACC9C7711F1B1DBA019CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:f8:83:4e:df:0e:a2:c2:b3:63:ff:f3:69:8e:d0:e9:a2:23:
         74:88:9e:16:1f:18:58:20:78:af:42:a3:b0:be:3f:d0:56:22:
         eb:14:70:73:5f:63:87:18:e4:d6:f7:fb:16:f3:4c:ec:a9:3e:
         65:2b:3c:67:1c:4c:26:70:df:40:53:05:96:11:b7:46:56:3e:
         ba:9b:2e:cf:7b:ab:d5:24:9d:9c:a8:ea:82:75:cb:74:52:ce:
         3d:7f:ee:25:51:1b:c5:67:98:9e:b8:8c:d2:55:c6:6d:7d:60:
         f3:b9:bb:eb:8c:c7:13:72:d2:9a:df:da:37:06:0b:55:38:00:
         c6:b6:34:a4:36:3f:2b:7e:db:dd:a4:ce:e9:96:65:52:2f:e4:
         79:b9:10:2f:b3:bc:b5:26:a8:a5:3b:12:ef:61:2d:c3:73:8e:
         33:8f:76:c9:87:da:45:8a:96:6b:94:14:86:01:06:d1:5c:77:
         18:74:58:b8:54:f6:ba:aa:df:c9:4e:f3:5a:25:95:44:4e:12:
         a7:16:e5:c3:7e:49:5d:d9:d1:bc:3b:e4:22:cf:67:58:17:fb:
         81:1d:a0:71:66:12:ba:55:73:73:a8:0c:1b:b9:75:c0:f3:e9:
         11:af:29:4d:7e:3b:9d:77:63:30:d1:52:20:92:1d:90:3b:1c:
         1f:47:1a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----