Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D196B32C15311F1800860CFCE1D38B0.roa
File:                     7D196B32C15311F1800860CFCE1D38B0.roa (raw, json)
Hash identifier:          2P+fHNOrBHPDHSfY+f43JW/GH3xRfO8wTYoGNiq59f0=
Subject key identifier:   88:ED:62:F4:D0:A9:0E:E4:D0:B7:53:6B:34:FF:BA:2D:E2:9E:9A:04
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EC69
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D196B32C15311F1800860CFCE1D38B0.roa
Signing time:             Tue 06 Oct 2026 06:59:35 +0000
ROA not before:           Tue 06 Oct 2026 06:59:31 +0000
ROA not after:            Fri 06 Nov 2026 06:59:31 +0000
asID:                     151347
IP address blocks:        154.84.226.0/24 maxlen: 24
                          154.84.227.0/24 maxlen: 24
                          154.84.228.0/24 maxlen: 24
                          154.84.229.0/24 maxlen: 24
                          154.84.230.0/24 maxlen: 24
                          154.84.231.0/24 maxlen: 24
                          154.84.232.0/24 maxlen: 24
                          154.84.233.0/24 maxlen: 24
                          154.84.235.0/24 maxlen: 24
                          154.84.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 10:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126057 (0x1ec69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Oct  6 06:59:31 2026 GMT
            Not After : Nov  6 06:59:31 2026 GMT
        Subject: CN=6ac49c57-735c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:66:74:1a:ac:e5:9e:99:c9:c7:d4:59:2a:42:
                    c2:bb:05:e6:ca:8c:98:2e:b1:ef:27:b5:c6:76:a8:
                    bf:d2:2f:37:a8:5a:2c:f7:fc:99:73:14:d1:31:5e:
                    08:bf:49:51:94:43:02:0a:b9:7b:09:6d:cc:26:17:
                    d3:df:9b:57:3b:13:45:aa:34:52:c5:13:b5:c2:0f:
                    28:5f:a0:a1:0a:64:36:c3:72:f5:46:dd:a7:bb:40:
                    94:62:b4:55:6c:eb:ce:fe:fa:42:97:fc:04:e4:a1:
                    f1:83:ab:1a:56:41:dc:45:43:b4:ef:b1:6c:cd:d3:
                    1b:0b:61:f0:bf:51:c7:ba:14:df:ec:8d:54:95:bb:
                    e0:bc:47:ff:50:1b:ba:47:3e:9f:64:fa:ee:70:49:
                    cd:ad:7e:d5:0b:e9:e5:14:6f:c3:b8:ae:66:b1:13:
                    1a:b0:c6:ed:8c:8c:da:34:ad:58:99:51:9c:f8:03:
                    00:1c:59:ca:d7:14:b2:bb:c7:a2:fd:fc:4c:8f:fd:
                    fe:f9:b5:e0:42:84:76:65:2e:a4:4f:17:1d:f2:a1:
                    dc:d1:ec:96:7e:73:25:d7:88:4a:d2:0c:bf:ec:a7:
                    f6:f6:48:ab:1a:8a:d2:eb:63:57:20:7c:9f:83:1b:
                    55:4a:b0:55:db:31:b9:f7:3a:68:93:22:65:60:2d:
                    cb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:ED:62:F4:D0:A9:0E:E4:D0:B7:53:6B:34:FF:BA:2D:E2:9E:9A:04
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D196B32C15311F1800860CFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.226.0-154.84.233.255
                  154.84.235.0/24
                  154.84.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:b2:dc:47:99:c0:34:28:0e:75:3b:25:dd:96:5b:55:32:20:
         4f:b5:a2:60:03:e4:4a:da:d4:9a:96:8c:7d:26:05:2e:51:9e:
         56:1b:ad:10:07:55:2e:4c:94:27:36:18:04:7b:ae:b0:09:1d:
         40:15:a5:db:a3:38:89:b6:05:6d:ee:77:b2:fa:98:86:ea:ba:
         4d:54:43:af:d1:81:0c:de:49:d6:3b:68:95:78:37:78:d6:74:
         12:b9:65:a5:47:54:06:eb:1b:e2:d9:2d:a8:ac:3c:da:38:0b:
         2d:ae:09:70:1c:6b:ea:15:8d:22:0c:78:c2:a0:0e:e1:cb:5d:
         67:80:15:08:02:a7:e5:8f:d4:54:3b:31:4a:ee:1b:53:78:8e:
         38:83:c8:92:19:35:f5:d1:6b:d0:ae:9a:3a:da:ed:14:6c:3c:
         52:bb:13:8c:97:36:db:8a:2c:25:e2:bb:65:9b:ce:a4:91:97:
         f7:41:f8:21:fc:d5:9b:ed:e0:e7:dc:98:cc:a7:b5:66:1e:87:
         93:c2:17:d0:df:6a:a7:95:8a:79:63:f1:ea:a8:70:9e:c5:47:
         14:55:ec:3d:02:53:b2:e6:a1:5b:8b:37:e1:bc:37:5b:d0:95:
         d4:c4:96:10:b3:7a:36:ba:c6:be:fc:40:1c:38:ad:a6:5c:6d:
         5f:48:61:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----