Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F58BCAAB7ED11F1B6103DFBCE1D38B0.roa
File:                     7F58BCAAB7ED11F1B6103DFBCE1D38B0.roa (raw, json)
Hash identifier:          Em6Als5se7SELxOvawvFkQdPiDYgLm1TWl0ZUWC5Bh8=
Subject key identifier:   CE:07:A5:AB:6B:60:69:1A:F4:18:3F:12:D3:E1:80:64:4B:6E:F6:D3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01EA97
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F58BCAAB7ED11F1B6103DFBCE1D38B0.roa
Signing time:             Thu 24 Sep 2026 07:56:50 +0000
ROA not before:           Thu 24 Sep 2026 07:56:46 +0000
ROA not after:            Sun 01 Nov 2026 07:56:46 +0000
asID:                     62240
IP address blocks:        154.196.18.0/24 maxlen: 24
                          154.196.22.0/24 maxlen: 24
                          154.196.25.0/24 maxlen: 24
                          154.196.26.0/24 maxlen: 24
                          154.196.27.0/24 maxlen: 24
                          154.196.28.0/24 maxlen: 24
                          154.196.48.0/24 maxlen: 24
                          154.196.49.0/24 maxlen: 24
                          154.196.50.0/24 maxlen: 24
                          154.196.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125591 (0x1ea97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 24 07:56:46 2026 GMT
            Not After : Nov  1 07:56:46 2026 GMT
        Subject: CN=6ab4d7c2-c818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:23:7e:6b:c6:dc:2a:09:98:33:80:52:12:df:
                    8c:c1:ac:35:9d:2d:22:ee:43:dd:3e:5d:78:aa:f5:
                    00:2b:45:6d:9a:b6:14:77:68:9e:81:86:53:a9:90:
                    a9:f1:2b:11:c7:5e:27:dd:c7:b5:78:17:95:a2:2f:
                    2a:8c:50:ff:15:f5:ff:20:6f:f1:b6:51:8d:40:53:
                    f1:79:97:2f:0c:70:d3:fa:ff:81:52:fb:bd:25:e8:
                    8b:f0:fc:57:bd:0d:36:62:22:97:22:48:e3:a9:01:
                    4d:5e:15:61:44:4e:c2:ef:e2:ea:80:46:99:9d:43:
                    0a:a6:c9:4e:c4:6d:cb:dc:e2:15:4d:55:7f:cd:44:
                    f8:f9:2e:4b:8f:b2:6d:57:02:24:d3:2f:a0:15:9d:
                    35:35:aa:d3:f4:ca:b8:24:0d:71:a9:a9:77:63:e2:
                    27:76:ac:75:ef:ac:53:89:26:d3:c4:67:c5:28:aa:
                    9f:df:35:5b:ab:a4:15:f2:99:cb:7f:7f:50:be:e6:
                    ad:ad:f6:09:77:e2:0d:b3:b3:08:e4:f2:9d:f4:9c:
                    db:0b:d1:fd:e1:cb:7e:35:a9:8b:21:a3:4d:68:8c:
                    d2:1f:81:be:67:20:e2:11:dd:2f:de:60:0a:8c:52:
                    55:81:d4:4a:8c:bf:a1:39:c9:7d:a4:82:4a:e3:de:
                    ed:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:07:A5:AB:6B:60:69:1A:F4:18:3F:12:D3:E1:80:64:4B:6E:F6:D3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F58BCAAB7ED11F1B6103DFBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.18.0/24
                  154.196.22.0/24
                  154.196.25.0-154.196.28.255
                  154.196.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:dd:11:c4:e2:41:d8:b3:f3:d3:94:7f:74:ed:1d:b3:9c:34:
         b2:cc:0b:32:da:16:88:03:38:75:d8:16:e4:2f:0f:22:26:cc:
         00:3e:2a:56:c3:18:cd:aa:22:63:3f:0d:30:bc:c9:14:ba:94:
         18:fc:97:85:10:44:7b:4d:1f:46:29:e0:49:c3:f0:ce:dd:d9:
         e2:f6:31:34:01:c4:5c:40:a0:ce:ca:ed:30:9e:b8:9d:57:d7:
         ab:8f:37:00:6c:1c:95:1a:05:57:95:0a:13:e6:5d:5e:9b:66:
         81:5d:d2:08:0e:5d:f2:13:4d:ff:d8:ca:24:5d:05:d2:f5:74:
         30:72:ee:c7:e7:00:17:c1:23:f9:ef:9d:8d:b2:4d:b4:8b:b2:
         6f:09:9a:3c:bb:17:51:30:69:7b:dc:97:00:46:38:af:e1:5a:
         3a:90:1f:0b:87:f6:3a:c4:ad:41:77:c4:57:e1:9a:69:ec:4e:
         f9:a5:a1:09:2a:48:cb:1c:de:ed:af:c1:91:af:4e:d1:16:e5:
         18:82:53:cb:f7:dd:93:a2:3b:52:9d:40:b2:81:29:d3:2f:e2:
         d6:26:b9:7f:1e:78:59:9d:f9:8c:33:ba:cf:62:bb:b7:4a:33:
         56:37:a5:8a:34:55:18:cd:d3:21:ac:83:49:c9:7c:58:d2:e7:
         6a:7b:c4:8e
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIDAeqXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwOTI0MDc1NjQ2WhcNMjYxMTAxMDc1NjQ2WjAYMRYw
FAYDVQQDEw02YWI0ZDdjMi1jODE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0iN+a8bcKgmYM4BSEt+Mwaw1nS0i7kPdPl14qvUAK0VtmrYUd2iegYZT
qZCp8SsRx14n3ce1eBeVoi8qjFD/FfX/IG/xtlGNQFPxeZcvDHDT+v+BUvu9JeiL
8PxXvQ02YiKXIkjjqQFNXhVhRE7C7+LqgEaZnUMKpslOxG3L3OIVTVV/zUT4+S5L
j7JtVwIk0y+gFZ01NarT9Mq4JA1xqal3Y+Indqx176xTiSbTxGfFKKqf3zVbq6QV
8pnLf39QvuatrfYJd+INs7MI5PKd9JzbC9H94ct+NamLIaNNaIzSH4G+ZyDiEd0v
3mAKjFJVgdRKjL+hOcl9pIJK497teQIDAQABo4ICvzCCArswHQYDVR0OBBYEFM4H
patrYGka9Bg/EtPhgGRLbvbTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83RjU4QkNBQUI3RUQxMUYxQjYxMDNERkJDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAmsQSAwQAmsQWMAwDBACa
xBkDBACaxBwDBAKaxDAwDQYJKoZIhvcNAQELBQADggEBAEbdEcTiQdiz89OUf3Tt
HbOcNLLMCzLaFogDOHXYFuQvDyImzAA+KlbDGM2qImM/DTC8yRS6lBj8l4UQRHtN
H0Yp4EnD8M7d2eL2MTQBxFxAoM7K7TCeuJ1X16uPNwBsHJUaBVeVChPmXV6bZoFd
0ggOXfITTf/YyiRdBdL1dDBy7sfnABfBI/nvnY2yTbSLsm8Jmjy7F1EwaXvclwBG
OK/hWjqQHwuH9jrErUF3xFfhmmnsTvmloQkqSMsc3u2vwZGvTtEW5RiCU8v33ZOi
O1KdQLKBKdMv4tYmuX8eeFmd+Ywzus9iu7dKM1Y3pYo0VRjN0yGsg0nJfFjS52p7
xI4=
-----END CERTIFICATE-----